1. As regards the processing of personal data in EU CSW-CERTEX, the Commission shall be a joint controller within the meaning of Article 28(1) of Regulation (EU) 2018/1725, and customs authorities and Member States’ partner competent authorities responsible for the Union non-customs formalities listed in the Annex shall be joint controllers within the meaning of Article 26(1) of Regulation (EU) 2016/679.
2. The Commission shall adopt implementing acts, establishing the respective responsibilities of the joint controllers to comply with the obligations under Regulations (EU) 2016/679 and (EU) 2018/1725. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 22(2) of this Regulation.
3. The joint controllers shall:
(a)
work together to process, in a timely manner, requests made by data subjects;
(b)
assist each other in matters involving the identification and handling of any data breach related to joint processing;
(c)
exchange the relevant information necessary to inform data subjects pursuant to Chapter III, Section 2, of Regulation (EU) 2016/679 and Chapter III, Section 2, of Regulation (EU) 2018/1725;
(d)
ensure and protect the security, integrity, availability and confidentiality of the personal data processed jointly pursuant to Article 32 of Regulation (EU) 2016/679 and Article 33 of Regulation (EU) 2018/1725.