Article 37

1. Each Member State shall designate a national supervisory authority or authorities responsible for personal-data protection to carry out independent supervision of such data included in the CIS. The supervisory authorities, in conformity with their respective national legislations, shall carry out independent supervision and checks to ensure that the processing and use of data held in the CIS do not violate the rights of data subjects. For this purpose the supervisory authorities shall have access to the CIS. 2. Any person may ask any national supervisory authority to check personal data relating to himself in the CIS and the use which has been or is being made of those data. The right shall be governed by the laws, regulations and procedures of the Member State in which the request is made. If the data have been included by another Member State or the Commission, the check shall be carried out in close coordination with that Member State's national supervisory authority or with the authority provided for in paragraph 4. 3. The Commission shall take every step within its departments to ensure personal-data protection supervision which offers safeguards of a level equivalent to that resulting from paragraph 1. 4. Pending the appointment of any authority or authorities set up for the Community institutions and bodies, the Commission's activities as regards the data-protection rules laid down in Article 34 (1), Article 36 (1) and Article 37 (3) shall be supervised by the Ombudsman provided for in Article 138e of the Treaty establishing the European Community in the context of the task allotted to him by that Treaty. Chapter 7 Security of the CIS

← 6. · All articles · 1. →

Source: EUR-Lex (Cellar) · retrieved 2026-11-06 · Text as adopted (Official Journal); later amendments are not incorporated in this text.