DIGITIZING MEDICAL FILES

Communication pursuant to Regulation (EC) No 45/2001 of the European Parliament and Council of December 18, 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data, Official Journal L 008, 12/01/2001 (EC) n. 45/2001

It is brought to the attention of staff that the Commission will shortly begin to digitize and store electronically the medical files of all Commission staff (principal legal basis: Articles 33, 53, 59, 60 and 78 of the Statute).

Technical and organizational measures have been taken to ensure a level of security appropriate to the risks of treatment and nature of medical data, in order to protect and safeguard the confidentiality of such data. The digitization and processing of digital medical records has been the subject of a declaration to the Data Protection Officer of the Commission for prior checking by the European Data Protection Supervisor.

It is recalled that the staff concerned has a right of access to and rectification of its data by contacting the data controller (Director of Directorate C of DG ADMIN - Social Policy and Health) or the head of the medical unit concerned (Medical Unit in Brussels, Luxembourg or Ispra) and has a right of access to his own data under the conditions set by the College of Chiefs of Administration (CCA Conclusion -221/04 of February 19, 2004)

Later on, staff will have online access to its file according to the modalities to be communicated in due time.

The data are kept 30 years after the termination of service.

Any person has the right of recourse at any time to the European Data Protection Supervisor (edps@edps.europa.eu).