Functions and responsibilities of the Commission
In addition to the tasks listed in Article 2(1), the Commission shall be responsible for carrying out the following tasks in relation to the Information System:
(a)
providing knowledge, training, and support, including technical assistance, to Information System users and Information System actors in relation to the use of the Information System;
(b)
granting access to Information System actors designated by each Member State;
(c)
granting access to Information System users, who are under the supervision of the competent authorities;
(d)
processing personal data in the Information System, where required in this Regulation, or for the implementation and enforcement under Regulation (EU) 2023/1115;
(e)
providing webservices for Information System users to submit and manage Due Diligence Statements in the Information System in an automated manner;
(f)
providing webservices for Member States competent authorities to perform tasks on submitted Due Diligence Statements in the Information System in an automated manner.
(g)
providing the electronic interface pursuant to Article 28 of Regulation (EU) 2023/1115;
(h)
suspending and revoking access of Information System users upon request of the competent authorities of the Member State in which the Information System user is established, or, in case the user is established outside the Union, the competent authorities of the Member State with which the Information System user is associated according to its identifier provided upon registration in the Information system.
Access rights of Information System users
1. Only registered Information System users shall have access to the Information System.
2. Authentication to the Information System shall take place via EU Login, the European Commission Authentication Service.
3. Information System users shall have access to the information in the Information System which they have submitted, or to which they have been given access by another Information System user through reference numbers and verification numbers of associated Due Diligence Statements.
Access rights of Information System actors
1. The Commission shall have access to all data, information and documents in the Information System for the purpose of producing reports and for the development, functioning and maintenance of the system.
2. The Commission shall grant and may revoke access rights to the Information System actors in case of change in competencies pursuant to Article 14(2) of Regulation (EU) 2023/1115.
3. Authentication to the Information System shall take place via EU Login, the European Commission Authentication Service.
4. Information System actors shall put in place appropriate means to ensure that individual users representing Information System actors in the Information System are allowed to access personal data processed in the Information system only where strictly necessary for the implementation and enforcement under Regulation (EU) 2023/1115.
5. Information System actors shall have access to all relevant information in the Information System which is necessary for the purpose of fulfilling their obligations and tasks under Regulation (EU) 2023/1115.
