rec_23

(23) The Agency should ensure the operational security and protection of the data which it receives, prevent unauthorised access to the information kept by the Agency, and establish procedures to ensure that the data it collects are not misused by persons with an authorised access to them. The Agency should also ascertain whether those authorities which have access to the data held by the Agency are able to maintain an equally high level of security and are bound by appropriate confidentiality arrangements. The operational security of the IT systems used for processing and transmitting the data therefore also needs to be ensured. For setting up an IT system that ensures the highest possible level of data confidentiality, the Agency should be encouraged to work closely with the European Network and Information Security Agency (ENISA). These rules should also apply to other authorities that are entitled to access to the data for the purpose of this Regulation.

← rec_22 · All articles · rec_24 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-30 · Text as adopted (Official Journal); later amendments are not incorporated in this text.