# Regulation (EU) 2019/1896 of the European Parliament and of the Council of 13 November 2019 on the European Border and Coast Guard and repealing Regulations (EU) No 1052/2013 and (EU) 2016/1624, Article 89: Processing of personal data in the framework of EUROSUR

Extent: E+W+S+N.I.

1. Where the national situational picture requires the processing of personal data, those data shall be processed in accordance with Regulation (EU) 2016/679 and, where applicable, Directive (EU) 2016/680. Each Member State shall designate the authority which is to be considered as controller within the meaning of point 7 of Article 4 of Regulation (EU) 2016/679 or point (8) of Article 3 of Directive (EU) 2016/680, as applicable, and which shall have central responsibility for the processing of personal data by that Member State. Each Member State shall notify the details of that authority to the Commission.
2. Ship and aircraft identification numbers shall be the only personal data that are permitted to be accessed in the European situational and specific situational pictures and the EUROSUR fusion services.
3. Where the processing of information in EUROSUR exceptionally requires the processing of personal data other than ship and aircraft identification numbers, any such processing shall be strictly limited to what is necessary for the purposes of EUROSUR in accordance with Article 18.
4. Any exchange of personal data with third countries in the framework of EUROSUR shall be strictly limited to what is absolutely necessary for the purposes of this Regulation. It shall be carried out in accordance with Chapter V of Regulation (EU) 2018/1725 by the Agency, and in accordance with Chapter V of Regulation (EU) 2016/679, with Chapter V of Directive (EU) 2016/680, as applicable, and with the relevant national provisions on data protection transposing that Directive, by the Member States.
5. Any exchange of information under Articles 72(2), 73(3) and 74(3) which provides a third country with data that could be used to identify persons or groups of persons whose request for access to international protection is under examination or who are under a serious risk of being subjected to torture, inhuman and degrading treatment or punishment, or any other violation of fundamental rights, shall be prohibited.
6. Member States and the Agency shall keep records of processing activities in accordance with, Article 30 of Regulation (EU) 2016/679, Article 24 of Directive (EU) 2016/680, and Article 31 of Regulation (EU) 2018/1725, as applicable.

---
Source: https://www.legislation.gov.uk/eur/2019/1896/article/89 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-1896/article-89
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.