Article 31U.K.Protection of information transmitted
1.Any processing of personal data carried out pursuant to this Regulation, including the exchange or transmission of personal data by the competent authorities, shall be in conformity with Regulation (EU) 2016/679.
Any exchange or transmission of information by competent authorities at Union level shall be undertaken in accordance with Regulation (EU) 2018/1725.
Personal data which are not relevant for the handling of a specific case shall be deleted immediately.
2.The competent authority or authorities under national law shall be regarded as controllers within the meaning of Regulation (EU) 2016/679 with respect to personal data processing under this Regulation.
3.Notwithstanding paragraphs 1 and 2, information transmitted under this Regulation shall be used by the receiving agency only for the purpose for which it was transmitted.
4.Receiving agencies shall ensure that such information remains confidential, in accordance with their national law.
5.Paragraphs 3 and 4 shall be without prejudice to national laws enabling data subjects to be informed of the use made of information transmitted under this Regulation.
6.This Regulation shall be without prejudice to Directive 2002/58/EC.