DECISION OF THE EUROPEAN SYSTEMIC RISK BOARD

of 17 August 2020

on the appointment of the Data Protection Officer of the European Systemic Risk Board

(ESRB/2020/11)

(2020/C 303/04)

THE GENERAL BOARD OF THE EUROPEAN SYSTEMIC RISK BOARD,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) No 1092/2010 of the European Parliament and of the Council of 24 November 2010 on European Union macro-prudential oversight of the financial system and establishing a European Systemic Risk Board (1),

Having regard to Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (2), and in particular to Article 43 thereof,

Having regard to Decision ESRB/2012/1 of the European Systemic Risk Board of 13 July 2012 implementing rules on data protection at the European Systemic Risk Board (3), and in particular Article 3 thereof,

Having regard to Decision (EU) 2020/655 of the European Central Bank of 5 May 2020 adopting implementing rules concerning data protection at the European Central Bank and repealing Decision ECB/2007/1 (ECB/2020/28) (4), and in particular Article 3(5) thereof,

Whereas:

(1) On 30 July 2019, the General Board of the European Systemic Risk Board (ESRB) adopted Decision ESRB/2019/17 of the European Systemic Risk Board (5), which appointed Ms Evanthia Chatziliasi as Data Protection Officer (DPO) of the ESRB until 31 July 2024.

(2) At the request of Ms Chatziliasi, her term of office will terminate on 31 August 2020. The appointment of her successor as DPO of the ESRB from 1 September 2020 is therefore necessary.

(3) In line with Article 43(2) of Regulation (EU) 2018/1725, the DPO of the European Central Bank (ECB) also currently acts as DPO of the ESRB.

(4) On 21 July 2020, the Executive Board of the ECB appointed Mr Maarten Daman to succeed Ms Evanthia Chatziliasi as DPO of the ECB with effect from 1 September 2020 until 31 August 2023.

(5) Article 3(5) of Decision (EU) 2020/655 (ECB/2020/28), which applies from 1 November 2020,provides that, at the request of the ESRB, the DPO of the ECB may be authorised to also fulfil in relation to the ESRB the tasks set out in Article 45 of Regulation (EU) 2018/1725. For reasons of efficiency, and in line with past practice, the General Board of the ESRB considers that such a request should be made,

HAS ADOPTED THIS DECISION:

Article 1 Appointment of the Data Protection Officer of the European Systemic Risk Board Mr Maarten Daman is appointed as Data Protection Officer (DPO) of the European Systemic Risk Board (ESRB) with effect from 1 September 2020 until 31 August 2023, in his capacity as member of staff and DPO of the European Central Bank (ECB).

Article 2 Request for authorisation pursuant to Article 3(5) of Decision (EU) 2020/655 (ECB/2020/28) Pursuant to Article 3(5) of Decision (EU) 2020/655 (ECB/2020/28) the ESRB requests that any DPO appointed by the ECB after 1 November 2020 be authorised to also fulfil in relation to the ESRB the tasks set out in Article 45 of Regulation (EU) 2018/1725.

Article 3 Entry into force This Decision shall enter into force on 17 August 2020.

Done at Frankfurt am Main, 17 August 2020. Head of the ESRB Secretariat, on behalf of the General Board of the ESRB Francesco MAZZAFERRO

(1) OJ L 331, 15.12.2010, p. 1.

(2) OJ L 295, 21.11.2018, p. 39.

(3) OJ C 286, 22.9.2012, p. 16.

(4) OJ L 152, 15.5.2020, p. 13.

(5) Decision ESRB/2019/17 of the European Systemic Risk Board of 30 July 2019 on the appointment of the Data Protection Officer of the European Systemic Risk Board (OJ C 344, 11.10.2019, p. 3).