Decision of the Management Board of the European Insurance and Occupational Pensions Authority of 23 May 2019 on internal rules concerning restrictions of certain rights of data subjects in relation to processing of personal data in the framework of the functioning of EIOPA Article 7: Right of rectification, erasure and restriction of processing

Article 7 - Right of rectification, erasure and restriction of processing

‹

Article 7

Right of rectification, erasure and restriction of processing

›

1. In duly justified cases and under the conditions stipulated in this decision, the right to rectification, erasure and restriction may be restricted by the controller in the context of the following processing operations, where necessary and appropriate:

((a))

the performance of administrative inquiries and disciplinary proceedings;

((b))

preliminary activities related to cases of potential irregularities reported to OLAF;

((c))

whistleblowing procedures;

((d))

(formal and informal) procedures for cases of harassment;

((e))

processing internal and external complaints;

((f))

internal audits;

((g))

the investigations carried out by the DPO in line with Article 45(2) of Regulation (EU) 2018/1725;

((h))

(IT) security investigations handled internally or with external involvement (e.g. CERT-EU).

2. Where EIOPA restricts, wholly or partly, the application of the right to rectification, erasure and restriction of processing referred to in Articles 18, 19(1) and 20(1) of Regulation (EU) 2018/1725, it shall take the steps set out in Article 6(2) of this Decision and register the record in accordance with Article 6(3) thereof.