Exchange of information and documents
1. The Commission, in collaboration with Member States, shall establish an information system to enable the secure exchange of data of common interest between the Commission and each Member State.
2. The Commission shall ensure that there is an appropriate secure electronic system in which key information and report on monitoring and evaluation can be recorded, maintained and managed.
3. The Commission shall adopt implementing acts laying down rules for the operation of the system referred to in paragraph 1. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 153(2).
Processing and protection of personal data
1. Without prejudice to Articles 98, 99 and 100 of Regulation (EU) 2021/2116, Member States and the Commission shall collect personal data for the purpose of carrying out their respective management, control, monitoring and evaluation obligations under this Regulation, and in particular those laid down in Titles VI and VII, and shall not process those data in a way which is incompatible with this purpose.
2. Where personal data are processed for monitoring and evaluation purposes under Title VII using the secure electronic system referred to in Article 150, they shall be made anonymous.
3. Personal data, including when they are processed by providers of farm advisory services referred to in Article 15, shall be processed in accordance with Regulations (EU) 2016/679 and (EU) 2018/1725. In particular, such data shall not be stored in a form which permits identification of data subjects for longer than is necessary for the purposes for which they were collected or for which they are further processed, taking into account the minimum retention periods laid down in the applicable national and Union law.
4. Member States shall inform the data subjects that their personal data may be processed by national and Union bodies in accordance with paragraph 1 and that in this respect they enjoy the data protection rights provided by Regulations (EU) 2016/679 and (EU) 2018/1725.
