Division 1 The Commission shall be responsible for:F1

United Kingdom

(i)

the setting up, operation and administration of the CPMS;
(ii)

providing, where necessary, the technical means to the healthcare providers to enable patients to exercise their rights through the CPMS in accordance with Regulation (EU) 2018/1725 and responding and attending to the requests of data subjects where so required by applicable legislation;
(iii)

ensuring that the CPMS complies with the requirements applicable to Commission's communication and information systems ^f1 ;
(iv)

defining and implementing the technical means to enable patients to exercise their rights in accordance with Regulation (EU) 2018/1725;
(v)

communicating any personal data breaches within the CPMS to the healthcare providers;
(vi)

exporting personal data sets from the CPMS in the event of a change of personal data processor;
(vii)

identifying the categories of staff and other individuals to whom access to the CPMS may be granted, affiliated to the healthcare providers authorised to access CPMS;
(viii)

ensuring that the patients' name and place of birth (unless necessary for diagnosis and treatment), and the exact date of birth are encrypted and pseudonymised and that other personal data necessary for the purpose of diagnosis and treatment are pseudonymised in CPMS;
(ix)

putting adequate safeguards in place to ensure the security and confidentiality of patients' personal data processed through the CPMS.

Annotations

F1: Inserted by Commission Implementing Decision (EU) 2019/1269 of 26 July 2019 amending Implementing Decision 2014/287/EU setting out criteria for establishing and evaluating European Reference Networks and their Members and for facilitating the exchange of information and expertise on establishing and evaluating such Networks (Text with EEA relevance).

f1: Commission Decision (EU, Euratom) 2017/46 of 10 January 2017 on the security of communication and information systems in the European Commission ( OJ L 6, 11.1.2017, p. 40 ) and Commission Decision of 13 December 2017 laying down implementing rules for Articles 3, 5, 7, 8, 9, 10, 11, 12, 14, 15 of Decision (EU, Euratom) 2017/46 on the security of communication and information systems in the Commission (C(2017) 8841 final).