C.

In relation to the verification of the performance of its activities, the external service provider shall: provide for access by staff entitled by the Member State(s) concerned to its premises at all times without prior notice, in particular for inspection purposes; ensure the possibility of remote access to its appointment system for inspection purposes; ensure the use of relevant monitoring methods (e.g. test applicants; webcam); ensure access to proof of data protection compliance, including reporting obligations, external audits and regular spot checks; report to the Member State(s) concerned without delay any security breaches or any complaints from applicants on data misuse or unauthorised access, and coordinate with the Member State(s) concerned in order to find a solution and give explanatory responses promptly to the complaining applicants.

← (d) · All articles · (a) →

Source: EUR-Lex (Cellar) · retrieved 2026-11-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.