Specific responsibilities of the Commission, customs authorities and partner competent authorities
Article 14
1. The Commission shall be responsible for: (a) ensuring privacy by design and privacy by default when developing EU CSW-CERTEX in accordance with Article 5(1) of Regulation (EU) 2022/2399; (b) establishing and keeping up to date the list of all recipients of personal data; (c) ensuring that persons authorised to process personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; (d) nominating a contact point for data protection matters; (e) assisting customs authorities and partner competent authorities in responding to data subject requests, where needed. 2. Customs authorities shall be responsible for: (a) ensuring privacy by design and privacy by default in developing the interconnection between their national single window environment for customs and EU CSW-CERTEX, in accordance with Article 5(4) and (5) of Regulation (EU) 2022/2399; (b) establishing and keeping up to date the list of all recipients of personal data (in the Member States, third countries and international organisations); (c) ensuring that persons authorised to process personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; (d) cooperating with the national supervisory authority in the performance of their tasks; (e) nominating a contact point for data protection matters; (f) responding to data subject requests when those requests are addressed to them and cooperating with partner competent authorities and the Commission as necessary in accordance with Article 16(5) of this Regulation. 3. Each partner competent authority shall be responsible for: (a) establishing and keeping up to date the list of all recipients of personal data (in the Member States, third countries and international organisations); (b) ensuring that persons authorised to process personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; (c) nominating a contact point for data protection matters; (d) responding to data subject requests when those requests are addressed to them and cooperating with customs authorities and the Commission as necessary in accordance with Article 16(5) of this Regulation.