Data protection
Article 5
1. Each Member State shall ensure that the established rules on data protection are applied also within the procedure on exchange of information provided for by this Decision. 2. The use of information which has been exchanged directly or bilaterally under this Decision shall be subject to the national data protection provisions of the receiving Member State, where the information shall be subject to the same data protection rules as if they had been gathered in the receiving Member State. The personal data processed in the context of the application of this Decision shall be protected in accordance with the Council of Europe Convention of 28 January 1981 for the Protection of Individuals with regard to Automatic Processing of Personal Data, and, for those Member States which have ratified it, the Additional Protocol of 8 November 2001 to that Convention, regarding Supervisory Authorities and Transborder Data Flows. The principles of Recommendation No R(87) 15 of the Council of Europe Regulating the Use of Personal Data in the Police Sector should also be taken into account when law enforcement authorities handle personal data obtained under this Decision.