Art. 6 Responsibilities of Digital Services Coordinators | Information sharing system | DSA

This article sets out the obligations and data protection responsibilities of Digital Services Coordinators in relation to AGORA.

It mirrors Article 4, which covers the Commission's responsibilities, but from the national level perspective.

The article covers three broad areas: the appointment and oversight of AGORA administrators at Member State level, the duty to control who accesses AGORA, and the classification of Digital Services Coordinators as separate data controllers under GDPR for the personal data processing activities they carry out in AGORA.

Notably, the article extends the separate controller classification to other competent authorities designated by Member States that are not themselves Digital Services Coordinators.

Important points:

Appoint at least one AGORA administrator per Member State and ensure the Commission is informed without delay.
Ensure only authorised users have access to AGORA, and that the AGORA administrator fulfils their responsibilities under this Regulation.
Digital Services Coordinators, and other designated competent authorities, are each classified as separate controllers under Regulation (EU) 2016/679 for the personal data processing activities they carry out in AGORA.

1. Each Digital Services Coordinator shall appoint, for its Member State, at least one AGORA administrator.
1. Each Digital Services Coordinator shall be responsible for ensuring that, in relation to the performance of the tasks conferred on it in accordance with Regulation (EU) 2022/2065, only authorised AGORA users have access to AGORA.
1. Each Digital Services Coordinator shall inform the Commission of the AGORA administrator appointed by it in accordance with paragraph 1 without delay. The Commission shall share that information with the other Digital Services Coordinators and the Board.
1. Each Digital Services Coordinator shall ensure that the responsibilities of the AGORA administrator pursuant to this Regulation are fulfilled.
1. Digital Services Coordinators shall be separate controllers within the meaning of Article 4, point (7), of Regulation (EU) 2016/679 with respect to the processing of personal data when registering their AGORA users and granting them access to AGORA.
1. Where the Digital Services Coordinators process personal data in the operation of AGORA for the purpose of sharing information, requesting and accessing information, answering requests for information, making referrals, requesting action and requesting support, they shall be separate controllers within the meaning of Regulation (EU) 2016/679 for the processing activities they carry out.
1. Where other competent authorities designated by the Member States pursuant to Article 49(1) of Regulation (EU) 2022/2065, which are not the Digital Services Coordinator, process personal data in the operation of AGORA, such authorities shall be separate controllers within the meaning of Regulation (EU) 2016/679.