Article 1

The following article is inserted in Regulation (EU) 2017/2063:

‘ Article 18a

1. 1..

   The Council, the Commission and the High Representative of the Union for Foreign Affairs and Security Policy (the “High Representative”) may process personal data in order to carry out their tasks under this Regulation. These tasks include:

   1. (a)

      as regards the Council, preparing and making amendments to Annexes IV and V;

   2. (b)

      as regards the High Representative, preparing amendments to Annexes IV and V;

   3. (c)

      as regards the Commission:

      1. (i)

         adding the contents of Annexes IV and V to the electronic consolidated list of persons, groups and entities subject to Union financial restrictive measures and in the interactive sanctions map, both publicly available;

      2. (ii)

         processing information on the impact of measures taken under this Regulation, such as the value of frozen funds and information on authorisations granted by the competent authorities.

2. 2..

   The Council, the Commission and the High Representative may process, where applicable, relevant data relating to criminal offences committed by listed natural persons, to criminal convictions of such persons or to security measures concerning such persons, only to the extent that such processing is necessary for the preparation of Annexes IV and V.

3. 3..

   For the purposes of this Regulation, the Council, the Commission service listed in Annex III to this Regulation and the High Representative are designated as “controllers” within the meaning of point (8) of Article 3 of Regulation (EU) 2018/1725 of the European Parliament and of the Council^f1, in order to ensure that the natural persons concerned can exercise their rights under Regulation (EU) 2018/1725.’.