FantasticSearch

1. Eurojust shall establish a case management system for the processing of operational personal data listed in Annex II, data listed in Annex III and non-personal data.

2. The purposes of the case management system shall be to:

(a) support the management and coordination of investigations and prosecutions for which Eurojust is providing assistance;

(b) ensure secure access to and exchange of information on ongoing investigations and prosecutions;

(c) allow for the cross-checking of information and identifying links;

(d) allow for the extraction of data for operational and statistical purposes;

(e) facilitate monitoring to ensure that the processing of operational personal data is lawful and complies with this Regulation and the applicable data protection rules.

3. The case management system may be linked to the secure telecommunications connection referred to in Article 9 of Council Decision 2008/976/JHA () and other secure communication channels in accordance with applicable Union law.

4. Where Eurojust has been granted access to data in or from other Union information systems established under other Union legal acts, it may use the case management system to access data in or to connect to such information systems for the purpose of retrieving and processing information, including personal data, provided that it is necessary for the performance of its tasks and is in line with the Union legal acts establishing such information systems.

5. Paragraphs 3 and 4 do not extend the access rights granted to Eurojust to other Union information systems under the Union legal acts establishing those systems.

6. For the processing of operational personal data, Eurojust shall not establish any automated data file other than the case management system. The national members may temporarily store and analyse personal data for the purpose of determining whether such data are relevant to Eurojust’s tasks and can be included in the case management system. Those data may be held for up to three months.

7. In the performance of their duties, national members may process personal data on the individual cases on which they are working, in accordance with this Regulation or other applicable instruments. They shall allow the Data Protection Officer to have access to the personal data processed in the case management system.