Article 5 Processing of personal data by the Agency

The Agency shall apply Regulation (EU) 2018/1725 of the European Parliament and of the Council^f1 when processing personal data under this Regulation. The Agency shall only process personal data where such processing is necessary for the performance of its task of operating the FADO system.

As regards authentic documents, the FADO system shall only contain personal data included in the specimens of such documents or pseudonymised data.

As regards false documents, the FADO system shall only contain personal data to the extent they are necessary to describe or illustrate the fraud characteristics or the method of falsification of such documents.

The Agency shall ensure that technical and organisational measures, such as pseudonymisation, are in place in order to ensure that personal data are only processed to the extent strictly necessary for the purpose of operating the FADO system in line with the principle of data minimisation in a way which does not permit the identification of any natural person through the FADO system without using additional data.