FantasticSearch

1. The Commission shall process personal data to the extent necessary for the performance of its tasks as attributed by this Regulation related to its contribution to the correct implementation, enforcement and prevention of the circumvention of the measures imposed under this Regulation.

1a. The Commission shall process personal data, including special categories of personal data and personal data relating to criminal convictions and offences as defined in Article 10(2) and Article 11 of Regulation (EU) 2018/1725 of the European Parliament and of the Council (), for the purposes of the identification of the natural or legal persons, entities or bodies that are subject to the restrictive measures provided for in this Regulation, in order to assist the persons referred to in Article 10 of this Regulation in their compliance with this Regulation.

2. For the purposes of this Regulation, the Commission is designated as “controller” within the meaning of Article 3, point (8) of Regulation (EU) 2018/1725 in relation to the processing activities necessary to accomplish the tasks referred to in paragraph 1 of this Article.

3. The competent authorities of the Member States, including enforcement authorities, customs authorities within the meaning of Regulation (EU) No 952/2013 of the European Parliament and of the Council (), competent authorities within the meaning of Regulation (EU) No 575/2013 of the European Parliament and of the Council (), Directive 2014/65/EU of the European Parliament and of the Council (), Directive (EU) 2015/849 of the European Parliament and of the Council (), as well as Financial Intelligence Units as referred to in Directive (EU) 2015/849 and administrators of official registers wherein natural persons, legal persons, entities and bodies as well as immovable or movable property are registered, shall process and exchange without delay information, including personal data, with other competent authorities of their Member State, with competent authorities of other Member States and with the Commission, if such processing and exchange is necessary to carry out the tasks of the processing authority or the receiving authority under this Regulation, in particular when they detect instances of breach, circumvention or attempts at breach or circumvention of the prohibitions set out in this Regulation. This provision is without prejudice to rules regarding the confidentiality of information held by judicial authorities.

4. Any processing of personal data shall be carried out in accordance with this Regulation, Regulation (EU) 2016/679 of the European Parliament and of the Council () and Regulation (EU) 2018/1725, and only in so far as necessary for the application of this Regulation and to ensure effective cooperation between Member States as well as with the Commission in the application of this Regulation.