For the purposes of this Chapter, ‘data subject’ shall mean only the data subject of a specific information exchange and shall not include IMI users.
1.Request handlers of a competent authority shall only have access, in the course of an information exchange, to personal data of:
(a)other request handlers of the same competent authority involved in the information exchange concerned;
(b)the request handler of the other competent authority involved in the information exchange concerned;
(c)the referral handlers of the coordinators dealing with the information exchange concerned;
(d)the data subjects of the information exchange concerned. Request handlers of a responding competent authority shall only have access to the personal data of the data subjects once the request has been accepted by their competent authority.
2.Allocators of a competent authority shall only have access to personal data of:
(a)all request handlers of the same competent authority;
(b)the request handler of the other competent authority involved in the information exchange concerned;
(c)the referral handlers of the coordinators dealing with the information exchange concerned.
They shall not have access to the personal data of the data subjects.
3.Allocators of a coordinator shall only have access to personal data of:
(a)all referral handlers of the same coordinator;
(b)the request handlers of competent authorities involved in the information exchange concerned;
(c)the referral handler of the other coordinator dealing with the information exchange concerned.
They shall not have access to the personal data of the data subjects.
4.Referral handlers shall only have access to the personal data of:
(a)referral handlers of the coordinators involved in the information exchange concerned;
(b)the request handlers of competent authorities involved in the information exchange concerned.
They shall not have access to the personal data of the data subjects.
5.Local data administrators of a competent authority shall only have access to personal data of all IMI users of the same competent authority.
They shall not have access to the personal data of the data subjects.
6.Local data administrators of a coordinator shall only have access to personal data of:
(a)all IMI users of the same coordinator;
(b)all local data administrators of the competent authorities and coordinators for which they are the coordinator.
They shall not have access to the personal data of the data subjects.
7.Local data administrators of the Commission shall only have access to personal data of:
(a)all other local data administrators of the Commission;
(b)all local data administrators of the national IMI coordinators.
Local data administrators of the Commission may erase personal data of the data subjects in conformity with Article 4, but shall not be able to view them.