Regulatory Alerts2026-07-30
Added
Decision (EU) 2026/1942 on the processing of personal data in the context of the prudential supervision of credit institutions
The European Central Bank and national competent authorities are designated as joint controllers for personal data processing during specific supervisory tasks, including fit and proper procedures, authorisation, ongoing supervision, enforcement, on-site inspections, and oversight. The decision allocates responsibilities for providing information to data subjects and handling their requests based on the specific procedure and entity type, with roles typically shifting from national competent authorities to the ECB at defined procedural milestones. Each joint controller remains individually responsible for maintaining records of processing activities, determining storage periods, and managing personal data breaches, while bearing joint and several liability for damages resulting from infringements of applicable data protection regulations.
More like this from ECB
ECB published 2 documents in the last 30 days. We email you each new one the day it's published.