1. Each Member State shall communicate to the Commission the name of the natural or legal person, public authority, agency or any other body designated by national law to exercise the functions of controller in accordance with point (d) of Article 2 of Directive 95/46/EC, with a view to its publication on the European e-Justice Portal.

2. Member States shall ensure that the technical measures for ensuring the security of personal data processed in their national insolvency registers referred to in Article 24 are implemented.

3. Member States shall be responsible for verifying that the controller, designated by national law in accordance with point (d) of Article 2 of Directive 95/46/EC, ensures compliance with the principles of data quality, in particular the accuracy and the updating of data stored in national insolvency registers.

4. Member States shall be responsible, in accordance with Directive 95/46/EC, for the collection and storage of data in national databases and for decisions taken to make such data available in the interconnected register that can be consulted via the European e-Justice Portal.

5. As part of the information that should be provided to data subjects to enable them to exercise their rights, and in particular the right to the erasure of data, Member States shall inform data subjects of the accessibility period set for personal data stored in insolvency registers.