36 / 38
130
Section C
(b)
Information, except raw data which must be classiÀed separately, must
be classiÀed in accordance with the ECB ConÀdentiality Regime by the ECB pol-
icy function owning the information.
The term ‘raw data’ is deÀned in
Article 2, point (3)
as meaning data transmitted
by reporting agents, after statistical processing and validation, or data generated by
the ECB through the execution of its functions.
(c)
The exchange of conÀdential information between the two policy func-
tions must be subject to the governance and procedural rules set out for this
purpose, and a ‘need to know’ requirement to be demonstrated by the re-
questing ECB policy function.
The term ‘need to know’ is deÀned in
Article 2, point (2)
as meaning the need to
have access to conÀdential information necessary for the fulÀlment of a statutory
function or task of the ECB, which in case of information labelled as ECB-CONFIDEN-
TIAL must be broad enough to enable staff both to access information relevant to
their tasks and take over tasks from colleagues with minimal delays.
(d)
Access to conÀdential information by the supervisory or monetary policy
function from the respective other policy function must be determined by the
ECB policy function owning the information in accordance with the ECB’s con-
Àdentiality regime, unless stated otherwise in this Decision. In case of conÁict
between the two ECB policy functions, access to conÀdential information must
be determined by the Executive Board in compliance with the principle of sep-
aration. Consistency of decisions on access rights and adequate recording of
such decisions must be ensured.
TABLE 14
Security classiÀcations of ECB documents (Annex I of Decision 2014/723/EU)
ECB-SECRET:
Access within the ECB limited to those with a strict ‘need to
know’, approved by an ECB senior manager of the originating
business area, or above.
ECB-CONFIDENTIAL: Access within the ECB limited to those with a ‘need to know’
broad enough to enable staff to access information relevant to
their tasks and take over tasks from colleagues with minimal
delay.
ECB-RESTRICTED:
Can be made accessible to ECB staff and, if appropriate, ESCB
staff with a legitimate interest.
ECB-UNRESTRICTED: Can be made accessible to all ECB staff and, if appropriate,
ESCB staff.
ECB-PUBLIC:
Authorised to be made available to the general public.