18.11.2011 Official Journal of the European Union L 301/3 II (Non-legislative acts) REGULATIONS COMMISSION IMPLEMENTING REGULATION (EU) No 1179/2011 of 17 November 2011 laying down technical specifications for online collection systems pursuant to Regulation (EU) No 211/2011 of the European Parliament and of the Council on the citizens’ initiative THE EUROPEAN COMMISSION, (5)  Implementation by the organisers of the technical spec- ifications should guarantee certification of the online collection systems by the Member States’ authorities, Having regard to the Treaty on the Functioning of the European and contribute to ensure the implementation of the Union, appropriate technical and organisational measures required to comply with the obligations imposed by Directive 95/46/EC of the European Parliament and of Having regard to Regulation (EU) No 211/2011 of the the Council (%) on the security of the processing activities, European Parliament and of the Council of 16 February 2011 both at the time of the design of the processing system on the citizens' initiative ('), and in particular Article 6(5) and at the time of the processing itself, in order to thereof, maintain security and thereby to prevent any unauth- orised processing and protect personal data against acci- dental or unlawful destruction or accidental loss, After consulting the European Data Protection Supervisor, alteration, unauthorised disclosure or access. Whereas: (6)  The process of certification should be facilitated by the use by the organisers of the software provided by the Commission in accordance with Article 6(2) of Regu- (1) Regulation (EU) No 211/2011 provides that where lation (EU) No 211/2011. statements of support are collected online, the system used for that purpose must satisfy certain security and technical requirements and must be certified by the competent authority of the relevant Member State. 7) Organisers of citizens' initiatives, as data controllers, should, when collecting statements of support online, implement the technical specifications set out in this (2)  An online collection system within the meaning of Regu- Regulation in order to ensure the protection of lation (EU) No 211/2011 is an information system, personal data processed. Where the processing is consisting of software, hardware, hosting environment, carried out by a processor, the organisers should business processes and staff in order to accomplish the ensure that the processor acts only on instructions online collection of statements of support. from the organisers and that he implements the technical specifications set out in this Regulation. (3)  Regulation (EU) No 211/2011 sets out the requirements that online COHG.C.UOH systems have to comply Wl_th_ mn (8)  This Regulation respects fundamental rights and observes order to be certlﬁed. and pro.v.lde.s that the. Commission the principles enshrined in the Charter of Fundamental should ad(?pt technical specifications for implementing Rights of the European Union, in particular Article 8 those requirements. thereof, which states that everyone has the right to the protection of personal data concerning him or her. (4)  The Open Web Application Security Project's (OWASP) Top 10 2010 project provides an overview of the most critical web application security risks as well as tools for (99 The measures provided for in this Regulation are in addressing these risks; the technical specifications therefore draw upon the findings of this project. () O] L 65, 11.3.2011, p. 1. accordance with the opinion of the Committee estab- lished under Article 20 of Regulation (EU) No 211/2011, () OJ L 281, 23.11.1995, p. 31.