Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗
Information
The delegated controller, in cooperation with the DPC, shall inform the DPO when it consults or informs the EDPS in accordance with Regulation (EU) 2018/1725, and in particular pursuant to Articles 40 and 41 of that Regulation. In addition, the delegated controller, operational controller or DPC shall inform the DPO of any other direct interactions with EDPS related to the implementation of Regulation (EU) 2018/1725.
Register
1. The DPO shall ensure that the register of processing operations of the Commission is accessible through the website of the DPO on the Commission’s Intranet and through the website of the DPO on the Europa website. 2. Delegated controllers shall notify the records of their processing operations, through their DPC, to the DPO by using the online notification system of the Commission, accessible through the website of the DPO on the Commission’s Intranet.
Investigation procedure
1. The requests for an investigation referred to in Article 6(e) shall be addressed to the DPO in writing. Within 15 working days following receipt, the DPO shall send an acknowledgement of receipt to the person who commissioned the investigation, and verify whether the request is to be treated as confidential to ensure confidentiality governing the request, unless the data subjects concerned gives their unambiguous consent for the request to be handled otherwise. In the event of manifest abuse of the right to request an investigation, the DPO shall not be obliged to report to the requester. 2. The DPO shall request a written statement on the matter from the delegated controller who is responsible for the data-processing operation in question. The delegated controller shall provide their response to the DPO within 15 working days. The DPO may request complementary information from the delegated controller, the processor or other parties within 15 working days. 3. The DPO shall report back to the person who commissioned the investigation no later than three months following the receipt of the request. This period may be suspended until the DPO has obtained all necessary information that he or she may have requested. 4. No one shall suffer prejudice on account of a matter brought to the attention of the DPO alleging a breach of the provisions of Regulation (EU) 2018/1725.
Administration and management
1. The DPO shall be attached for administrative purposes to the Secretariat-General. In this context, the DPO shall participate in preparing the Annual Management Plan and the Draft Preliminary Budget of the Secretariat-General. 2. The DPO shall be the reporting officer for the staff of the Data Protection Office. The Deputy Secretary-General shall be the countersigning officer. The DPO shall participate in the management coordination of the Secretariat-General as appropriate.
Articles on this page are reproduced verbatim from official open data. See the attribution line.
Source: EUR-Lex (Publications Office of the EU), © European Union, reuse permitted under Commission Decision 2011/833/EU.