1. This Decision lays down internal rules relating to the conditions under which the SRB in the framework of internal security incident investigations, may restrict the application of the rights enshrined in Articles 14 to 21, 35, as well as Article 4 thereof, following Article 25 of the Regulation (EU) 2018/1725.
2. This Decision applies to the processing operation(s) of personal data by the SRB for the purpose of conducting internal security incident investigations, as well as during the monitoring of the follow-up to the outcome of these investigations.
3. The categories of data concerned are hard data (administrative details, telephone, private address, electronic communications, and traffic data and/or soft data (appraisals, opening of inquiries, reports on preliminary investigations) etc.
4. Subject to the conditions set out in this Decision, the restrictions may apply to the following rights: access, rectification, erasure and portability rights, rights of information, confidentiality of communication, and principles of the data processing operation provided that they relate to a right.