CHAPTER I

GENERAL PROVISIONS

Subject matter
Article 1
This Regulation lays down rules for the use of an Internal Market Information System (‘IMI’) for administrative cooperation among the IMI actors, including the processing of personal data.

Establishment of IMI
Article 2
IMI is hereby formally established.

Scope
Article 3
1
IMI shall be used for exchanges of information, including of personal data, among the IMI actors and for the processing of that information for the purposes of administrative cooperation required in accordance with the provisions of the legislation listed in the Annex.
2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Expansion of IMI
Article 4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Definitions
Article 5
For the purposes of this Regulation, the definitions laid down in the UK GDPR as supplemented by the Data Protection Act 2018 shall apply.
In addition, the following definitions shall also apply:
1. ‘IMI’ means the electronic tool provided by the Commission to facilitate administrative cooperation among the IMI actors;
2. ‘administrative cooperation’ means the collaboration between IMI actors by exchanging and processing information for the purpose of better application of
the legislation listed in the Annex
;
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4. ‘administrative cooperation procedure’ means a pre-defined workflow provided for in IMI allowing IMI actors to communicate and interact with each other in a structured manner;
5. ‘IMI coordinator’ means a body appointed by a Member State
or the United Kingdom
to perform support tasks necessary for the efficient functioning of IMI in accordance with this Regulation;
6. ‘competent authority’ means any body established at either national, regional or local level and registered in IMI with specific responsibilities relating to the application of
the legislation listed in the Annex
;
7. ‘IMI actors’ means the competent authorities, the IMI coordinators, the Commission and the Union bodies, offices and agencies;
8. ‘IMI user’ means a natural person working under the authority of an IMI actor and registered in IMI on behalf of that IMI actor;
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10. ‘blocking’ means applying technical means by which personal data become inaccessible to IMI users via the normal interface of IMI;
11. ‘formal closure’ means applying the technical facility provided by IMI to close an administrative cooperation procedure;
12. ‘the Information Commissioner’ means the Information Commissioner provided for under section 114 of the Data Protection Act 2018;
13. ‘the UK GDPR’ has the meaning given in section 3(10) of the Data Protection Act 2018.
CHAPTER II

FUNCTIONS AND RESPONSIBILITIES IN RELATION TO IMI

IMI coordinators
Article 6
1
The Secretary of State
shall appoint one national IMI coordinator whose responsibilities shall include:
a
registering or validating registration of IMI coordinators and competent authorities;
b
acting as the main contact point for IMI actors of the
United Kingdom
for issues relating to IMI, including providing information on aspects relating to the protection of personal data in accordance with this Regulation;
c
acting as interlocutor of the Commission for issues relating to IMI including providing information on aspects relating to the protection of personal data in accordance with this Regulation;
d
providing knowledge, training and support, including basic technical assistance, to IMI actors of the
United Kingdom
;
e
ensuring the efficient functioning of IMI as far as it is within their control, including the provision of timely and adequate responses by IMI actors of the
United Kingdom
to requests for administrative cooperation.
2
The Secretary of State
may, in addition, appoint one or more IMI coordinators in order to carry out any of the tasks listed in paragraph 1, in accordance with its internal administrative structure.
3
The Secretary of State shall inform the Commission of the IMI coordinators appointed in accordance with paragraphs 1 and 2 and of the tasks for which they are responsible.
4
All IMI coordinators may act as competent authorities. In such cases an IMI coordinator shall have the same access rights as a competent authority. Each IMI coordinator shall be a controller with respect to its own data processing activities as an IMI actor.

Competent authorities
Article 7
1
When cooperating by means of IMI, competent authorities, acting through IMI users in accordance with administrative cooperation procedures, shall ensure that, in accordance with the applicable
legislation listed in the Annex
, an adequate response is provided within the shortest possible period of time, and in any event within
any deadline set by that legislation
.
2
A competent authority may invoke as evidence any information, document, finding, statement or certified true copy which it has received electronically by means of IMI, on the same basis as similar information obtained in
the United Kingdom
, for purposes compatible with the purposes for which the data were originally collected.
3
Each competent authority shall be a controller with respect to its own data processing activities performed by an IMI user under its authority and shall ensure that data subjects can exercise their rights in accordance with Chapters III and IV, where necessary, in cooperation with the Commission.

Commission
Article 8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Access rights of IMI actors and users
Article 9
1
Only IMI users shall have access to IMI.
2
The Secretary of State shall designate the IMI coordinators and competent authorities and the areas in which they have competence.
3
Each IMI actor
of the United Kingdom
shall grant and revoke, as necessary, appropriate access rights to its IMI users in the
... area for which it is competent.
4
Appropriate means shall be put in place by the
Secretary of State and United Kingdom
bodies, offices and agencies to ensure that IMI users
of the United Kingdom
are allowed to access personal data processed in IMI only on a need-to-know basis and within the
... area or areas for which they were granted access rights in accordance with paragraph 3.
5
The use of personal data processed in IMI for a specific purpose in a way that is incompatible with that original purpose shall be prohibited, unless explicitly provided for by
domestic law
.
6
Where an administrative cooperation procedure involves the processing of personal data, only the IMI actors participating in that procedure shall have access to such personal data.

Confidentiality
Article 10
1
IMI actors and IMI users of the United Kingdom shall be subject to the rules of professional secrecy or other equivalent duties of confidentiality in accordance with the law of the United Kingdom.
2
IMI actors
of the United Kingdom
shall ensure that requests of other IMI actors for confidential treatment of information exchanged by means of IMI are respected by IMI users working under their authority.

Administrative cooperation procedures
Article 11
IMI shall be based on administrative cooperation procedures implementing the provisions of the legislation listed in the Annex.

External actors
Article 12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER III

PROCESSING OF PERSONAL DATA AND SECURITY

Purpose limitation
Article 13
IMI actors
of the United Kingdom
shall exchange and process personal data only for the purposes defined in the relevant provisions of
any legislation
listed in the Annex.
Data submitted to IMI by data subjects shall only be used for the purposes for which the data were submitted.

Retention of personal data
Article 14
1
Personal data processed in IMI shall be blocked in IMI as soon as they are no longer necessary for the purpose for which they were collected, depending on the specificities of each type of administrative cooperation and, as a general rule, no later than six months after the formal closure of the administrative cooperation procedure.
However, if a longer period is provided for in
any legislation
listed in the Annex, personal data processed in IMI may be retained for a maximum of 18 months after the formal closure of an administrative cooperation procedure.
2
Where a repository of information for future reference by IMI actors is required pursuant to
any legislation
listed in the Annex, the personal data included in such a repository may be processed for as long as they are needed for this purpose either with the data subject’s consent or where this is provided for in that
legislation
.
3
Personal data blocked pursuant to this Article shall, with the exception of their storage, only be processed for purposes of proof of an information exchange by means of IMI with the data subject’s consent, unless processing is requested for overriding reasons in the public interest.
4
The blocked data shall be automatically deleted in IMI three years after the formal closure of the administrative cooperation procedure.
5
At the express request of a competent authority in a specific case and with the data subject’s consent, personal data may be deleted before the expiry of the applicable retention period.
6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Retention of personal data of IMI users
Article 15
1
By way of derogation from Article 14, paragraphs 2 and 3 of this Article shall apply to the retention of personal data of IMI users
of the United Kingdom
. Those personal data shall include the full name and all electronic and other means of contact necessary for the purposes of this Regulation.
2
Personal data relating to IMI users shall be stored in IMI as long as they continue to be users of IMI and may be processed for purposes compatible with the objectives of this Regulation.
3
When a natural person ceases to be an IMI user, the personal data relating to that person shall be blocked by technical means for a period of three years. Those data shall, with the exception of their storage, only be processed for purposes of proof of an information exchange by means of IMI and shall be deleted at the end of the three-year period.

Processing of special categories of data
Article 16. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Security
Article 17
1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4
IMI actors
of the United Kingdom
shall take all procedural and organisational measures necessary to ensure the security of personal data processed by them in IMI in accordance with
Articles 5(1)(f), 28 and 32 of the UK GDPR.
CHAPTER IV

RIGHTS OF DATA SUBJECTS AND SUPERVISION

Information to data subjects and transparency
Article 18
1
IMI actors
of the United Kingdom
shall ensure that data subjects are informed about processing of their personal data in IMI as soon as possible and that they have access to information on their rights and how to exercise them, including the identity and contact details of the controller and of the controller’s representative, if any, in accordance with
Articles 13 and 14 of the UK GDPR
.
2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Right of access, correction and deletion
Article 19
1
IMI actors
of the United Kingdom
shall ensure that data subjects may effectively exercise their right of access to data relating to them in IMI, and the right to have inaccurate or incomplete data corrected and unlawfully processed data deleted, in accordance with
any enactment
. The correction or deletion of data shall be carried out as soon as possible, and at the latest 30 days after the request by the data subject is received by the IMI actor responsible.
2
Where the accuracy or lawfulness of data blocked pursuant to Article 14(1) is contested by the data subject, this fact shall be recorded, as well as the accurate, corrected information.

Exceptions and limitations
Article 20. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Supervision
Article 21
1
The Information Commissioner shall independently monitor the lawfulness of the processing of personal data by the IMI actors of the United Kingdom and, in particular, shall ensure that the rights of data subjects set out in this Chapter are protected in accordance with this Regulation.
2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER V

GEOGRAPHIC SCOPE OF IMI

National use of IMI
Article 22. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Information exchange with third countries
Article 23. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER VI

FINAL PROVISIONS

Committee procedure
Article 24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Monitoring and reporting
Article 25. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Costs
Article 26. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Repeal
Article 27. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Effective application
Article 28. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Exceptions
Article 29. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Entry into force
Article 30. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
...
Substituted by Regulation (EU) 2018/1724 of the European Parliament and of the Council of 2 October 2018 establishing a single digital gateway to provide access to information, to procedures and to assistance and problem-solving services and amending Regulation (EU) No 1024/2012 (Text with EEA relevance).
Deleted by Regulation (EU) 2018/1724 of the European Parliament and of the Council of 2 October 2018 establishing a single digital gateway to provide access to information, to procedures and to assistance and problem-solving services and amending Regulation (EU) No 1024/2012 (Text with EEA relevance).
Regulation revoked (E.W.S.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 5
Art. 3(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(2)(a)
Art. 3(2) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(2)(b)
Art. 4 omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(3)
Words in Art. 5 substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(a)
Art. 5(l)(m) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(g)
Words in Art. 5(b) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(b)
Art. 5(c) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(c)
Words in Art. 5(e) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(d)
Words in Art. 5(f) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(e)
Art. 5(i) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(4)(f)
Words in Art. 6(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(5)(a)(i)
Words in Art. 6(1)(b) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(5)(a)(ii)
Words in Art. 6(1)(d) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(5)(a)(iii)
Words in Art. 6(1)(e) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(5)(a)(iv)
Words in Art. 6(2) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(5)(b)
Art. 6(3) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(5)(c)
Words in Art. 7(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(6)(a)(i)
Words in Art. 7(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(6)(a)(ii)
Words in Art. 7(2) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(6)(b)
Art. 8 omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(7)
Art. 9(2) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(a)
Words in Art. 9(3) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(b)(i)
Words in Art. 9(3) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(b)(ii)
Words in Art. 9(4) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(c)(i)
Words in Art. 9(4) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(c)(ii)
Words in Art. 9(4) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(c)(iii)
Words in Art. 9(5) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(8)(d)
Art. 10(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(9)(a)
Words in Art. 10(2) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(9)(b)
Art. 11 substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(10)
Art. 12 omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(11)
Words in Art. 13 inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(12)(a)
Words in Art. 13 substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(12)(b)
Words in Art. 14(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(13)(a)
Words in Art. 14(2) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(13)(b)(i)
Word in Art. 14(2) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(13)(b)(ii)
Art. 14(6) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(13)(c)
Art. 14(7) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(13)(d)
Words in Art. 15(1) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(14)
Art. 16 omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(15)
Words in Art. 17(4) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(16)(b)(i)
Words in Art. 17(4) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(16)(b)(ii)
Art. 17(1)-(3) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(16)(a)
Words in Art. 18(1) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(17)(a)(i)
Words in Art. 18(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(17)(a)(ii)
Art. 18(2) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(17)(b)
Words in Art. 19(1) inserted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(18)(a)
Words in Art. 19(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(18)(b)
Art. 20 omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(19)
Art. 21(1) substituted (N.I.) (9.12.2022) by The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(20)(a)
Art. 21(2) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(20)(b)
Art. 21(3) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(20)(b)
Arts. 22-30 (including binding words) omitted (N.I.) (9.12.2022) by virtue of The Internal Market Information System Regulation (Amendment etc.) Regulations 2022 (S.I. 2022/1306), regs. 1(2), 3(21)