The Controller shall notify to the DPO any processing operation of personal data on the basis of a notification form made accessible on the GSC's Intranet site (Data Protection). The notification shall be transmitted to the DPO electronically. A confirmatory notification shall be sent to the DPO by note within 10 working days. Upon receipt of the confirmatory notification, the DPO shall publish it in the Register.

The notification shall include all information specified in Article 25(2) of the Regulation. Any change affecting this information shall be notified promptly to the DPO.

Further rules and procedures regarding the notification procedure to be followed by the controllers shall form part of the general recommendations issued by the DPO.

The DPO shall keep a Register of processing operations performed upon personal data, which shall be set up on the basis of the notifications received from the controllers.

The Register shall contain at least the information referred to in Article 25(2)(a) to (g) of the Regulation. However, the information entered in the Register by the DPO may exceptionally be limited when it is necessary to safeguard the security of a specific processing operation.

The Register shall serve as an index of the personal data processing operations conducted at the Council. It shall provide information to data subjects and facilitate the exercise of their rights set out in Articles 13 to 19 of the Regulation.

Appropriate measures shall be taken by the DPO to ensure that any person has access to the Register, either directly or indirectly through the EDPS. In particular, the DPO shall provide information and assistance to interested persons on how and where applications for access to the Register can be made.

Except where on-line access is granted, applications for access to the Register are made in any written form, including electronically, in one of the languages referred to in Article 314 of the Treaty and in a sufficiently precise manner to enable the DPO to identify the concerned processing operations. An acknowledgement of receipt shall be sent to the applicant without delay.

If an application is not sufficiently precise, the DPO shall ask the applicant to clarify the application and shall assist the applicant in doing so. In the event of an application relating to a very large number of processing operations, the DPO may confer with the applicant informally, with a view to finding a fair solution.

Any person may request from the DPO a copy of the information which is available in the Register on any notified processing operation.