Skip to main content
European Anti-Fraud Office
Report fraud

OLAF privacy notices relating to OLAF data processing operations

OLAF provides online privacy notices to inform all individuals on the handling of personal data of in the framework of the OLAF processing operations in accordance with Regulation (EU) 2018/1725 and Commission decision 2018/1962.

The OLAF processing operations are further described by a dedicated public register of records of processing operations that you can consult online. This public register is maintained by the Data Protection Officer (DPO) of OLAF.

In addition, in the context of investigations, individual privacy notices are provided to individuals who are considered relevant under Art. 3 (2) of the Commission Decision 2018/1962: persons concerned, witnesses and informants. 

By virtue of Article 25 of Regulation (EU) 2018/1725 and of the Internal Rules laid down in Commission decision 2018/1962, in the context of investigations and other processing operations, OLAF may  implement restrictions on one or more rights under specific conditions. Such restriction will be limited in time, proportionate and respect the essence of the data subject rights. It will be lifted as soon as the circumstances justifying the restriction are no longer applicable.

Under Regulation 45/2001, the processing operations presenting specific risks were notified by the OLAF DPO to the European Data Protection Supervisor (EDPS) (Art.27), who issued opinions. You can find these online, too, next to the respective privacy notice.

Analysis of information


Conferences, meetings and trainings, administrative activity

Contact lists and user registries

Individuals' rights

Investigations and coordination cases


Mutual assistance


Protection of information

Staff management