The responsibilities of the controller under Article 2(d) of Directive 95/46/EC and Article 2(d) of Regulation (EC) No 45/2001 shall be jointly exercised by the IMI actors pursuant to Article 6 in accordance with their respective responsibilities within IMI.

The controllers shall ensure that the data subject may effectively exercise its rights to information, to access, to rectify and to object according to the applicable data protection legislation. The IMI actors shall provide privacy statements in an appropriate form.