Article 1 Subject matter and scope

This Decision lays down the rules to be followed by the European Anti-Fraud Office (‘the Office’) to inform data subjects of the processing of their data in accordance with Articles 14, 15 and 16 of Regulation (EU) 2018/1725.

It also lays down the conditions under which the Office may restrict the application of Articles 4, 14 to 20 and 35 Regulation (EU) 2018/1725, in accordance with Article 25 of that Regulation.

This Decision applies to the processing of personal data by the Office for the purpose of or in relation to the activities carried out in order to fulfil the Office's tasks referred to in Article 2 of Decision 1999/352/EC, ECSC, Euratom and Regulation (EU, Euratom) No 883/2013.

This Decision applies to the processing of personal data by Commission services and executive agencies in so far as they process personal data contained in information which they are required to transmit to the Office pursuant to Article 8(1) of Regulation (EU, Euratom) No 883/2013 or personal data already processed by the Office for the purpose of or in relation to the activities referred to in paragraph 2 of this Article.