{
  "url": "https://openlegislation.uk/eu-decision-2018-1962/article-7",
  "json_url": "https://openlegislation.uk/eu-decision-2018-1962/article-7.json",
  "legislation": "eudn/2018/1962",
  "legislation_title": "Commission Decision (EU) 2018/1962 of 11 December 2018 laying down internal rules concerning the processing of personal data by the European Anti-Fraud Office (OLAF) in relation to the provision of information to data subjects and the restriction of certain of their rights in accordance with Article 25 of Regulation (EU) 2018/1725 of the European Parliament and of the Council",
  "legislation_url": "https://openlegislation.uk/eu-decision-2018-1962",
  "path": "article/7",
  "kind": "article",
  "number": "7",
  "heading": "Review by the Data Protection Officer",
  "text": "1. The Data Protection Officer of the Office (‘the Office DPO’), shall be informed, without undue delay, whenever data subjects' rights are restricted in accordance with this Decision. The Office DPO shall be provided with access to the record and any documents containing underlying factual and legal elements.\nThe Office DPO may request a review of the restrictions. The Office DPO shall be informed in writing of the outcome of the requested review.\n2. Where Commission services and executive agencies process personal data in instances referred to in Article 1(3), the Data Protection Officer of the Commission (‘the Commission DPO’) or, where applicable, the Data Protection Officer of the executive agency concerned (‘the Agency DPO’), shall be informed, without undue delay, whenever data subjects' rights are restricted in accordance with this Decision. Upon request, the Commission DPO or, where applicable, the Agency DPO shall be provided with access to the record and any documents containing underlying factual and legal elements.\nThe Commission DPO or, where applicable, the Agency DPO, may request a review of the restrictions. The Commission DPO or the Agency DPO shall be informed in writing about the outcome of the requested review.\n3. All information exchanges with the DPO throughout the procedure shall be recorded in the appropriate form.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2018/1962/article/7",
    "retrieved_at": "2026-11-01T15:12:54.589826+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}