1. In accordance with Article 25(1) of Regulation (EU) No 2018/1725, any restriction shall only be applied to safeguard:
— | the prevention, investigation, detection and prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security; |
— | the internal security of Union institutions and bodies, including of their electronic communications networks; |
— | the protection of judicial proceedings; |
— | the prevention, investigation, detection and prosecution of breaches of ethics for regulated professions; |
— | the protection of the data subject or the rights and freedoms of others; |
2. Any restriction shall be necessary and proportionate in a democratic society and respect the essence of the fundamental rights and freedoms.
3. A necessity and proportionality test shall be carried out based on the present internal rules. It shall be documented through an internal assessment note for accountability purposes on a case by case basis.
4. Restrictions shall be duly monitored and a periodical revision shall be done every six months.
5. Restrictions shall be lifted as soon as the circumstances that justify them no longer apply.
6. The risk to the rights and freedoms of the data subject is the temporary limitation of the effective exercise of the data subject’s rights, inter alia, to information, erasure or defence, as guaranteed by the Regulation (EU) 2018/1725. These risks shall be taken into account in the scope of the necessity and proportionality test mentioned under paragraph 3 of this Article.