The following article is inserted in Regulation (EU) No 1284/2009:
‘Article 16a
1. The Council, the Commission and the High Representative of the Union for Foreign Affairs and Security Policy (the “High Representative”) may process personal data in order to carry out their tasks under this Regulation. These tasks include:
(a)
as regards the Council, preparing and making amendments to Annex I;
(b)
as regards the High Representative, preparing amendments to Annex I;
(c)
as regards the Commission:
(i)
adding the contents of Annex I to the electronic consolidated list of persons, groups and entities subject to Union financial restrictive measures and in the interactive sanctions map, both publicly available;
(ii)
processing information on the impact of measures taken under this Regulation, such as the value of frozen funds and information on authorisations granted by the competent authorities.
2. The Council, the Commission and the High Representative may process, where applicable, relevant data relating to criminal offences committed by listed natural persons, to criminal convictions of such persons or to security measures concerning such persons, only to the extent that such processing is necessary for the preparation of Annex I.
3. For the purposes of this Regulation, the Council, the Commission service listed in Annex II to this Regulation and the High Representative are designated as “controllers” within the meaning of point (8) of Article 3 of Regulation (EU) 2018/1725, in order to ensure that the natural persons concerned can exercise their rights under Regulation (EU) 2018/1725.’.