Date: 2019-03-27Category: Not ApplicableState: Union GovernmentCountry: Europe
Regulation (EU, Euratom) 2019/493 of the European Parliament and of the Council of 25 March 2019 amending Regulation (EU, Euratom) No 1141/2014 as regards a verification procedure related to infringements of rules on the protection of personal data in the context of elections to the European Parliament
Executive Summary:
Regulation (EU, Euratom) 2019/493 amends Regulation (EU, Euratom) No 1141/2014 to introduce a verification procedure regarding infringements of personal data protection rules in European Parliament elections. This regulation aims to protect the integrity of the European democratic process. It empowers the Authority for European political parties and European political foundations to impose financial sanctions based on the opinion of a committee of independent eminent persons. The regulation entered into force on the date of its publication in the Official Journal of the European Union (27 March 2019).
Key Points / Main Content:
Authority for European Political Parties and Foundations:
* The Director of the Authority now has the powers of an appointing authority regarding staff.
* The Authority is enabled to fulfil its tasks independently and in a permanent way.
Verification Procedure for Data Protection Infringements:
* European political parties or foundations must not deliberately influence or attempt to influence election outcomes by exploiting personal data infringements.
* If a national supervisory authority finds a data protection infringement linked to a European political party or foundation's political activities, the Authority refers the matter to a committee of independent eminent persons.
* The committee assesses whether the party or foundation deliberately influenced or attempted to influence the election outcome through the infringement.
* The Authority, considering the committee's opinion, decides whether to impose financial sanctions.
* The Authority's decision must be reasoned and published.
Sanctions and Review:
* The Authority must consider the 'ne bis in idem' principle (no double jeopardy) and legal certainty.
* The affected party or foundation has the right to be heard.
* If a national supervisory authority's decision is repealed or a remedy is granted after exhaustion of national remedies, the Authority must review any related sanction upon request.
Time Limits:
* The standard time limits for verification of compliance do not apply to the new procedure in Article 10a.
Impact Analysis:
European Political Parties and European Political Foundations:
* Impact: Subject to potential financial sanctions if found to have deliberately influenced or attempted to influence European Parliament elections by taking advantage of data protection infringements. They also have the right to request a review of sanctions if the underlying national decision is overturned.
* Action Required: Ensure compliance with data protection rules in all political activities related to European Parliament elections. If sanctioned, and the national supervisory authority's decision is repealed or a remedy granted, request a review of the sanction.
Authority for European Political Parties and European Political Foundations:
* Impact: Granted new powers to investigate and sanction European political parties and foundations for data protection infringements.
* Action Required: Establish procedures to liaise with national supervisory authorities, refer matters to the committee of independent eminent persons, and impose sanctions when appropriate.
Committee of Independent Eminent Persons:
* Impact: Responsible for providing opinions on whether European political parties or foundations deliberately influenced or attempted to influence election outcomes via data protection infringements.
* Action Required: Assess referred cases impartially and provide opinions to the Authority within set deadlines.
National Data Protection Supervisory Authorities:
* Impact: Decisions regarding data protection infringements can trigger the verification procedure and potential sanctions for European political parties and foundations.
* Action Required: Cooperate with the committee of independent eminent persons by providing relevant information.
Key Entities Referenced
European Parliament: A legislative body of the European Union, directly elected by EU citizens.
Council of the European Union: A component of the EU legislative branch in which ministers from each member state meet to negotiate and adopt laws.
European Commission: An executive branch of the European Union responsible for proposing legislation, implementing decisions, and managing the EU budget.
Treaty on the Functioning of the European Union: One of the primary treaties of the European Union, detailing the organization and operation of the EU.
European Atomic Energy Community: An international organization established by the Treaty of Rome in 1957 with the purpose of creating a specialist market for nuclear power in Europe.
Regulation EU, Euratom No 1141/2014: A regulation of the European Parliament and the Council concerning the statute and funding of European political parties and European political foundations.
Authority for European political parties and European political foundations: An authority established by Regulation EU, Euratom No 1141/2014 to oversee European political parties and foundations.
Regulation EU 2016/679: Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC General Data Protection Regulation.
27.3.2019 EN Official Journal of the European Union L 85 I/7
REGULATION (EU, Euratom) 2019/493 OF THE EUROPEAN PARLIAMENT AND OF THE
COUNCIL
of 25 March 2019
amending Regulation (EU, Euratom) No 1141/2014 as regards a verification procedure related to
infringements of rules on the protection of personal data in the context of elections to the
European Parliament
THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,
Having regard to the Treaty on the Functioning of the European Union, and in particular Article 224 thereof,
Having regard to the Treaty establishing the European Atomic Energy Community, and in particular Article 106a
thereof,
Having regard to the proposal from the European Commission,
After transmission of the draft legislative act to the national parliaments,
Having regard to the opinion of the European Economic and Social Committee (1),
After consulting the Committee of the Regions,
Acting in accordance with the ordinary legislative procedure (2),
Whereas:
(1) Regulation (EU, Euratom) No 1141/2014 of the European Parliament and of the Council (3) established a specific
European legal status for European political parties and European political foundations and provides for their
funding from the general budget of the European Union. It also established an Authority for European political
parties and European political foundations (‘the Authority’).
(2) In order to enable the Authority to fully fulfil its tasks, including the new ones provided for in this Regulation,
and to enable it to do so in an independent manner, it is necessary to staff it in a permanent way and to confer
the powers of an appointing authority on the Director of the Authority.
(3) Recent events have demonstrated the potential risks to electoral processes and to democracy that can arise from
the unlawful use of personal data. It is therefore necessary to protect the integrity of the European democratic
process by providing for financial sanctions in situations where European political parties or European political
foundations take advantage of infringements of rules on protection of personal data with a view to influencing
the outcome of elections to the European Parliament.
(4) To that end, a verification procedure should be established whereby the Authority must, in certain circumstances,
ask the committee of independent eminent persons established by Regulation (EU, Euratom) No 1141/2014 to
assess whether a European political party or a European political foundation has deliberately influenced or
attempted to influence the outcome of elections to the European Parliament by taking advantage of an
infringement of the applicable rules on protection of personal data. Where, in accordance with the verification
procedure, that is found to be the case, the Authority should impose sanctions under the effective, proportionate
and dissuasive sanctioning system established by Regulation (EU, Euratom) No 1141/2014.
(5) When the Authority imposes a sanction on a European political party or foundation in accordance with the
verification procedure, it should take due account of the ne bis in idem principle, whereby sanctions cannot be
imposed twice for the same offence. The Authority should also ensure that the principle of legal certainty is
respected and that the European political party or European political foundation concerned has been given the
opportunity to be heard.
(1) Opinion of 12 December 2018 (not yet published in the Official Journal).
(2) Position of the European Parliament of 12 March 2019 (not yet published in the Official Journal) and decision of the Council of
19 March 2019.
(3) Regulation (EU, Euratom) No 1141/2014 of the European Parliament and of the Council of 22 October 2014 on the statute and funding
of European political parties and European political foundations (OJ L 317, 4.11.2014, p. 1).L 85 I/8 EN Official Journal of the European Union 27.3.2019
(6) The new procedure should exist alongside the current procedures used for the verification of compliance with
registration conditions and in cases of manifest and serious breaches of the values on which the Union is
founded. However, the time limits for verification of compliance with registration conditions and requirements
set in Article 10 of Regulation (EU, Euratom) No 1141/2014 should not apply to the new procedure.
(7) Since the new procedure is triggered by a decision of a competent national data protection supervisory authority,
it should be possible for the European political party or European political foundation concerned to request that
the sanction be reviewed if the decision of that national supervisory authority is repealed, or a remedy against
that decision has been granted, provided that all national remedies have been exhausted.
(8) In order to ensure that the 2019 elections to the European Parliament take place in accordance with strong
democratic rules and in full respect of the European values of democracy, rule of law and respect of fundamental
rights, it is important that the provisions on the new verification procedure enter into force in timely manner
and that the procedure applies as soon as possible. In order to achieve this, the amendments to Regulation
(EU, Euratom) No 1141/2014 introduced by this Regulation should enter into force on the date of its publication
in the Official Journal of the European Union.
(9) Regulation (EU, Euratom) No 1141/2014 should therefore be amended accordingly,
HAVE ADOPTED THIS REGULATION:
Article 1
Regulation (EU, Euratom) No 1141/2014 is amended as follows:
(1) In Article 6, paragraph (5) is replaced by the following:
‘5. The Director of the Authority shall be assisted by staff in respect of whom he or she shall exercise the powers
conferred on the appointing authority by the Staff Regulations of Officials of the European Union and the powers
conferred on the authority empowered to conclude contracts of employment of other servants by the Conditions of
Employment of Other Servants of the Union, laid down in Council Regulation (EEC, Euratom, ECSC) No 259/68
(‘the appointing authority's powers’). The Authority may make use in any areas of its work of other seconded
national experts or of other staff not employed by the Authority.
The Staff Regulations and the Conditions of Employment of Other Servants and the rules adopted by agreement
between the institutions of the Union for giving effect to those Staff Regulations and Conditions of Employment of
Other Servants shall apply to the staff of the Authority.
The selection of the staff shall not be liable to result in a conflict of interests between their duties at the Authority
and any other official duties, and they shall refrain from any act which is incompatible with the nature of their
duties.’
(2) In Article 10(3), the third subparagraph is replaced by the following:
‘The procedures laid down in the first and second subparagraphs shall not be initiated within a period of two
months prior to elections to the European Parliament. That time limit shall not apply with regard to the procedure
set out in Article 10a.’
(3) The following Article is inserted:
‘Article 10a
Verification procedure related to infringements of rules on the protection of personal data
1. No European political party or European political foundation shall deliberately influence, or attempt to
influence, the outcome of elections to the European Parliament by taking advantage of an infringement by a natural
or legal person of the applicable rules on the protection of personal data.
2. If the Authority is informed of a decision of a national supervisory authority within the meaning of point 21
of Article 4 of Regulation (EU) 2016/679 of the European Parliament and of the Council (*) finding that a natural
or legal person has infringed applicable rules on the protection of personal data, and if it follows from that decision,
or if there are otherwise reasonable grounds to believe, that the infringement is linked to political activities by
a European political party or a European political foundation in the context of elections to the European Parliament,
the Authority shall refer this matter to the committee of independent eminent persons established by Article 11 of
this Regulation. The Authority may, if necessary, liaise with the national supervisory authority concerned.27.3.2019 EN Official Journal of the European Union L 85 I/9
3. The committee referred to in paragraph 2 shall give an opinion as to whether the European political party or
European political foundation concerned has deliberately influenced or attempted to influence the outcome of
elections to the European Parliament by taking advantage of that infringement. The Authority shall request the
opinion without undue delay, and no later than 1 month after being informed of the decision of the national
supervisory authority. The Authority shall set a short, reasonable deadline for the committee to give its opinion. The
committee shall comply with that deadline.
4. Having regard to the committee's opinion, the Authority shall decide, pursuant to point (a)(vii) of
Article 27(2), whether to impose financial sanctions on the European political party or European political
foundation concerned. The decision of the Authority shall be duly reasoned, in particular with regard to the
committee's opinion, and shall be published expeditiously.
5. The procedure set out in this Article is without prejudice to the procedure set out in Article 10.
(*) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of
natural persons with regard to the processing of personal data and on the free movement of such data, and
repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).’
(4) In Article 11(3), the first subparagraph is replaced by the following:
‘When requested by the Authority, the committee shall give an opinion on:
(a) any possible manifest and serious breach of the values on which the Union is founded, as referred to in point (c)
of Article 3(1) and point (c) of Article 3(2), by a European political party or a European political foundation;
(b) whether a European political party or a European political foundation has deliberately influenced or attempted
to influence the outcome of elections to the European Parliament by taking advantage of an infringement of the
applicable rules on the protection of personal data.
In the cases referred to in points (a) and (b) of the first subparagraph, the committee may request any relevant
document or evidence from the Authority, the European Parliament, the European political party or European
political foundation concerned, other political parties, political foundations or other stakeholders, and it may request
to hear their representatives. In the case referred to in point (b) of the first subparagraph, the national supervisory
authority referred to in Article 10a shall cooperate with the committee in accordance with applicable law.’
(5) In Article 18, paragraph (2) is replaced by the following:
‘2. The European political party and the European political foundation must, at the time of its application,
comply with the obligations listed in Article 23, and, from the date of its application until the end of the financial
year or of the action covered by the contribution or grant, remain registered in the Register and may not be the
subject of any of the sanctions provided for in Article 27(1) and in point (a) (v), (vi) and (vii) of Article 27(2).’
(6) Article 27 is amended as follows:
(a) in point (a) of paragraph (2), the following point is added:
‘(vii) where, in accordance with the verification procedure provided for in Article 10a, it is established that
a European political party or a European political foundation has deliberately influenced or attempted to
influence the outcome of elections to the European Parliament by taking advantage of an infringement of
the applicable rules on the protection of personal data.’;
(b) the following paragraph is added:
‘7. Where a decision of the national supervisory authority as referred to in Article 10a has been repealed, or
where a remedy against such decision has been granted, provided that all national remedies have been exhausted,
the Authority shall review any sanction imposed pursuant to point (a)(vii) of paragraph 2 at the request of the
European political party or European political foundation concerned.’
Article 2
This Regulation shall enter into force on the day of its publication in the Official Journal of the European Union.L 85 I/10 EN Official Journal of the European Union 27.3.2019
This Regulation shall be binding in its entirety and directly applicable in all Member States.
Done at Strasbourg, 25 March 2019.
For the European Parliament For the Council
The President The President
A. TAJANI G. CIAMBA