OC11 — the processing of personal data
CERN’s internal data protection framework. Revision 1 entered into force on 1 February 2026, replacing the 2019 circular and its annexes, and clarifying the conditions for consent, the dpia procedure, the role of external entities, CERN’s position as data controller, and data subject rights. As an intergovernmental organization CERN is not bound by the GDPR — so it legislates its own equivalent.
Topology
- Part of: data-privacy
- Governs: gms — personal data is exactly what group membership computes over.
- Supersedes: oc11-2019
- Cites: oc11-rev1 — the revision and its entry into force.