# Commission Implementing Regulation (EU) 2019/1715 of 30 September 2019 laying down rules for the functioning of the information management system for official controls and its system components ... (Text with EEA relevance), Article 11: Data controllers and joint controllership

Extent: E+W+S+N.I.

1. The appropriate authority and the competent authorities ... shall be joint controllers of data processing operations in each of the components.
2. The appropriate authority shall be responsible for:
(a) determining and implementing the technical means to enable data subjects to exercise their rights, ...;
(b) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(c) determining the categories of its staff and external providers to whom access to the components may be granted;
(d) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(e) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3. The competent authorities ... shall be responsible for:
(a) ensuring that data subject’s rights are exercised in compliance with Regulation (EU) 2016/679 and this Regulation;
(b) ensuring the security and confidentiality of personal data pursuant to Section 2 of Chapter IV of Regulation (EU) 2016/679;
(c) designating the staff that are to have access to each component;
(d) ensuring that staff accessing each component are adequately trained to perform their tasks in accordance with Regulation (EU) 2016/679 ....
4. The competent authorities ... may designate different joint controllers ... for the purpose of fulfilling one or more of the obligations referred to in paragraph 3.

---
Source: https://www.legislation.gov.uk/eur/2019/1715/article/11 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-1715/article-11
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.