22.7.2008 Official Journal of the European Union L 193[7 (Acts adopted under the EC Treaty/Euratom Treaty whose publication is not obligatory) DECISIONS COMMISSION COMMISSION DECISION of 3 June 2008 adopting implementing rules concerning the Data Protection Officer pursuant to Article 24(8) of Regulation (EC) No 45/2001 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (2008/597/EC) THE COMMISSION OF THE EUROPEAN COMMUNITIES, Having regard to Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data ('), and in particular Article 24(8) and the Annex thereof, Whereas: (1) Regulation (EC) No 45/2001, hereinafter referred to as the Regulation’, sets out the principles and rules applicable to all Community institutions and bodies and provides for the appointment by each Community institution and Community body of a Data Protection Officer. (2)  Article 24(8) of the Regulation requires that further im- plementing rules concerning the Data Protection Officer shall be adopted by each Community institution or body in accordance with the provisions in the Annex. The implementing rules shall in particular concern the tasks, duties and powers of the Data Protection Officer. (3)  Commission Decision C(2002) 510 (%) of 18 February 2002 creates the post of Data Protection Officer (DPO) for the Commission and charges the DPO with proposing further implementing rules following consul- tation with the Directorates-General according to their needs and experiences, () OJ L 8, 12.1.2001, p. 1. (®) Not yet published in the Official Journal. HAS DECIDED AS FOLLOWS: SECTION 1 GENERAL PROVISIONS Article 1 Definitions For the purpose of this Decision and without prejudice to the definitions provided for by the Regulation: — ‘Data Protection Coordinator’ (hereinafter referred to as the ‘DPC’) shall mean the staff member within a Directorate- General or Service who has been appointed by the Director-General to coordinate all aspects of the protection of personal data in the Directorate-General, — ‘Controller’, as defined in Article 2(d) and referred to in Article 25(2)(a), shall mean the official responsible for the organisational unit that has determined the purposes and the means of the processing of personal data. Atticle 2 Scope This Decision defines the rules and procedures for implemen- tation of the function of Data Protection Officer (hereinafter referred to as the ‘DPO’) within the Commission pursuant to Article 24(8) of the Regulation. It shall not apply to the activities of the Commission when defining policies relating to the protection of individuals with regard to the processing of personal data.