Data Protection Commission
CERN’s independent supervisory authority in matters of data protection - the Data Protection Commission (DPC) - is defined in the two annexes to Operational Circular No. 11, entitled “The processing of personal data at CERN” (OC 11).
The DPC’s mandate is to monitor CERN’s compliance with OC 11, to ensure the application of OC 11 and, in particular, of data subject rights, and to evaluate and investigate complaints lodged by data subjects, regardless of their connection to CERN.
This is in line with best practices in the Member States and other intergovernmental organisations and aims to provide assurance to individuals and partners that personal data is always handled with due care and respect.
The DPC is composed of three external data protection experts, who will be nominated by the Director-General for a three-year term after their currently ongoing recruitment process.