DORA, Article 56, EU
1. The ESAs and the competent authorities shall be allowed to process personal data only where necessary for the purpose of carrying out their respective obligations and duties pursuant to this Regulation, in particular for investigation, inspection, request for information, communication, publication, evaluation, verification, assessment and drafting of oversight plans. The personal data shall be processed in accordance with Regulation (EU) 2016/679 or Regulation (EU) 2018/1725, whichever is applicable.
2. Except where otherwise provided in other sectoral acts, the personal data referred to in paragraph 1 shall be retained until the discharge of the applicable supervisory duties and in any case for a maximum period of 15 years, except in the event of pending court proceedings requiring further retention of such data.
Version: 72ca8b31dd40ed7a
SHA-256: sha256:72ca8b31dd40ed7a364259bd56d3a36e76e3a7e988e42ead98414ae28ed2fdc9
- Article 1
- Article 2
- Article 3
- Article 4
- Article 5
- Article 6
- Article 7
- Article 8
- Article 9
- Article 10
- Article 11
- Article 12
- Article 13
- Article 14
- Article 15
- Article 16
- Article 17
- Article 18
- Article 19
- Article 20
- Article 21
- Article 22
- Article 23
- Article 24
- Article 25
- Article 26
- Article 27
- Article 28
- Article 29
- Article 30
- Article 31
- Article 32
- Article 33
- Article 34
- Article 35
- Article 36
- Article 37
- Article 38
- Article 39
- Article 40
- Article 41
- Article 42
- Article 43
- Article 44
- Article 45
- Article 46
- Article 47
- Article 48
- Article 49
- Article 50
- Article 51
- Article 52
- Article 53
- Article 54
- Article 55
- Article 57
- Article 58
- Article 59
- Article 60
- Article 61
- Article 62
- Article 63
- Article 64
Source: NovaCopilot