Opinion of 23 April 2014 on the notification for prior checking received from the Data Protection Officer of the European Central Bank (ECB) concerning the selection of the members and alternates for the Administrative Board of Review (Single Supervisory Mechanism) (Case 2014-0394)
Opinion of 1 July 2009 on a notification for prior checking regarding training evaluation (Case 2009-220)
The processing of personal data under analysis relates to evaluation of in-house training courses that are delivered by external consultants and evaluation of external training activities attended by ECB staff members at an external institution. The purpose of the processing is to ensure good and constant quality management as well as to control the content of training delivered to ECB staff members.
The EDPS concluded that there was no reason to believe that there is a breach of the provisions of Regulation 45/2001 providing certain recommendations are taken into account. As concerns information to be given to the data subject, a number of information items were missing in order to ensure compliance with the Regulation. As regards the retention of data, the ECB should consider adjusting the existing policy to the duration of the contracts and thus retain the relevant data for a reasonable period of three or four years. With regard to security measures, EDPS suggested that the ECB carries out an assessment on how the implemented security measures for this particular processing through the ERP information system suit the requisites provided in article 22.2 of Regulation (EC) 45/2001.
Opinion of 26 February 2007 on a notification for prior checking on investigation procedures regarding the use of mobile telephones (Case 2004-272)
The EDPS has issued an opinion on this procedure which concludes that on a general basis the procedure complies with the principles established in the data protection regulation. However the EDPS did make some recommendations mainly as concerns the conservation periods for storing the data and information on the processing of personal data to be included in the administrative circular. The circular is currently in the process of modification and will reflect these recommendations accordingly. The EDPS also recommended that should the data be used for statistical purposes, the reference to the phone number should be removed from the monthly reports.
Opinion on a notification for prior checking received from the Data Protection Officer of the the European Central Bank (ECB) regarding probation, conversion of fixed-term contracts, annual salary and bonus review as well as additional salary adjustment (Cases 2011-1105, 1106, 1107 and 2014-0774)
Opinion of 14 February 2008 on a notification for prior checking related to the extension of a pre-existing access control system by an iris scan technology for high secure business areas (Case 2007-501)
Opinion of 13 February 2007 on a notification for prior checking on Investigation procedures regarding the use of office telephones (Case 2004-271)
The EDPS has issued an opinion on this procedure which concludes that on a general basis the procedure complies with the principles established in the data protection regulation. However the EDPS did make some recommendations mainly as concerns the conservation periods for storing the data and information on the processing of personal data to be included in the administrative circular. The circular is currently in the process of modification and will reflect these recommendations accordingly.
Prior-checking Opinion regarding the use of thermal imaging cameras and the auto-track functionality of pan-tilt cameras at the European Central Bank (case 2015-0938)
This case marks the first prior-checking Opinion involving the assessment of a data protection impact assessment (DPIA).
The Opinion regards the use of thermal imaging cameras and the auto-track functionality of pan-tilt cameras at the European Central Bank (ECB). Under the EDPS Video-surveillance Guidelines such "high-tech video-surveillance tools" are subject to prior checking and permissible only subject to a DPIA. The DPIA conducted by the ECB allowed the EDPS to assess the permissibility of the technique used by the ECB.
The EDPS concluded that, because of the comprehensiveness of the information provided in the notification, of the outcome of the assessment and of the circumstances driving the ECB to apply these measures, operations may start before certain additionally recommended data protection safeguards have been implemented.
Opinion of 4 June 2007 on a notification for prior checking on recruitment procedure (Case 2007-3)
Le CEPD a procédé au contrôle préalable du traitement des données à caractère personnel dans le cadre de la procédure de recrutement de la Banque centrale européenne, où un système de recrutement en ligne est mis en place. Tout candidat ayant déposé son dossier de candidature définitif devient une "personne concernée" par la protection des données à caractère personnel. Le CEPD a examiné le formulaire de candidature ainsi que la procédure de candidature en ligne, la durée de conservation des données tout comme les moyens dont les personnes concernées disposent pour exercer leurs droits ainsi que les informations qu'elles reçoivent. Les recommandations du CEPD portent essentiellement sur les informations qui doivent être communiquées aux candidats dans la déclaration de confidentialité et dans le guide du candidat, sur la conservation des actes de candidatures et autres documents et sur le contenu des contrats conclus avec les sous-traitants pour ce qui est des obligations en matière de protection des données.