In processing personal data in the context of the Regulation on the citizens' initiative (Regulation (EU) No 211/2011), the organisers of the citizens' initiatives and the national authorities competent for verification and certification of the number of valid statements of support are considered to be data controllers and shall comply with the General Data Protection Regulation (Regulation (EU) 2016/679) and the national provisions adopted pursuant thereto.
On 25 May 2018, a single set of rules foreseen in the General Data Protection Regulation applying to all EU Member States replaced the previously applicable Directive 95/46/EC and the resulting national rules on protection of personal data.
Furthermore, the Regulation on the citizens' initiative includes more specific provisions on data protection.
* Statements of support may be retained beyond these time limits if necessary for the purpose of legal or administrative proceedings relating to the initiative. In this event, organisers must destroy all statements of support and copies no later than one week after the date of conclusion of said proceedings by a final decision.