{
  "url": "https://openlegislation.uk/eu-decision-2019-236",
  "json_url": "https://openlegislation.uk/eu-decision-2019-236.json",
  "id": "eudn/2019/236",
  "title": "Commission Decision (EU) 2019/236 of 7 February 2019 laying down internal rules concerning the provision of information to data subjects and the restriction of certain of their rights in the context of the processing of personal data by the European Commission for the purposes of internal security of the Union institutions",
  "short_title": "Decision (EU) 2019/236 laying down internal rules concerning the provision of information to data subjects…",
  "long_title": "Commission Decision (EU) 2019/236 of 7 February 2019 laying down internal rules concerning the provision of information to data subjects and the restriction of certain of their rights in the context of the processing of personal data by the European Commission for the purposes of internal security of the Union institutions",
  "citation": "EU Decision 2019/236",
  "type": "eudn",
  "year": "2019",
  "number": "236",
  "version": "current",
  "date": "2019-02-07",
  "revised": false,
  "valid_from": null,
  "extent": "E+W+S+N.I.",
  "unapplied_effects": 0,
  "provisions": [
    {
      "path": "introduction",
      "kind": "introduction",
      "number": null,
      "heading": "Introductory text",
      "url": "https://openlegislation.uk/eu-decision-2019-236/introduction",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/1",
      "kind": "article",
      "number": "1",
      "heading": "Subject matter and scope",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-1",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/2",
      "kind": "article",
      "number": "2",
      "heading": "Applicable exceptions and restrictions",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/3",
      "kind": "article",
      "number": "3",
      "heading": "Provision of information to data subjects",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-3",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/4",
      "kind": "article",
      "number": "4",
      "heading": "Right to access by data subjects, right of erasure and right to restriction of processing",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-4",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/5",
      "kind": "article",
      "number": "5",
      "heading": "Communication of a personal data breach to data subjects",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-5",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/6",
      "kind": "article",
      "number": "6",
      "heading": "Recording and registering of restrictions",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-6",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/7",
      "kind": "article",
      "number": "7",
      "heading": "Duration of restrictions",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-7",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/8",
      "kind": "article",
      "number": "8",
      "heading": "Review by the Data Protection Officer",
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-8",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/9",
      "kind": "article",
      "number": "9",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2019-236/article-9",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "signature",
      "kind": "signature",
      "number": null,
      "heading": "Signature",
      "url": "https://openlegislation.uk/eu-decision-2019-236/signature",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    }
  ],
  "outstanding_effects": [],
  "made_under": [],
  "changes_made_to": 0,
  "changes_made_to_url": "https://openlegislation.uk/eu-decision-2019-236/changes.json",
  "changes_made_by": 0,
  "changes_made_by_url": "https://openlegislation.uk/eu-decision-2019-236/changes/by-it.json",
  "instruments_made_under": 0,
  "instruments_made_under_url": "https://openlegislation.uk/eu-decision-2019-236/instruments.json",
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2019/236",
    "retrieved_at": "2026-11-01T15:12:50.141365+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}