Rules on privacy and data protection
Article 6
1. The PSAPs, including eCall PSAPs, shall be regarded as data controllers within the meaning of Article 2(d) of Directive 95/46/EC. Where the eCall data is to be sent to other emergency control centres or service partners pursuant to Article 3(5), the latter shall also be considered as data controllers. Member States shall ensure that the processing of personal data in the context of the handling of the eCalls by the PSAPs, the emergency services and service partners is carried out in accordance with Directives 95/46/EC and 2002/58/EC, and that this compliance is demonstrated to the national data protection authorities. 2. In particular, Member States shall ensure that personal data are protected against misuse, including unlawful access, alteration or loss, and that protocols concerning personal data storage, retention duration, processing and protection are established at the appropriate level and properly observed.