Section 5, Article 21 · Council Decision (EU) 2021/1093

Contents

Article 21Recording and registering of restrictions#

1.The GSC shall record the reasons for any restriction applied pursuant to this Decision, including a case-by-case assessment of the necessity and proportionality of the restriction, taking into account the relevant elements of Article 25(2) of Regulation (EU) 2018/1725.To that end, the record shall state how the exercise of any of the rights referred to in Articles 14 to 17, 19, 20 and 35 of that Regulation, or of the principle of transparency laid down in Article 4(1), point (a), thereof, would jeopardise the DPO activities under this Decision, or the restrictions applied pursuant to Article 17(2) or (3) of this Decision, or would adversely affect the rights and freedoms of other data subjects.

2.The record and, where applicable, the documents containing underlying factual and legal elements shall be registered. They shall be made available to the EDPS on request.

Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.

Defined terms · 4

Show every defined term

data protection coordinator
means the GSC staff member designated in each GSC directorate-general or other service in consultation with the DPO to assist that directorate-general or service in all aspects of the protection of personal data and to deal as its representative with data protection issues in close cooperation with the DPO.
Data Protection Officer
(DPO) means the person designated by the Secretary-General of the Council pursuant to Article 43 of Regulation (EU) 2018/1725;
delegated controller
means the head of the GSC directorate-general or service which, alone or jointly with others, determines the purposes and means of the processing of personal data on behalf of the Council or the GSC in fulfilment of the mission of that directorate-general or service;
operational controller
means the GSC staff member at middle or senior management level who is designated by the delegated controller to assist him or her in ensuring compliance with Regulation (EU) 2018/1725 for the processing operations for which he or she is responsible, and to serve as the primary contact point for data subjects;