Recital 16

(16) Any processing of personal data and non-personal data in EU CSW-CERTEX should take place in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (9) (the ‘GDPR’), Regulation (EU) 2018/1725 of the European Parliament and of the Council (10) (the ‘IDPR’) and is without prejudice to Regulation (EU) 2018/1807 of the European Parliament and of the Council (11) (‘Regulation on the free flow of non-personal data’). It should take place within a safe and secure environment that is protected from cyber-threats. To that end, suitable organisational and technical cybersecurity measures, such as encryption, should be used. Furthermore, it should allow for the exchange of information between the national single window environments for customs and Union non-customs systems without any storing of personal data, with the exception of technical logs required to identify the data sent to a given system. It should also transform data, where necessary, to enable information exchange between both digital domains. The information technology infrastructure used for data transformation should be located in the Union.

← Recital 15 · All articles · Recital 17 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-04 · Text as adopted (Official Journal); later amendments are not incorporated in this text.