
Article 1 
Regulation (EU) No 224/2014 is amended as follows:

((1)) In Article 3, the following point is added:
'
((d)) related to non‐lethal military equipment intended solely for humanitarian or protective use, provided that the provision of such assistance or services has been notified at least 20 days in advance to the Sanctions Committee.';
((2)) Article 4 is replaced by the following:
'
Article 4 
By way of derogation from Article 2, provided that the provision of such technical assistance or brokering services, financing or financial assistance has been approved in advance by the Sanctions Committee, the prohibitions laid down in that Article shall not apply to the provision of technical assistance, financing or financial assistance to the sale, supply, transfer or export of goods and technology listed in the Common Military List or to any provision of related technical assistance or brokering services.';
((3)) The following article is inserted:
'
Article 19a 

1. The Council, the Commission and the High Representative of the Union for Foreign Affairs and Security Policy (the ‘High Representative’) may process personal data in order to carry out their tasks under this Regulation. These tasks include:
(a) as regards the Council, preparing and making amendments to Annex I;
(b) as regards the High Representative, preparing amendments to Annex I;
(c) as regards the Commission:
((i)) adding the contents of Annex I to the electronic consolidated list of persons, groups and entities subject to Union financial restrictive measures and in the interactive sanctions map, both publicly available;
((ii)) processing information on the impact of measures taken under this Regulation, such as the value of frozen funds and information on authorisations granted by the competent authorities.
2. The Council, the Commission and the High Representative may process, where applicable, relevant data relating to criminal offences committed by listed natural persons, to criminal convictions of such persons or to security measures concerning such persons, only to the extent that such processing is necessary for the preparation of Annex I.
3. For the purposes of this Regulation, the Council, the Commission service listed in Annex II to this Regulation and the High Representative are designated as ‘controllers’ within the meaning of point (8) of Article 3 of Regulation (EU) 2018/1725, in order to ensure that the natural persons concerned can exercise their rights under Regulation (EU) 2018/1725.'.
Article 2 
This Regulation shall enter into force on the day following that of its publication in the Official Journal of the European Union.
This Regulation shall be binding in its entirety and directly applicable in all Member States.Done at Brussels, 17 October 2019.
For the Council
The President
T. TUPPURAINEN