1. The supervision of personal data processing by EU institutions and bodies
=> data protection and privacy, why it matters, for you as citizens and as EU employees

2. Overview
Role: Ensures that EU institutions and bodies respect people's right to privacy when processing their personal data
Supervisor: Giovanni Buttarelli
Assistant Supervisor: Wojciech Wiewiórowski
Established in: 2004
Location: Brussels (Belgium)

3. The EU institutions and bodies sometimes process citizens' personal information - in electronic, written or visual format - in the course of their duties. Processing includes collecting, recording, storing, retrieving, sending, blocking or erasing data. It is the task of the European Data Protection Supervisor (EDPS) to uphold the strict privacy rulesgoverning these activities.

4. What does the EDPS do?
Supervises the EU administration's processing of personal data to ensure compliance with privacy rules
Advises EU institutions and bodies on all aspects of personal data processing and related policies and legislation
Handles complaints and conducts inquiries
Works with the national authorities of EU countries to ensure consistency in data protection
Monitors new technologies that might have an impact on data protection.

5. How does the EDPS work?
The Supervisor and Assistant Supervisor are appointed for renewable 5-year terms of office. For everyday operations, the EDPS comprises 2 main entities:
Supervision and Enforcement - evaluates data protection compliance by EU institutions and bodies.
Policy and Consultation - advises EU legislators on data protection issues in various policy areas and new legislative proposals.

6. The EDPS and you
The EU institutions and bodies must not process personal data on your
racial or ethnic origin
political opinions
religious or philosophical views
trade-union membership.
Nor may they process data on your health or sexual orientation, unless these are needed for health care purposes. Even then, this must be done by a health professional or other person sworn to professional secrecy.

7. About Our general mission is to:
The European Data Protection Supervisor (EDPS) is the European Union’s (EU) independent data protection authority.
Our general mission is to:
monitor and ensure the protection of personal data and privacy when EU institutions and bodies process the personal information of individuals;
advise EU institutions and bodies on all matters relating to the processing of personal information. We are consulted by the EU legislator on proposals for legislation and new policy developments that may affect privacy;
monitor  new technology that may affect the protection of personal information;
intervene  before the Court of Justice of the EU to provide expert advice on interpreting data protection law;
cooperate  with national supervisory authorities and other supervisory bodies to improve consistency in protecting personal information. .

8. Supervision of Europol
Europol is the EU body actively cooperating with law enforcement authorities of the EU Member States to combat serious international crime and terrorism. Europol also works with many non-EU partner States and international organizations in particular in the fight against terrorism, cybercrime and people smuggling.

9. What is “personal data”?
any information relating to an identified or identifiable natural person (data subject);
an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
Art. 2(a) Reg. 45/2001
Example: Recital 7 of the Regulation reads "The persons to be protected are those whose personal data are processed by Community institutions or bodies in any context whatsoever, for example because they are employed by those institutions or bodies.“

10. Some basic rules…
Such data must be processed fairly for specified purposes and on the basis of the consent of the person concerned or some other legitimate basis laid down by law.
Everyone has the right of access to data which has been collected concerning him or her, and the right to have it rectified.
3. Compliance with these rules shall be subject to control by an independent authority 10 10