SECTION 2U.K. THE DATA PROTECTION OFFICER

Article 4U.K.Data Protection Officer’s tasks

The DPO shall carry out the tasks specified in Article 45 of Regulation (EU) 2018/1725 and in particular:

(a)

inform and advise the Executive Board, the controllers, the Staff Committee and the data protection coordinators, and respond to consultations from any of them or any data subject on matters concerning the interpretation and application of data protection provisions at the ECB;

(b)

investigate matters and incidents related to data protection either on the DPO’s own initiative or at the request of the Executive Board, a controller, the Staff Committee or any data subject, and report back to the requester of the investigation;

(c)

maintain a central register with the records of processing activities at the ECB pursuant to Article 31 of Regulation (EU) 2018/1725 and Article 9 of this Decision;

(d)

assist a controller, upon request, in drafting data protection impact assessments and submissions for the prior consultation of the EDPS in accordance with Articles 39 and 40 of Regulation (EU) 2018/1725;

(e)

respond to requests from the EDPS and, within the sphere of his or her competence, cooperate with the EDPS;

(f)

cooperate with the data protection officers of other Union institutions and bodies, national central banks and national competent authorities, in particular by: (i) sharing knowledge and know-how based on experience; (ii) representing the ECB in relevant discussions relating to data protection issues, excluding court cases; and (iii) participating in interinstitutional committees and bodies;

(g)

ensure in an independent manner the application of Regulation (EU) 2018/1725 at the ECB by monitoring compliance with Regulation (EU) 2018/1725, with other applicable Union law containing data protection provisions and with the policies of the ECB and its processors in relation to the protection of personal data, including the assignment of responsibilities, the raising of awareness and training of ECB staff members involved in processing operations and any related audits.