S.L. 499.76 Art. 6Register.

(1) The Authority shall maintain a register of all authorisations granted in accordance with these regulations.

(2) The Authority and any operator authorised under these regulations shall be permitted to process personal data to the extent strictly necessary for the purposes of authorisation, supervision, safety monitoring, compliance, and evaluation of autonomous small bus trials.

(3) Without prejudice to the generality of sub-regulation (2), the Authority and authorised operators may establish and maintain registers, records, and logs relating to:

(a) authorised vehicles, operators, drivers, supervisors, or other designated persons;

(b) trial activities, routes, and operational parameters;

(c) incidents, malfunctions, safety events, or deviations; and

(d) compliance, inspection, and enforcement activities.

(4) Any processing carried out under this regulation shall be limited to what is necessary and proportionate and shall be subject to appropriate technical and organisational measures to ensure compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

(5) Registers, records, and logs maintained under this regulation shall be retained only for such period as is necessary to fulfil the purposes for which they are processed and in accordance with the applicable retention schedule.