Ref. Ares(2020)7898139 - 23/12/2020

PREAMBLE Within the scope of Memorandum of Understanding DIGIT-00882.00, DG DIGIT will identify and analyse a set of use cases where artificial intelligence techniques could be applied in order to simplify or facilitate certain tasks done in the context of handling the access-to-document requests. In order to do this, SG needs to provide DG DIGIT with data, i.e. documents produced in the context of access to document requests, notably the applications sent by the applicants and Commission replies, including the documents partially or fully disclosed These documents contain personal data of the applicant such as name, e-mail address, postal address etc. DG DIGIT will analyse the data by applying different machine processing techniques in order to evaluate how artificial intelligence techniques could be used. The transfer of these documents to DG DIGIT and the operations to be performed by DG DIGIT qualify as a processing of the personal data which need to be duly assessed and lawfully recorded. 1. SUBJECT SG and DG DIGIT have agreed to collaborate in the context of the electronic access to Commission documents project on the conditions set out in the Memorandum of Understanding DIGIT-00882-00. The purpose of this Addendum to the Memorandum of Understanding is to clarify the data protection aspects of this collaboration. 2. DATA PROTECTION CONSIDERATIONS By means of this addendum, DG DIGIT guarantees to: x   not use the personal data transferred for any other purpose than the one specified in the Memorandum of Understanding DIGIT-00882-00; x   not share the personal data transferred with any other party for further processing without the explicit consent of the Data Controller (SG.DSG1.C.1 - Transparency, Document Management & Access to Documents); x   ensure appropriate technical and organisational measures for the further processing of the personal data transferred; x   respect the retention period that applies to the personal data transferred as stipulated for the processing operation of the original purpose and delete the documents and metadata concerned from the files and databases used for the further processing at the latest after conclusion of the Study. DIGIT-00882-01 2

Signed electronically in Ares.

For SG For DG DIGIT
[e-signed] [e-signed]

Done in Brussels on .../.../2019 Done in Brussels on .../.../2019

DIGIT-00882-01
3
IE Electronically signed on 09/10/2019 11:46 (UTC+02) in accordance with article 4.2 (Validity of electronic documents) of Commission Decision 2004/563