Council Decision of 13 September 2004 adopting implementing rules concerning Regulation (EC) No 45/2001 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (2004/644/EC)

Article 4 Tasks

The DPO shall:

(a)

ensure that controllers and data subjects are informed of their rights and obligations pursuant to the Regulation. In the discharge of this task, he/she shall in particular establish information and notification forms, consult interested parties and raise the general awareness of data protection issues;

(b)

respond to requests from the EDPS and, within the sphere of his/her competence, cooperate with the EDPS at the latter's request or on his/her own initiative;

(c)

ensure in an independent manner the internal application of the provisions of the Regulation in the GSC;

(d)

keep a Register of the processing operations carried out by the controllers and grant access to it to any person directly or indirectly through the EDPS;

(e)

notify the EDPS of the processing operations likely to present specific risks referred to in Article 27(2) of the Regulation;

(f)

thus, ensure that the rights and freedoms of the data subjects are unlikely to be adversely affected by the processing operations.