Article 7

1. As regards the processing of personal data in EU CSW-CERTEX, the Commission shall be a joint controller within the meaning of Article 28(1) of Regulation (EU) 2018/1725, and customs authorities and Member States’ partner competent authorities responsible for the Union non-customs formalities listed in the Annex shall be joint controllers within the meaning of Article 26(1) of Regulation (EU) 2016/679. 2. The Commission shall adopt implementing acts, establishing the respective responsibilities of the joint controllers to comply with the obligations under Regulations (EU) 2016/679 and (EU) 2018/1725. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 22(2) of this Regulation. 3. The joint controllers shall: work together to process, in a timely manner, requests made by data subjects; assist each other in matters involving the identification and handling of any data breach related to joint processing; exchange the relevant information necessary to inform data subjects pursuant to Chapter III, Section 2, of Regulation (EU) 2016/679 and Chapter III, Section 2, of Regulation (EU) 2018/1725; ensure and protect the security, integrity, availability and confidentiality of the personal data processed jointly pursuant to Article 32 of Regulation (EU) 2016/679 and Article 33 of Regulation (EU) 2018/1725.

← art_6__para_5 · All articles · art_7__para_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-04 · Text as adopted (Official Journal); later amendments are not incorporated in this text.