In the event of joint responsibility for processing, Article 26 of the GDPR stipulates that “The essence of the arrangement shall be made available to the data subject.”. Similarly, Article 20 of the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data sets out the obligation to formalize the transfer of data from a federal public authority to any other public authority or private organization if this transfer is carried out on the basis of Article 6.1.c) or e) of the GDPR and to publish the said protocol.
You will therefore find these publications below. The documents are only available in French and/or Dutch.
- Joint responsibility agreement (Article 26 GDPR)
- Protocol on data transfers based on Article 6.1.c) or e) of the GDPR (Article 20 of the Law of 30 July 2018)