Processing of personal data
Article 22
1. The Commission shall process personal data needed for implementing this Decision in accordance with Regulation (EC) No 45/2001. 2. Notwithstanding the measures already in place at the time of adoption of this Decision and notified to the European Data Protection Supervisor ( 15 ) , any measure under this Decision involving the processing of personal data, such as relating to access and exit logs, CCTV recordings, recordings of telephone calls to duty offices or dispatch centres and similar data, which are required for reasons of security or crisis response, shall be subject to implementing rules in accordance with Article 21, which shall lay down appropriate safeguards for data subjects. 3. The Director-General of the Directorate-General for Human Resources and Security shall be responsible for the security of any processing of personal data undertaken in the context of this Decision. 4. Those implementing rules and procedures shall be adopted after consultation of the Data Protection Officer and the European Data Protection Supervisor in accordance with Regulation (EC) No 45/2001.