Data Protection in the EU Institutions and Bodies

Regulation 2018/1725 [1] contains the rules applicable to the processing of personal data by European Union institutions, bodies, offices and agencies (e.g., the EMA).

• It is aligned with the General Data Protection Regulation and the Data Protection Law Enforcement Directive.
• It specifies the role of the European data protection supervisor (EDPS, established by Regulation (EC) No 45/2001). The EDPS is an independent EU authority responsible for monitoring the application of data protection rules within European Institutions and for investigating complaints.

The European Commission has appointed a Data Protection Officer (DPO) who is responsible for monitoring and the application of data protection rules in the European Commission.

References

[1] Regulation 2018/1725. https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1552577087456&uri=CELEX:32018R1725