Legal provisions of COM(2018)636 - Verification procedure on infringements of data protection rules in the context of European elections - Contribution to the Leaders’ meeting, September 2018

Please note

This page contains a limited version of this dossier in the EU Monitor.


Article 1

Regulation (EU, Euratom) No 1141/2014 is amended as follows:

(1)In Article 6, paragraph (5) is replaced by the following:

‘5.   The Director of the Authority shall be assisted by staff in respect of whom he or she shall exercise the powers conferred on the appointing authority by the Staff Regulations of Officials of the European Union and the powers conferred on the authority empowered to conclude contracts of employment of other servants by the Conditions of Employment of Other Servants of the Union, laid down in Council Regulation (EEC, Euratom, ECSC) No 259/68 (‘the appointing authority's powers’). The Authority may make use in any areas of its work of other seconded national experts or of other staff not employed by the Authority.

The Staff Regulations and the Conditions of Employment of Other Servants and the rules adopted by agreement between the institutions of the Union for giving effect to those Staff Regulations and Conditions of Employment of Other Servants shall apply to the staff of the Authority.

The selection of the staff shall not be liable to result in a conflict of interests between their duties at the Authority and any other official duties, and they shall refrain from any act which is incompatible with the nature of their duties.’

(2)In Article 10(3), the third subparagraph is replaced by the following:

‘The procedures laid down in the first and second subparagraphs shall not be initiated within a period of two months prior to elections to the European Parliament. That time limit shall not apply with regard to the procedure set out in Article 10a.’

(3)The following Article is inserted:

‘Article 10a

Verification procedure related to infringements of rules on the protection of personal data

1. No European political party or European political foundation shall deliberately influence, or attempt to influence, the outcome of elections to the European Parliament by taking advantage of an infringement by a natural or legal person of the applicable rules on the protection of personal data.

2. If the Authority is informed of a decision of a national supervisory authority within the meaning of point 21 of Article 4 of Regulation (EU) 2016/679 of the European Parliament and of the Council (*1) finding that a natural or legal person has infringed applicable rules on the protection of personal data, and if it follows from that decision, or if there are otherwise reasonable grounds to believe, that the infringement is linked to political activities by a European political party or a European political foundation in the context of elections to the European Parliament, the Authority shall refer this matter to the committee of independent eminent persons established by Article 11 of this Regulation. The Authority may, if necessary, liaise with the national supervisory authority concerned.

3. The committee referred to in paragraph 2 shall give an opinion as to whether the European political party or European political foundation concerned has deliberately influenced or attempted to influence the outcome of elections to the European Parliament by taking advantage of that infringement. The Authority shall request the opinion without undue delay, and no later than 1 month after being informed of the decision of the national supervisory authority. The Authority shall set a short, reasonable deadline for the committee to give its opinion. The committee shall comply with that deadline.

4. Having regard to the committee's opinion, the Authority shall decide, pursuant to point (a)(vii) of Article 27(2), whether to impose financial sanctions on the European political party or European political foundation concerned. The decision of the Authority shall be duly reasoned, in particular with regard to the committee's opinion, and shall be published expeditiously.

5. The procedure set out in this Article is without prejudice to the procedure set out in Article 10.

(*1)  Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).’"

(4)In Article 11(3), the first subparagraph is replaced by the following:

‘When requested by the Authority, the committee shall give an opinion on:

(a)any possible manifest and serious breach of the values on which the Union is founded, as referred to in point (c) of Article 3(1) and point (c) of Article 3(2), by a European political party or a European political foundation;

(b)whether a European political party or a European political foundation has deliberately influenced or attempted to influence the outcome of elections to the European Parliament by taking advantage of an infringement of the applicable rules on the protection of personal data.

In the cases referred to in points (a) and (b) of the first subparagraph, the committee may request any relevant document or evidence from the Authority, the European Parliament, the European political party or European political foundation concerned, other political parties, political foundations or other stakeholders, and it may request to hear their representatives. In the case referred to in point (b) of the first subparagraph, the national supervisory authority referred to in Article 10a shall cooperate with the committee in accordance with applicable law.’

(5)In Article 18, paragraph (2) is replaced by the following:

‘2.   The European political party and the European political foundation must, at the time of its application, comply with the obligations listed in Article 23, and, from the date of its application until the end of the financial year or of the action covered by the contribution or grant, remain registered in the Register and may not be the subject of any of the sanctions provided for in Article 27(1) and in point (a) (v), (vi) and (vii) of Article 27(2).’

(6)Article 27 is amended as follows:

(a)in point (a) of paragraph (2), the following point is added:

‘(vii)where, in accordance with the verification procedure provided for in Article 10a, it is established that a European political party or a European political foundation has deliberately influenced or attempted to influence the outcome of elections to the European Parliament by taking advantage of an infringement of the applicable rules on the protection of personal data.’;

(b)the following paragraph is added:

‘7.   Where a decision of the national supervisory authority as referred to in Article 10a has been repealed, or where a remedy against such decision has been granted, provided that all national remedies have been exhausted, the Authority shall review any sanction imposed pursuant to point (a)(vii) of paragraph 2 at the request of the European political party or European political foundation concerned.’

Article 2

This Regulation shall enter into force on the day of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in all Member States.