Registry Information Service on European Residents (RISER Service)
Function as provided in February 2016
Qualification: IT-based service
01/03/2016 - 31/03/2018
Recertification No. 1: 02/2014
Initial Certification: 02/2011
Recert2016 Short Public Report RISER
RISER ID Services GmbH
RISER processes a minimum of data. RISER does not use the data-results for own purposes such as "address pooling".
RISER ID Services GmbH processes query and result data on behalf of its customers. Even though RISER facilitates its privacy-compliant use, customers must ensure that processing of query/result data is backed by a legal basis and privacy compliant processes.
RISER ID Services GmbH offers a central online service that enables customers to request and verify address information in several European countries. Customers can request this information through single inquiries or through bulk inquiries. RISER can adapt to the customers' needs in terms of data format and the required interfaces. The result of the inquiry returns the full name and full address as listed in the respective official register.
Address inquiries for different countries or communities are submitted via a central web portal. RISER distributes the request(s) to the respective register office(s). The register(s) process(es) the request(s) and send(s) the result(s) back to RISER. Following this, the result(s) can be downloaded from the web portal by the customer.
The main changes since the last recertification in 2014 are listed below:
The following new components have been added to the ToE:
This new feature allows notification of a customer who already performed an inquiry on a specific person if another customer conducts an inquriy on said person and receives a different (new) result. The customer is informed about the fact that it may be useful to perform another inquiry. For this purpose, RISER makes use of hash values of inquiry and disclosure data. On the contrary, RISER does not operate a "shadow" database with information on residents.
Enhanced registry information:
RISER is now capable of processing enhanced inquiries on registry information ("erweiterte Melderegisterauskunft").
Database with information on deceased persons:
RISER operates a database containing information on deceased persons. Inquiry data is matched with the data in this database in order to filter out inquiries on dead persons prior to the inquiry being forwarded to the competent registration authority.
A mullti step archiving concept has been implemented.
Currently, RISER is capable of forwarding inquiries to registration authorities in the following countries:
The evaluation demonstrated that RISER still complies with EU data protection law. For details, cf. the Short Public Report.
RISER ID Services GmbH requests registry information on behalf of the customers. Thus, RISER qualifies as data processor in the sense of Article 2(e) of Directive 95/46/EC when processing inquiry and result data.
The Target of Evaluation (ToE) is the Registry Information Service on European Residents (RISER Service).
It does not include
Through a central web portal, address verification can be performed against official population registers inquiring into Austria, Estonia, Germany, Hungary, Ireland (electoral roll), Italy, Lithuania, Sweden, Switzerland and United Kingdom (electoral roll).
Dipl. Math. Ralf von Rahden
datenschutz cert GmbH
Dr. Irene Karper LL.M.Eur.
datenschutz cert GmbH
Prof. Dr. Friedrich Holl
RISER ID Services GmbH provides an online service that enables companies to request address information from official population registries. Users of the service are controllers in respect of personal data that is delivered to them via RISER. The service is designed in a way that facilitates users' compliance with EU data protection law.