Source: OJ L, 2024/607, 16.2.2024

Article 13 Sécurité

Summary What does Article 13 of the Information sharing system say?

This article places the responsibility for data security within AGORA squarely on the Commission.

It covers two dimensions: proactive security measures to protect personal data under normal operating conditions, and reactive measures to be taken when a security incident occurs.

The article connects directly to the Commission's broader role established in Article 4, where it is designated as the entity responsible for the reliability and security of AGORA's infrastructure.

Important points:

The Commission is required to implement state-of-the-art security measures for personal data in AGORA, including data access controls and an up-to-date security plan.
The Commission is required to have state-of-the-art measures in place for security incidents and must take remedial action when they occur.
The Commission must ensure full auditability of personal data processed in AGORA, meaning it must be verifiable what data was processed, when, by whom, and for what purpose.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

1. La Commission met en place les mesures de pointe nécessaires pour garantir la sécurité des données à caractère personnel traitées dans AGORA, y compris des mesures appropriées de contrôle de l’accès aux données et un plan de sécurité, qui est tenu à jour.
1. La Commission prend les mesures de pointe nécessaires en cas d’incident de sécurité, prend des mesures correctives et veille à ce qu’il soit possible de vérifier quelles données à caractère personnel ont été traitées dans AGORA, quand, par qui et à quelles fins.

Table of contents

Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.