Processing of information and personal data
Article 77
1. In relation to the processing of personal data in the Union Registry and the EUTL, the national administrators shall be regarded as controllers within the meaning of Article 4(7) of Regulation (EU) 2016/679. In relation to its responsibilities under this Regulation and the processing of personal data involved therein, the Commission shall be regarded as a controller within the meaning of Article 3(8) of Regulation (EU) 2018/1725. 2. In the case of a personal data breach detected by a national administrator, it shall without undue delay inform the central administrator and other national administrators about the nature and possible consequences of the breach and the measures taken and proposed to be taken to address the personal data breach and to mitigate the possible adverse effects. 3. In the case of a personal data breach detected by the central administrator, it shall without undue delay inform the national administrators about the nature and possible consequences of the breach and the measures taken by the central administrator and proposed to be taken by national administrators to address the personal data breach and to mitigate the possible adverse effects. 4. Arrangements on the respective responsibilities of the controllers for compliance with their data protection obligations shall be included in the terms of cooperation drawn up pursuant to Article 7(4). 5. The central administrator and Member States shall ensure that the Union Registry and the EUTL only store and process the information concerning the accounts, account holders and account representatives as set out in Table III-I of Annex III, Tables VI-I and VI-II of Annex VI, Table VII-I of Annex VII, and Table VIII-I of Annex VIII. Any other information to be provided pursuant to this Regulation shall be stored and processed outside the Union Registry or the EUTL. 6. National administrators shall ensure that information required by this Regulation but not stored in the Union Registry or the EUTL are processed in accordance with the relevant provisions of Union and national law. 7. No special categories of data as defined in Article 9 of Regulation (EU) 2016/679 and Article 10 of Regulation (EU) 2018/1725 shall be recorded in the Union Registry or the EUTL.