Commission Delegated Regulation (EU) 2020/2153 of 14 October 2020 amending Council Regulation (EU) 2017/1939 as regards the categories of operational personal data and the categories of data subjects whose operational personal data may be processed in the index of case files by the European Public Prosecutor’s Office

Article 1

In Regulation (EU) 2017/1939, the text set out in the Annex to this Regulation is added as an Annex.

Article 2

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union .

‘ANNEX

ANNEXSupplementary provisions

ANNEX ‘ANNEX Categories of data subjects and categories of operational personal data referred to in Article 49(3) A.    Categories of data subjects whose operational personal data may be processed in the index: (a) suspected or accused persons in the criminal proceedings of the EPPO; (b) persons convicted following the criminal proceedings of the EPPO; (c) natural persons who reported or are victims of offences that fall within the competence of the EPPO; (d) contacts or associates of one of the persons referred to in points (a) and (b). B.    Categories of operational personal data of the categories of data subjects referred to in points (a) and (b) of section A that may be processed in the index: (a) surname, maiden name, given names and any alias or assumed names; (b) date and place of birth; (c) nationality; (d) sex; (e) place of residence, profession and whereabouts of the person concerned; (f) social security numbers, ID-codes, driving licences, identification documents, passport data, customs and tax identification numbers; (g) description and nature of the alleged offences, the date on which they were committed and the criminal category of the offences; (h) information concerning legal persons related to identified or identifiable individuals who are the subject to an investigation conducted by the European Public Prosecutor’s Office; (i) suspected membership of a criminal organisation; (j) details of accounts held with banks and other financial institutions; (k) telephone numbers, SIM-card numbers, email addresses, IP addresses, and account and user names used on online platforms; (l) vehicle registration data; (m) identifiable assets owned or utilised by the person, such as crypto-assets and real estate. C.    Categories of operational personal data of the categories of data subjects referred to in point (c) of section A that may be processed in the index, limited to what is necessary and proportionate in order for the EPPO to perform its investigative and prosecutorial tasks: (a) surname, maiden name, given names and any alias or assumed names; (b) date and place of birth; (c) nationality; (d) sex; (e) place of residence, profession and whereabouts of the person concerned; (f) ID-codes, identification documents, and passport data; (g) description and nature of the offences involving or reported by the person concerned, the date on which the offences were committed and the criminal category of the offences. D.    Categories of operational personal data of the categories of data subjects referred to in point (d) of section A that may be processed in the index, limited to what is necessary and proportionate in order for the EPPO to perform its investigative and prosecutorial tasks: (a) surname, maiden name, given names and any alias or assumed names; (b) date and place of birth; (c) nationality; (d) sex; (e) place of residence, profession and whereabouts of the person concerned; (f) ID-codes, identification documents, and passport data.’