Article 9 Access rights of AGORA actors

Article 9 establishes the access control rules for AGORA, building directly on the roles defined in earlier articles for AGORA actors, administrators, and users.

The article sets out a clear framework of restricted access: only those who are authorised may enter the system, and even within that group, access to personal data is tightly limited to what is strictly necessary for their supervisory, investigatory, enforcement, or monitoring role.

The article goes a step further by requiring that where a specific procedure involves personal data, only those actually participating in that procedure may access it.

Important points:

• AGORA actors are responsible for granting and revoking access rights to their administrators.
• Implement appropriate means to ensure personal data in AGORA is accessible only where strictly necessary for the relevant regulatory tasks.
• Where a specific procedure involves personal data, only AGORA administrators and users participating in that procedure may access it.