ACT : Implementing rules relating to Regulation 45/2001/EC of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data – European Parliament Bureau decision.

CONTENT : this Decision lays down the general rules governing the implementation of the Regulation in the case of the European Parliament. In particular, it supplements the provisions set out in the Regulation which relate to the tasks, duties and powers of the European Parliament's Data Protection Officer(s). Furthermore, the Decision lays down the detailed rules pursuant to which a data subject may exercise his or her rights, the procedure for notifying a processing operation and the procedure for obtaining access to the register of processing operations kept by the Data Protection Officer.

The Data Protection Officer's tasks shall be as follows:

- Provision of information: the Officer shall inform the European Parliament's data controllers and data subjects of their rights and obligations under the Regulation, for which purpose he or she shall provide the necessary information concerning the legislation in force, current procedures and existing notified files, and he or she shall facilitate the exercise of those rights and the fulfilment of those obligations.

- Requests from the European Data Protection Supervisor: the Officer shall respond to requests from the European Supervisor.

- Cooperation with the European Data Protection Supervisor: within his or her area of responsibility, the Officer shall cooperate with the European Supervisor at the latter's request or on his or her own initiative, particularly as regards dealing with complaints and carrying out inspections.

- Provision of information to the European Data Protection Supervisor: the Officer shall inform the European Supervisor regarding any new development at the European Parliament which has a bearing on the protection of personal data.

- Register of processing operations: the Officer shall, pursuant to Article 26 of the Regulation, keep a register of the processing operations carried out by the data controllers and shall ensure that that register may be inspected by any individual.

- Notification of processing operations which are likely to present specific risks: the Officer shall notify the European Data Protection Supervisor of any processing operation which is likely to present specific risks. Should there be any doubt regarding the need for a prior check, the Data Protection Officer shall consult the European Data Protection Supervisor.

- Upholding data subjects' rights and freedoms: the Data Protection Officer shall ensure that processing operations do not undermine the rights and freedoms of data subjects and that no person suffers loss or damage for having brought to the Data Protection Officer's attention a matter which in the view of that person constitutes an infringement of the Regulation.

ENTRY INTO FORCE : 07/12/2005.

LEGISLATIVE ACT : Council Decision 2004/644/EC adopting implementing rules concerning Regulation 45/2001/EC of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data.

CONTENT : Regulation 45/2001/EC sets out the principles and rules applicable to all Community institutions and bodies and provides for the appointment by each Community institution and Community body of the Data Protection Officer. This Decision lays down further implementing rules concerning Regulation 45/2001/EC as regards the Council of the EU. It defines the tasks, duties and powers of the Data Protection Officer. It also specifies the procedures for the exercise of rights of the data subjects.

The Deputy Secretary-General of the Council appoints the DPO and registers him with the European Data Protection Supervisor. The DPO is directly attached to the Deputy Secretary-General of the Council. The term of office of the DPO is three years and is renewable twice.

ENTRY INTO FORCE : 22/09/2004 .

PURPOSE: to ensure the introduction, the application and the monitoring of the data protection rules in the Community institutions and bodies. COMMUNITY MEASURE: Regulation 45/2001/EC of the European Parliament and of the Council on the protection of individuals and bodies and on the free movement of such data. CONTENT: in accordance with the present Regulation, the institutions and the Community bodies must ensure the protection of the fundamental freedoms of natural persons, and in particular the right to privacy with respect to the processing of personal data, in order to ensure the free flow of personal data in the Community. The Regulation covers: - the general rules on the lawfulness of the processing of personal data : data quality, lawfulness of processing, change of purpose, transfer of personal data within and between Community institutions or bodies, transfer of personal data to recipients, other than Community institutions and bodies, special categories of processing, information to be given to the data subject, exemptions and restrictions, confidentiality and security of processing, data protection officer, prior checking by the European Data Protection Supervisor and obligation to cooperate; - remedies; - protection of personal data and privacy in the context of internal telecommunications networks; - independent supervisory authority (appointment, independence, professional secrecy, duties, powers). ENTRY INTO FORCE : 22.01.2001.