Dear European Data Protection Supervisor,

Under the right of access to documents in the EU treaties, as developed in Regulation 1049/2001, I am making a request for information.

An inspection carried out by the European Data Protection Supervisor (EDPS) on the websites of major EU institutions and bodies revealed data protection and data security issues in seven out of the ten websites inspected. Each of the institutions concerned has received recommendations from the EDPS on how to ensure their websites are fully compliant with data protection rules and the relevant institutions have reacted swiftly to start rectifying the problems identified. Your press release on this matter can be found here:

https://edps.europa.eu/press-publication...

I would like the finished report in which the findings of the remote investigation were produced. I believe this will serve as an excellent benchmark or template to DPOs looking to, likewise, undertake such investigations and produce reports to their respective Controllers.

Yours faithfully,

Calum Liddle

European Data Protection Supervisor

3 Attachments

Dear Mr Liddle,

 

We acknowledge the receipt of your request which was registered as an
access to document request on 6 June 2019. In accordance with Article 7(1)
of Regulation (EC) No 1049/2001 regarding public access to European
Parliament, Council and Commission documents, you will receive a reply
within 15 working days (by 28 June 2019).

 

Your case has been registered with case number 2019-0559.

 

Please note that your personal data will only be processed for the
purposes of replying to your request and in accordance with the data
protection statement set out below. You can find the full version of our
data protection notice on access to documents requests on our [1]website.

 

Yours sincerely,

 

 

  EDPS Secretariat
[2]cid:image001.png@01D4D8CD.D37C9700
[3]| Tel. (+32) 228 31900  |
Fax +32(0)22831950  | ›  
Email  [4][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[5]Twitter [6]@EU_EDPS  
[7]Website [8]www.edps.europa.eu
This email (and any
attachment) may contain
information that is internal
or confidential. Unauthorised
access, use or other
processing is not permitted.
If you are not the intended
recipient please inform the
sender by reply and then
delete all copies. Emails are
not secure as they can be
intercepted, amended, and
infected with viruses. The
EDPS therefore cannot
guarantee the security of
correspondence by email.

 

Data Protection Notice

According to Articles 15 and
16 of Regulation (EU)
2018/1725 on the protection of
natural persons with regard to
the processing of personal
data by the Union
institutions, bodies, offices
and agencies and on the free
movement of such data, please
be aware that your personal
data will be processed by the
EDPS, where proportionate and
necessary, for the purpose of
answering your request. The
legal base for this processing
operation is Regulation (EC)
1049/2001 and Recital 5 of
Decision 1247/2002/EC of the
European Parliament, of the
Council and of the Commission.
Subject to applicable rules
under EU legislation, the
personal data relating to you,
as provided in your request,
are used solely for the
purpose of replying to your
request. EDPS staff members
dealing with the request will
have access to the case file
containing your personal data
on a need-to-know basis. Your
personal data are not
disclosed outside the EDPS.
Your personal data will be
stored electronically for a
maximum of ten years after the
closure of the case, or as
long as the EDPS is under a
legal obligation to do so. You
have the right to access your
personal data held by the EDPS
and to obtain the
rectification thereof, if
necessary. Any such request
should be addressed to the
EDPS at
[9][EDPS request email]. You
may contact the data
protection officer of the EDPS
([10][email address]),
if you have any remarks or
complaints regarding the way
we process your personal data.

 

 

 

References

Visible links
1. https://edps.europa.eu/sites/edp/files/p...
3. file:///tmp/tel:+3222831900
4. mailto:[EDPS request email]
6. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
8. http://www.edps.europa.eu/
http://www.edps.europa.eu/
9. mailto:[EDPS request email]
10. mailto:[email address]

European Data Protection Supervisor

4 Attachments

Dear Mr Liddle,

 

Please find attached reply to you letter regarding access to documents
under Regulation (EC) 1049/2001.

 

Kind regards,

 

  EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900  |
Fax +32(0)22831950  | ›  
Email  [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS  
[6]Website [7]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/