FantasticSearch

1. The Council, the Commission and the High Representative of the Union for Foreign Affairs and Security Policy (the ‘High Representative’) shall process personal data that are necessary to carry out their tasks under this Regulation. Those tasks include:

(a) as regards the Council, preparing and making amendments to Annex I;

(b) as regards the High Representative, preparing amendments to Annex I;

(c) as regards the Commission:

(i) adding the contents of Annex I to the electronic, consolidated list of persons, groups and entities subject to Union financial sanctions and to the interactive sanctions map, both publicly available;

(ii) processing information related to its contribution to the correct implementation, enforcement and prevention of the circumvention of the measures imposed under this Regulation.

1a. The Commission shall process personal data, including special categories of personal data and personal data relating to criminal convictions and offences as defined in Article 10(2) and Article 11 of Regulation (EU) 2018/1725, for the purposes of the identification of the natural or legal persons, entities or bodies that are subject to the restrictive measures provided for in this Regulation, in order to assist the persons referred to in Article 10 of this Regulation in their compliance with this Regulation.

2. The Council, the Commission and the High Representative may process, where applicable, relevant data relating to criminal offences committed by listed natural persons, to criminal convictions of such persons or to security measures concerning such persons, only to the extent that such processing is necessary for the preparation of Annex I.

3. For the purposes of this Regulation, the Council, the Commission and the High Representative are designated as ‘controller’ within the meaning of point (8) of Article 3 of Regulation (EU) 2018/1725 of the European Parliament and of the Council (), in order to ensure that the natural persons concerned can exercise their rights under Regulation (EU) 2018/1725.

4. The competent authorities of the Member States, including enforcement authorities, customs authorities within the meaning of Regulation (EU) No 952/2013 of the European Parliament and of the Council (), competent authorities within the meaning of Regulation (EU) No 575/2013 of the European Parliament and of the Council (), Directive (EU) 2015/849 of the European Parliament and of the Council (), and Directive 2014/65/EU, as well as Financial Intelligence Units as referred to in Directive (EU) 2015/849, and administrators of official registers wherein natural persons, legal persons, entities and bodies, as well as immovable or movable property, are registered, shall process and exchange without delay information, including personal data and, if necessary, the information referred to in Article 8j, with other competent authorities of their Member State, with competent authorities of other Member States and with the Commission, if such processing and exchange is necessary to carry out the tasks of the processing authority or the receiving authority under this Regulation, in particular when they detect instances of breach, circumvention or attempts at breach or circumvention of the prohibitions set out in this Regulation. This provision is without prejudice to rules regarding the confidentiality of information held by judicial authorities.