CHAPTER IVRIGHTS OF DATA SUBJECTS AND SUPERVISION
Article 18Information to data subjects and transparency
1.
IMI actors shall ensure that data subjects are informed about processing of their personal data in IMI as soon as possible and that they have access to information on their rights and how to exercise them, including the identity and contact details of the controller and of the controller’s representative, if any, in accordance with Article 10 or 11 of Directive 95/46/EC and national legislation which is in accordance with that Directive.
2.
The Commission shall make publicly available in a way which is easily accessible:
(a)
information concerning IMI in accordance with Articles 11 and 12 of Regulation (EC) No 45/2001, in a clear and understandable form;
(b)
information on the data protection aspects of administrative cooperation procedures in IMI as referred to in Article 11 of this Regulation;
(c)
information on exceptions to or limitations of the rights of data subjects as referred to in Article 20 of this Regulation;
(d)
types of administrative cooperation procedures, essential IMI functionalities and categories of data that may be processed in IMI;
(e)
a comprehensive list of all implementing or delegated acts regarding IMI, adopted pursuant to this Regulation or to another Union act, and a consolidated version of the Annex to this Regulation and its subsequent amendments by other Union acts.
Article 19Right of access, correction and deletion
1.
IMI actors shall ensure that data subjects may effectively exercise their right of access to data relating to them in IMI, and the right to have inaccurate or incomplete data corrected and unlawfully processed data deleted, in accordance with national legislation. The correction or deletion of data shall be carried out as soon as possible, and at the latest 30 days after the request by the data subject is received by the IMI actor responsible.
2.
Where the accuracy or lawfulness of data blocked pursuant to Article 14(1) is contested by the data subject, this fact shall be recorded, as well as the accurate, corrected information.
Article 20Exceptions and limitations
Member States shall inform the Commission where they provide for exceptions to, or limitations of, the rights of data subjects set out in this Chapter in national legislation in accordance with Article 13 of Directive 95/46/EC.
Article 21Supervision
1.
The national supervisory authority or authorities designated in each Member State and endowed with the powers referred to in Article 28 of Directive 95/46/EC (the ‘National Supervisory Authority’) shall independently monitor the lawfulness of the processing of personal data by the IMI actors of their Member State and, in particular, shall ensure that the rights of data subjects set out in this Chapter are protected in accordance with this Regulation.
2.
The European Data Protection Supervisor shall monitor and seek to ensure that the personal data processing activities of the Commission, in its role as an IMI actor, are carried out in accordance with this Regulation. The duties and powers referred to in Articles 46 and 47 of Regulation (EC) No 45/2001 shall apply accordingly.
3.
The National Supervisory Authorities and the European Data Protection Supervisor, each acting within the scope of their respective competencies, shall ensure coordinated supervision of IMI and its use by IMI actors.
4.
The European Data Protection Supervisor may invite the National Supervisory Authorities to meet, where necessary, for the purposes of ensuring coordinated supervision of IMI and its use by IMI actors, as referred to in paragraph 3. The cost of such meetings shall be borne by the European Data Protection Supervisor. Further working methods for this purpose, including rules of procedure, may be developed jointly as necessary. A joint report of activities shall be sent to the European Parliament, the Council and the Commission at least every three years.