Transmission of operational personal data to institutions, bodies, offices and agencies of the Union
Article 54
1. Subject to any further restrictions pursuant to this Regulation, in particular Article 53, the EPPO shall only transmit operational personal data to another institution, body, office or agency of the Union if the data are necessary for the legitimate performance of tasks covered by the competence of the other institution, body, office or agency of the Union. 2. Where the operational personal data are transmitted following a request from the other institution, body, office or agency of the Union, both the controller and the recipient shall bear the responsibility for the legitimacy of this transfer. The EPPO shall be required to verify the competence of the other institution, body, office or agency of the Union and to make a provisional evaluation of the necessity for the transmission of the operational personal data. If doubts arise as to this necessity, the EPPO shall seek further information from the recipient. The other institution, body, office or agency of the Union shall ensure that the necessity for the transmission of the operational personal data can be subsequently verified. 3. The other institution, body, office or agency of the Union shall process the operational personal data only for the purposes for which they were transmitted.