According to Article 3 (7) of Regulation (EU) 2018/1725, a personal data filing system refers to “any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis”.The definition is independent of the size of the filing system, which may vary according to the circumstances. In some cases, for instance the case of disciplinary files for a small sized EU-body, the filing system can comprise just a handful of entries.