Central register of data processing records

The European Medicines Agency (EMA) maintains a central register of records on its personal data processing activities. This is a legal obligation under Art 31 of Regulation (EU) 2018/1725, the data protection regulation applicable to European Union institutions.

The records contain general information on the data processing activities, including the:

• name and contact details of the controller, the Data Protection Officer and, if applicable, the processor, the co-controller(s) and the joint controller(s);
• purposes of processing;
• categories of data subjects and personal data;
• categories of recipients to whom personal data is disclosed;
• transfers of personal data to a third country or international organisation and suitable safeguards, if applicable;
• envisaged time limits for erasure of the different categories of data;
• technical and organisational data protection security measures.

EMA updates the central register as and when necessary.

For more information on how EMA collects and uses personal data, see its general privacy statement.