Commission Regulation (EU) No 557/2013Show full title

Article 1 Subject matter

This Regulation establishes the conditions under which access to confidential data transmitted to the Commission (Eurostat) may be granted for enabling statistical analyses for scientific purposes, and the rules of cooperation between the Commission (Eurostat) and national statistical authorities in order to facilitate such access.

Article 2 Definitions

For the purposes of this Regulation, the following definitions shall apply:

(1)

‘confidential data for scientific purposes’ means data which only allow for indirect identification of the statistical units, taking the form of either secure-use files or scientific-use files;

(2)

‘secure-use files’ means confidential data for scientific purposes to which no further methods of statistical disclosure control have been applied;

(3)

‘scientific-use files’ means confidential data for scientific purposes to which methods of statistical disclosure control have been applied to reduce to an appropriate level and in accordance with current best practice the risk of identification of the statistical unit;

(4)

‘statistical disclosure control methods’ means methods to reduce the risk of disclosing information on the statistical units, usually based on restricting the amount of, or modifying, the data released;

(5)

‘access facilities’ means the physical or virtual environment and its organisational setting where access to confidential data for scientific purposes is provided;

(6)

‘national statistical authorities’ means the national statistical institutes and other national authorities responsible in each Member State for the development, production and dissemination of European statistics as designated in accordance with Regulation (EC) No 223/2009.

Article 3 General principles

The Commission (Eurostat) may grant access to confidential data for scientific purposes held by it for the development, production or dissemination of European statistics as referred to in Article 1 of Regulation (EC) No 223/2009, provided that the following conditions are satisfied:

(a)

access is requested by a recognised research entity;

(b)

an appropriate research proposal has been submitted;

(c)

the requested type of confidential data for scientific purposes has been indicated;

(d)

access is provided either by the Commission (Eurostat) or by another access facility accredited by the Commission (Eurostat);

(e)

the relevant national statistical authority which provided the data has given its approval.

Article 4 Research entities

1. Recognition of research entities shall be based on criteria referring to:

(a) the purpose of the entity; the assessment of the purpose of the entity shall be carried out on the basis of its statute, mission or other declaration of purpose; the purpose of the entity shall include reference to research;

(b) the established record or reputation of the entity as a body producing quality research and making it publicly available; the experience of the entity in carrying out research projects shall be assessed on the basis of, inter alia, available lists of publications and research projects in which the entity was involved;

(c) the internal organisational arrangements for research; the research entity shall be a separate organisation with legal personality, focused on research or a research department within an organisation; the research entity must be independent, autonomous in formulating scientific conclusions and separated from policy areas of the body it belongs to;

(d) the safeguards in place to assure security of the data; the research entity shall fulfil technical and infrastructure requirements assuring security of the data.

2. A confidentiality undertaking covering all researchers of the entity who will have access to the confidential data for scientific purposes and specifying the conditions for access, the obligations of the researchers, the measures for respecting the confidentiality of statistical data and the sanctions in the event of a breach of these obligations shall be signed by a duly designated representative of the research entity.

3. The Commission (Eurostat) shall, in cooperation with the ESS Committee, establish guidelines for the assessment of research entities, including the confidentiality undertaking referred to in Article 4(2). When duly justified, the Commission (Eurostat) shall update the guidelines, in accordance with procedural arrangements approved by the ESS Committee.

4. Reports on the assessments of research entities shall be made available to the national statistical authorities.

5. The Commission (Eurostat) shall maintain and publish on its website an updated list of recognised research entities.

6. The Commission (Eurostat) shall perform regular re-assessments of the research entities included in the list.

Article 5 Research proposal

1. The research proposal shall indicate in sufficient detail:

(a) the legitimate purpose of the research;

(b) the explanation why this purpose cannot be fulfilled using non-confidential data;

(c) the entity requesting access;

(d) the individual researchers who will have access to the data;

(e) the access facilities to be used;

(f) the data sets to be accessed, the methods of analysing them; and

(g) the intended results of the research to be published or otherwise disseminated.

2. The research proposal shall be accompanied by individual confidentiality declarations signed by researchers who will have access to the data.

3. The Commission (Eurostat) shall, in cooperation with the ESS Committee, establish guidelines for the assessment of research proposals. When duly justified, the Commission (Eurostat) shall update the guidelines, in accordance with procedural arrangements approved by the ESS Committee.

4. Reports on the assessments of research proposals shall be made available to the national statistical authorities which transmitted the confidential data concerned to the Commission (Eurostat).

Article 6 Position of national statistical authorities

1. The approval of the national statistical authority which transmitted the confidential data concerned shall be sought for each research proposal before the access is granted. The national statistical authority shall submit its position to Eurostat within four weeks from the date on which the national statistical authority received the relevant report on the assessment of the research proposal.

2. The national statistical authorities which transmitted the confidential data concerned and the Commission (Eurostat) shall, whenever possible, agree on simplifying the consultation procedure and improving its timeliness.

Article 7 Confidential data for scientific purposes

1. Access to secure-use files may be granted provided that the results of the research are not released without prior checking to ensure that they do not reveal confidential data. Access to secure-use files may be provided only within Commission (Eurostat) access facilities or other access facilities accredited by the Commission (Eurostat) to provide access to secure-use files.

2. Access to scientific-use files may be granted provided that appropriate safeguards are in place in the research entity requesting access. The Commission (Eurostat) shall publish information on the safeguards required.

3. In cooperation with the national statistical authorities, the Commission (Eurostat) shall prepare data sets for research use which target the different types of confidential data for scientific purposes. When preparing a data set for research use, the Commission (Eurostat) and the national statistical authorities shall take into account the risk and the impact of unlawful disclosure of confidential data.

Article 8 Access facilities

1. Access to confidential data for scientific purposes may be granted via access facilities accredited by the Commission (Eurostat).

2. The access facility shall be located within national statistical authorities. By way of exception, access facilities may be located outside national statistical authorities, subject to the prior explicit approval of the national statistical authorities which provided the data concerned.

3. Accreditation of access facilities shall be based on criteria referring to the purpose of the access facility, its organisational structure and standards for data security and data management.

4. The Commission (Eurostat) shall, in cooperation with the ESS Committee, establish guidelines for the assessment of access facilities. When duly justified, the Commission (Eurostat) shall update the guidelines, in accordance with procedural arrangements approved by the ESS Committee.

5. Reports on the assessments of access facilities shall be made available to the national statistical authorities. The reports shall include a recommendation on the type of confidential data to which access can be provided by the access facility. The Commission (Eurostat) shall consult the ESS Committee before deciding on the accreditation of an access facility.

6. A contract shall be signed between the duly designated representative of the access facility or of the organisation hosting the access facility and the Commission (Eurostat) determining the obligations of the access facility with respect to the protection of confidential data and the organisational measures. The Commission (Eurostat) shall be regularly informed about the activities carried out by the access facilities.

7. The Commission (Eurostat) shall maintain and publish on its website the list of accredited access facilities.

Article 9 Organisational matters

1. The Commission (Eurostat) shall regularly inform the ESS Committee of the administrative, technical and organisational measures taken to ensure the physical and logical protection of confidential data and to monitor and prevent the risk of unlawful disclosure or any use beyond the purposes for which access has been granted.

2. The Commission (Eurostat) shall publish on its website:

(a) guidelines for the assessment of research entities, research proposals and access facilities;

(b) the list of recognised research entities;

(c) the list of accredited access facilities;

(d) the list of data sets for research use with relevant documentation and the available modes of access.

Article 10 Repeal

Regulation (EC) No 831/2002 is repealed.

References to the repealed Regulation shall be construed as references to this Regulation.

Article 11 Entry into force

This Regulation shall enter into force on the 20th day following that of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 17 June 2013.

For the Commission

The President

José Manuel Barroso