Article 23

Information, including personal data, may be exchanged in IMI pursuant to this Regulation between IMI actors within the Union and their counterparts in a third country only where the following conditions are satisfied: the information is processed pursuant to a provision of a Union act listed in the Annex and an equivalent provision in the law of the third country; the information is exchanged or made available in accordance with an international agreement providing for: the application of a provision of a Union act listed in the Annex by the third country; the use of IMI; and the principles and modalities of that exchange; and the third country in question ensures adequate protection of personal data in accordance with Article 25(2) of Directive 95/46/EC, including adequate safeguards that the data processed in IMI shall only be used for the purpose for which they were initially exchanged, and the Commission has adopted a decision in accordance with Article 25(6) of Directive 95/46/EC. Where the Commission is an IMI actor, Article 9(1) and (7) of Regulation (EC) No 45/2001 shall apply to any exchange of personal data processed in IMI with its counterparts in a third country. The Commission shall publish in the Official Journal of the European Union and keep up-to-date a list of third countries authorised to exchange information, including personal data, in accordance with paragraph 1.

← art_22__para_2__text_1 · All articles · 1. →

Source: EUR-Lex (Cellar) · retrieved 2026-10-30 · Text as adopted (Official Journal); later amendments are not incorporated in this text.