# Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law, Article 17: Processing of personal data

Extent: E+W+S+N.I.

Any processing of personal data carried out pursuant to this Directive, including the exchange or transmission of personal data by the competent authorities, shall be carried out in accordance with Regulation (EU) 2016/679 and Directive (EU) 2016/680. Any exchange or transmission of information by Union institutions, bodies, offices or agencies shall be undertaken in accordance with Regulation (EU) 2018/1725.
Personal data which are manifestly not relevant for the handling of a specific report shall not be collected or, if accidentally collected, shall be deleted without undue delay.

---
Source: https://www.legislation.gov.uk/eudr/2019/1937/article/17 (the official version)
Page: https://openlegislation.uk/eu-directive-2019-1937/article-17
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.