(7)Any processing of personal data for the implementation of this Regulation should comply with the data protection framework of the Union, in particular Regulation (EU) 2016/679 of the European Parliament and of the Councilnote. Moreover, to reinforce the guarantees already established in Directive (EU) 2022/2555 of the European Parliament and of the Councilnote, and in order to ensure that all relevant parties are informed of security incidents affecting the validity or issuance of mobile driving licences in a timely manner, a complementary obligation should be established to ensure that the Commission is notified of such incidents in all cases. Further, given that, in line with this Regulation, mobile driving licences should be issued as qualified electronic attestations of attributes or electronic attestations of attributes issued by or on behalf of public sector bodies, it is not necessary to establish further rules concerning organisational data protection or general security measures to those that this specification itself entails. This is because the framework established for those kinds of electronic attestations of attributes already provides for the desired level of protection of personal data and general security, for example, by requiring issuers of mobile driving licences to guarantee the authenticity, integrity, validity and non-alteration of attributes, to use adequate organisational measures during their operation, to ensure the traceability of data during its lifecycle, and to maintain a security system that complies with all applicable standards.
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.