Personal data protection

Data Protection Policy

The right to protection of personal data is a fundamental right foreseen in the Charter of Fundamental Rights of the European Union. ECHA is therefore highly committed to ensuring the protection of the personal data of the individuals it works with, regardless of whether they are industry representatives (registrants, applicants for authorisation, etc); stakeholders; individuals subscribing to a newsletter; members or invited experts of an ECHA body; staff members; or job applicants. The Agency will process any personal data it collects in line with the provisions of Regulation (EC) N° 45/2001 on the protection of the individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data.

Personal data shall only be processed for the performance of tasks carried out in the public interest on the basis of EU law or in the legitimate exercise of official authority vested in the Agency. Alternatively, processing is lawful if it forms part of a legal or contractual obligation or when the individual concerned has given their unambiguous consent.

All processing operations of personal data shall be duly notified to ECHA's Data Protection Officer and, if the case arises, to the European Data Protection Supervisor.

As a general rule, anyone has the right to be informed about the processing of their personal data, while they will also have the right to access that information at any time and to rectify it when it is inaccurate or incomplete.

For questions or complaints concerning the processing of your personal data, you can turn to the Agency's Data Protection Officer. Alternatively you can also have recourse to the European Data Protection Supervisor,


Data Protection Officer

Like all other EU institutions, bodies or agencies, ECHA has appointed a Data Protection Officer (DPO) to ensure the application of the principles of personal data protection in the Agency. Currently, this function is exercised by Mr Bo Balduyck (

The DPO provides an independent advisory function. They keep a register of all personal data processing operations in the Agency and provide advice and make recommendations on rights and obligations. The DPO also notifies the European Data Protection Supervisor (EDPS) of any risky processing of personal data and responds to any requests from the EDPS. In critical situations, the DPO may investigate matters and incidents on request or on their own initiative.

Categories Display

Tagged as:

(click the tag to search for relevant content)