The OLAF data protection officer
This page is still under construction
As an independent body, OLAF, has its own Data Protection Officer (DPO) to ensure the application of the principles of personal data protection in the institution. OLAF's current DPO is Laraine Laudati.
The DPO fulfils the following tasks:
- keep a register of all personal data processing operations in his/her institution.
- provide advice and make recommendations on rights and obligations.
- notify risky processing of personal data to the European Data Protection Supervisor (EDPS) for prior checking and respond to requests from the EDPS.
- may investigate matters and incidents on request or on his/her own initiative, in critical situations.
You may consult the DPO on any matter relating to data protection
by e-mail
by post:
OLAF DATA Protection Officer
European Anti Fraud Office
European Commission
Rue Joseph II, 30
1000 Bruxelles
Each Data Protection Officer has to keep a register of processing operations of personal data of the institution. This register contains the notifications of controllers to the Data Protection Officer on their processing of personal data. Any person may consult the OLAF Register.
LEGAL FRAMEWORK
Legal basis for data protection
The main legal basis establishing data protection requirements at OLAF is Regulation 45/2001, the Data Protection Regulation. All relevant EU data protection legislation is presented below.
|
Title |
Reference |
|
Data Protection Regulation |
45/2001 |
|
Data Protection Directive |
95/46 |
|
E-Privacy Directive |
2002/58/EC |
|
Data Retention Directive |
2006/24/EC |
|
Framework Decision on Data Protection Relating to Police and Judicial Cooperation |
2008/977/JHA |
|
Prüm Treaty |
2008/615/JHA |
|
Europol Decision |
2009/371/JHA |
|
Eurojust Decision |
2009/426/JHA |
EDPS opinions on OLAF legislative proposals
The Commission has to consult the EDPS before adopting a legislative proposal relating to the protection of individuals' rights and freedoms with regard to the processing of personal data. The EDPS has issued several opinions with regard to OLAF legislation.
|
Legislative proposal |
EDPS opinon(s)
|
|
Proposal to amend Regulation 1073/99 |
C-2006/233 |
|
Proposal to amend Regulation 515/97 |
C-2006/294 |
|
Proposal for Regulation on mutual administrative assistance |
C-2006/293 |
|
OLAF Manual |
C-2007/310 |
Caselaw
A body of caselaw of the EU courts has developed interpreting various data protection provisions. A summary 
[82 KB] of the caselaw describes the main decisions of the courts in this area.
Court of Justice decisions
|
Commission v. Luxembourg |
C-450/00, 4.10.2001 |
|
Rechnungshof v. Osterreichischer Rundfunk |
C-465/00 and C-138/01, 20.5.2003 |
|
Lindquist |
C-101/01, 6.11.2003 |
|
Parliament v. Council (PNR), |
C-317/04 and 318/04, 30.5.2006 |
|
Promusicae |
C-275/06, 29.1.2008 |
|
Ireland v. Parliament and Council (data retention directive), |
C-301/06, 10.2.2009 |
|
Huber v. Germany |
C-524/06, 16.12.2008 |
|
Tietosuojavaltuutettu [Finnish DP ombudsman] v. Satakunnan Markkinaporssi Oy and Satamedia Oy |
C-73/07, 16.12.2008 |
|
Commission v. Germany |
C-518/07, 9.3.2010 |
|
College van burgemeester en wethouders van Rotterdam v. Rijkeboer, |
C-553/07, 7.5.2009 |
|
Commission v. Bavarian Lager Co |
C-28/08P, 29.6.10 |
|
Volker und Markus Schecke GbR v. Land Hessen and Eifert v. Land Hessen and Bundesanstalt fur Landwirtschaft und Ernahrung, |
General Court decisions
|
Esch-Leonhardt and Others v European Central Bank |
T-320/02, 18.2.2004 (in German) |
|
Bank Austria Creditanstalt AG v Commission of the European Communities |
T-198/03, 30.5.2006 |
|
Nikolaou v. Commission |
T-259/03, 12.9.2007 (in French and Greek) |
Civil Service Tribunal decisions
|
Nanopoulos v. Commission |
F-30/08, 11.5.2010 |
REPORTS
Reports of OLAF DPO
|
First quarterly report, 2006 |
|
Second quarterly report, 2006 |
|
First quarterly report, 2007 |
|
Second quarterly report, 2007 |
|
Report for the 2nd half of 2007 |
|
Report for the 1st half of 2008 |
|
Report for the 2nd half of 2008 |
|
Report for the 1st half of 2009 |
|
Report for the 2nd half of 2009 |
Reports of the EDPS
The EDPS conducts on-the-spot inspections to monitor and ensure the application of the EU data protection regulations and provide advice. Until now, the EDPS has conducted two such inspections (the reports can be found on the DPS website).
|
Report C-2008/488 |
|
Report C-2011/471 |
Privacy statements
| Privacy statement for customs information system (CIS) | (OLAF DPO-17.2 [84 KB] ) |
| Privacy statement for virtual operational coordination unit | (OLAF DPO 159 [83 KB] ) |
| Privacy statement for mutual assistance broker | (OLAF DPO 160 [85 KB] ) |
