EUROPEAN COMMISSION

Brussels, 2.12.2020

COM(2020) 712 final

2020/0345(COD)

Proposal for a

REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

on a computerised system for communication in cross-border civil and criminal proceedings (e-CODEX system), and amending Regulation (EU) 2018/1726

(Text with EEA relevance)

{SEC(2020) 408 final} - {SWD(2020) 541 final} - {SWD(2020) 542 final}

EXPLANATORY MEMORANDUM

1.CONTEXT OF THE PROPOSAL

•Reasons for and objectives of the proposal

•Consistency with existing policy provisions in the policy area

•Consistency with other Union policies

2.LEGAL BASIS, SUBSIDIARITY AND PROPORTIONALITY

•Legal basis

Since the e-CODEX system would facilitate judicial cooperation both in civil and criminal matters, the legal basis for the system is a combination of Articles 81 and 82 of the Treaty on the Functioning of the European Union. More specifically, the e-CODEX system facilitates access to justice in civil matters in line with Article 81(2). In criminal matters, Article 82(1) is the legal basis for the EU’s right to act in the field of judicial cooperation to facilitate cooperation between judicial or equivalent authorities of the Member States in relation to proceedings in criminal matters and the enforcement of decisions.

•Subsidiarity

Creating a mechanism for the secure exchange of information in cross-border judicial proceedings is best achieved at EU level. In the absence of EU action, there is a high probability that Member States may develop national systems without taking into account whether interoperability can be ensured among them. While operational management at EU level entails costs, it is the best way to achieve an interoperable system for cross-border communication between competent authorities and therefore the best way to achieve the general objective: a common area of security and justice that works even more efficiently.

Establishing a common system for digital cross-border exchange at EU level will provide an off-the-shelf solution that can be used for different legal procedures while ensuring interoperability between national systems. Such a system is more effective than having diverging systems at national level, which would not necessarily ensure that cross-border communication between Member States is possible. Moreover, having a common system at EU level will generate economies of scale, as the EU will have to manage only one IT solution for secure cross-border communication in the justice area. It will also provide added value for Member States, as the costs of digitalising their cross-border procedures are expected to decrease and become less of a barrier for cooperation.

•Proportionality

•Choice of the instrument

3.RESULTS OF EX POST EVALUATIONS, STAKEHOLDER CONSULTATIONS AND IMPACT ASSESSMENTS

•Ex post evaluations/fitness checks of existing legislation

•Stakeholder consultations

•Collection and use of expertise

•Impact assessment

•Fundamental rights

4.BUDGETARY IMPLICATIONS

5.OTHER ELEMENTS

•Implementation plans and monitoring, evaluation and reporting arrangements

The entity managing the e-CODEX system will continue to be responsible for it until the successful finalisation of the handover/takeover process. The process of handing over the system to eu-LISA is scheduled to take no more than 6 months starting on 1 January 2023. During this period, the entity managing the e-CODEX system will retain full responsibility for the e-CODEX system. This period will allow eu-LISA to make the necessary preparations for the takeover of the system. The Agency should recruit the necessary staff and plan for procurement activities accordingly.

Two years after eu-LISA takes over responsibility for the e-CODEX system and every 2 years after that, eu-LISA must provide the Commission with a comprehensive activities report on the technical evolution and functioning of the e-CODEX system during the reporting period, including its security. These reports will be based on the information provided annually by the Member States and the Commission. They will contain the list of authorised e-CODEX access points; an inventory of the cross-border civil and criminal procedures using the e-CODEX system; the degree of digitalisation of each cross-border civil or criminal procedure; the number of business messages sent to and received from each of the other Member States involved in each cross-border civil and criminal procedure; and the number and type of incidents impacting the security of the e-CODEX system.

Three years after eu-LISA takes over responsibility for the e-CODEX system and every 4 years after that, the Commission has to produce an overall evaluation of the e-CODEX system, including an assessment of the Regulation’s application, an examination of results achieved against objectives. The first evaluation should include also an assessment of the functioning of the Programme Management Board, and whether it should be maintained. Taking into account the outcome of that evaluation, the Commission may make any necessary future actions.

•Detailed explanation of the specific provisions of the proposal

2020/0345 (COD)

Proposal for a

REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

on a computerised system for communication in cross-border civil and criminal proceedings (e-CODEX system), and amending Regulation (EU) 2018/1726

(Text with EEA relevance)

THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,

Having regard to the Treaty on the Functioning of the European Union, and in particular Article 81(2) and Article 82(1) thereof,

Having regard to the proposal from the European Commission,

After transmission of the draft legislative act to the national parliaments,

Acting in accordance with the ordinary legislative procedure,

Whereas:

(1)Ensuring an effective access of citizens and businesses to justice and facilitating judicial cooperation between the Member States are among the main objectives of the EU’s Area of Freedom, Security and Justice enshrined in Title V of the Treaty.

(2)It is thus important that appropriate channels are developed to ensure that justice systems can efficiently cooperate in a digital way. Therefore, it is essential to establish, at Union level, an information technology instrument that allows swift, direct, interoperable, reliable and secure cross-border electronic exchange of case related data. Such a system, enabling citizens and businesses to exchange documents and evidence in digital form with judicial or other competent authorities, when provided forby national or Union law, should contribute to improving access to justice.

(3)There are tools which have been developed for the digital exchange of case related data, without replacing or requiring costly modifications to the existing back-end systems already established in the Member States. The e-Justice Communication via On-line Data Exchange (e-CODEX) system is the main such tool developed to date.

(4)The e-CODEX system is a tool specifically designed to facilitate the cross-border electronic exchange of messages in the justice area. In the context of increased digitalisation of proceedings in civil and criminal matters, the aim of the e-CODEX system is to improve the efficiency of cross-border communication between the competent authorities and facilitate access to justice of citizens and businesses. It has been managed up to date by a consortium of Member States and organisations with funding from Union programmes

(5)The e-CODEX system consists of two software elements: the Domibus Gateway software for the exchange of messages with other gateways and the Domibus connector software, which provides a number of functionalities related to the transmission of messages between national systems. The gateway is based on the eDelivery building block maintained by the Commission, while the operational management of the connector is carried out by a consortium of Member States and organisations with funding from Union Programmes (the entity managing the e-CODEX system). The connector software provides functions such as verification of electronic signatures via a security library and proof of delivery. In addition, the entity managing the e-CODEX system has developed templates for digital forms to be used in the specific civil and criminal procedures for which it has piloted the e-CODEX system.

(6)Given the importance of the e-CODEX system for cross-border exchanges in the justice area in the Union, there should be a sustainable Union legal framework establishing the e-CODEX system and providing rules regarding its functioning and development. Such legal framework should clearly define and frame the components of the e-CODEX system in order to guarantee its technical sustainability. The system should define the IT components of an access point, which should consist of a gateway for the purpose of secure communication with other identified gateways and a connector for the purpose of supporting the message exchanges. It should also include digital procedural standards consisting of the business process models and templates defining the electronic format of the documents used in the context of those procedures to support the use of e-CODEX access points for legal procedures provided for by legal acts adopted in the area of judicial cooperation and to enable the exchange of information between the access points.

(7)Since it is necessary to ensure the long term sustainability of the e-CODEX system and its governance while taking into account the independence of the national judiciaries, an appropriate entity for the operational management of the system should be designated.

(8)The most appropriate entity for the operational management of the system is an agency, since its governance structure allows for the involvement of Member States in the operational management of the system through participation in the Agency's Management Board, Advisory Groups and Programme Management Boards. The European Union Agency for the operational management of large-scale IT systems in the area of freedom, security and justice (eu-LISA) established by Regulation (EU) 2018/1726 of the European Parliament and of the Council 33 has relevant experience in managing large-scale IT Systems. eu-LISA should therefore be entrusted with the operational management of the e-CODEX system. It is also necessary to adjust the existing governance structure of eu-LISA by adapting the responsibilities of its Management Board and by establishing an e-CODEX Advisory Group. Regulation (EU) 2018/1726 should therefore be amended accordingly. A specific Programme Management Board should also be established.

(9)According to Article 19 of Regulation (EU) 2018/1726 the role of the Management Board of eu-LISA is to ensure that all decisions and actions of the Agency affecting large-scale IT systems in the area of freedom, security and justice respect the principle of independence of the judiciary. The governance structure of the Agency and financing scheme further guarantee the respect of that principle. Ìt is also important to involve the legal professions and other stakeholders in the governance of the e-CODEX system through the Programme Management Board.

(10)Given eu-LISA's priority tasks of developing and managing the Entry/Exit System (EES), the European Travel Information and Authorisation System (ETIAS), the European Criminal Records Information System for Third Country Nationals (ECRIS-TCN), the revised Schengen Information System (SIS), the Visa Information System (VIS) and Eurodac, as well as the strategic task to establish a framework for interoperability between EU information systems, eu-LISA should not take over the responsibility for the e-CODEX system earlier than on 1 July 2023.

(11)The e-CODEX system can be used in cross-border civil and criminal proceedings. However, given its open source nature, it could also be used in other situations. This Regulation should not apply to any use of the e-CODEX system which is not based on the legal acts listed in Annex I.

(12)eu-LISA should have responsibility for the components of the e-CODEX system, except for the operational management of the Domibus Gateway software, since that software is currently provided on a cross-sectoral basis within the eDelivery building block by the Commission. eu-LISA should take over full responsibility for the operational management of the Domibus Connector software and the digital procedural standards from the entity managing the e-CODEX system. Given that the Domibus Gateway and the Domibus Connector are integral components of e-Codex, eu-LISA should assure compatibility of the connector with the latest version of the gateway. To that end, the Commission should include eu-LISA in the relevant governance body of the eDelivery building block from the moment of the entry into force of this Regulation.

(13)In order to ensure uniform conditions for the implementation of this Regulation, implementing powers should be conferred on the Commission. Those powers should be exercised in accordance with Regulation (EU) No 182/2011 of the European Parliament and of the Council 34 . The implementing acts adopted in that framework should establish the minimum technical specifications and standards, including on security, underpinning the components of the e-CODEX system; establish the service level requirements for the activities carried out by eu-LISA and other necessary technical specifications for these activities; and establish the modalities of the handover/takeover process. Implementing acts could also establish the technical arrangements supporting the use of the e-CODEX system in the procedures in the area of judicial cooperation.

(14)eu-LISA's specific responsibilities in relation to the operational management of the e‑CODEX system should be laid down.

(15)The Member States should maintain a list of authorised e-CODEX access points operated within their territory, and communicate them to eu-LISA in order to enable the interaction between them in the context of the relevant procedures. The Commission should maintain a similar list of authorised e-CODEX access points operated by the Union institutions, bodies and agencies for the same reason. The entities operating the access points at national level may be public authorities, organisations representing legal practitioners or private companies. Bearing in mind the decentralised nature of the e-CODEX system, while eu-LISA should ensure the operational management of the e-CODEX system, the responsibility for setting up and operating the authorised e‑CODEX access points should lie exclusively with the entities operating the relevant access points. The entities operating the authorised e-CODEX access point should bear the responsibility for any damage resulting from the operation of the authorised e‑CODEX access point.

(16)The national systems interconnected via the e-CODEX system should allow for monitoring its efficiency and effectiveness by providing a mechanism to monitor the outputs, results and impacts of instruments that enable the transmission of electronic data in the context of cross-border civil and criminal proceedings in the Union. The systems connected to the authorised e-CODEX access points should therefore be able to systematically collect and maintain comprehensive data on the use of cross-border civil and criminal proceedings in accordance with the relevant provisions of the legal acts listed in Annex I. This should not only alleviate the work of the Member States in collecting the relevant data and ensure mutual accountability and transparency, but also significantly facilitate the ex-post monitoring of the legal acts adopted in the area of civil and criminal cooperation by the Commission. The collected information should only encompass aggregated data and should not constitute personal data.

(17)eu-LISA should maintain a high level of security when carrying out its tasks. When undertaking further technical evolutions of software, eu-LISA should implement the principles of security by design and data protection by design and by default, in accordance with Regulation (EU) 2018/1725. The entities operating the authorised e-CODEX access point should bear the responsibility for the security of the data transmitted via their access points.

(18)In case classified information needs to be processed using the e-CODEX system, the system would need to be accredited in accordance with eu-LISA information security rules.

(19)In order to allow eu-LISA to prepare the takeover adequately, the entity managing the e-CODEX system should prepare by 31 December 2022 a handover document setting out the detailed arrangements for the transfer of the e-CODEX system, including the criteria for a successful handover process and its completion, in accordance with implementing acts adopted by the Commission pursuant to this Regulation. The handover document should cover the components of the e‑CODEX system including the gateway, the connector and the digital procedural standards, as well as the relevant supporting products. The Commission should monitor the handover/takeover process in order to ensure its compliance with the implementing acts and the handover document, and the takeover should only take place once the Commission has declared that the process has been successfully completed. After submitting the handover document and until the successful handover of the e-CODEX system to eu-LISA, the entity managing the e-CODEX system should not deliver any new release but should only ensure corrective maintenance activities of the e-CODEX system.

(20)The handover should also ensure that any intellectual property rights or usage rights relating to the e-CODEX system and the relevant supporting products are transferred so as to enable eu-LISA to carry out its responsibilities under this Regulation. However, for the main software components of the system, a contractual transfer should not be needed, as the Domibus software is open source and covered by the European Union Public Licence (EUPL).

(21)In order for the Commission to be able to evaluate the e-CODEX system on a regular basis, eu-LISA should report to the Commission every two years on the technical evolution and the technical functioning of the e-CODEX system. In order to feed into that report, Member States should provide eu-LISA with the relevant information concerning the access points operated in their territory and the Commission should provide similar information concerning the access points operated by Union institutions, bodies and agencies.

(22)This Regulation should not provide any specific legal basis for processing personal data. Any processing of personal data performed in the framework of this Regulation should be in accordance with the applicable data protection rules. Regulation (EU) 2016/679 of the European Parliament and the Council 35 and Directive (EU) 2016/680 of the European Parliament and the Council 36 , apply to the processing of personal data carried out by e-CODEX access points, operated by authorised e-CODEX access points which are established within the territory of the Member States according to this Regulation.

(23)Regulation (EU) 2018/1725 of the European Parliament and of the Council 37 applies to the processing of personal data carried out by Union institutions, bodies and agencies in the context of this Regulation.

(24)In accordance with Articles 1 and 2 of Protocol No 22 on the position of Denmark, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, Denmark is not taking part in the adoption of this Regulation and is not bound by it or subject to its application.

(25)In accordance with Articles 1, 2 and 4a(1) of Protocol No 21 on the position of the United Kingdom and Ireland in respect of the area of freedom, security and justice, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, and without prejudice to Article 4 of that Protocol, Ireland is not taking part in the adoption of this Regulation and is not bound by it or subject to its application.

[or]

(26)In accordance with Article 3 and Article 4a(1) of Protocol No 21 on the position of the United Kingdom and Ireland in respect of the area of freedom, security and justice, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, Ireland has notified its wish to take part in the adoption and application of this Regulation.

(27)The European Data Protection Supervisor was consulted and delivered an opinion on … 38 ,

HAVE ADOPTED THIS REGULATION:

CHAPTER 1
General Provisions

Article 1
Subject matter

This Regulation establishes a decentralised IT system for cross-border communication for the purpose of facilitating electronic exchange of documents, requests, legal forms, evidence or other information in a secure and reliable manner in cross-border civil and criminal proceedings (e-Justice Communication via Online Data EXchange - e-CODEX system).

It lays down rules on the following:

(a)the definition and composition of the e-CODEX system;

(b)the operational management of the e-CODEX system by the European Agency for the operational management of large-scale IT systems in the area of freedom, security and justice (eu-LISA);

(c)the responsibilities of the Commission, Member States and the entities operating authorised e-CODEX access points.

Article 2
Scope

This Regulation shall apply to the electronic transmission of information in the context of cross-border civil and criminal proceedings by means of the e‑CODEX system in accordance with the legal acts adopted in the area of judicial cooperation listed in Annex I.

Article 3
Definitions

For the purpose of this Regulation, the following definitions shall apply:

(a)‘e-CODEX access point’ means the access point software installed on a hardware infrastructure, able to transmit and receive information to and from other e-CODEX access points in a trusted manner;

(b)‘authorised e-CODEX access point’ means an e-CODEX access point which has been notified to eu-LISA in accordance with Article 5(4) or Article 7(1) and which is operating a digital procedural standard as referred to in Article 4(3);

(c)‘entity operating an authorised e-CODEX access point’ means a Union institution, body or agency, a national public authority or legal person which is operating an authorised e-CODEX access point;

(d)‘connected system’ means an IT system which is connected to an e-CODEX access point for the purpose of communicating with other e-CODEX access points;

(e)‘central testing platform’ means an e-CODEX access point used exclusively for testing, that provides a set of functions which can be used by entities operating authorised e-CODEX access points to verify the correct operation of their access points and the correct use of the e-CODEX digital procedural standards in the connected systems linked to these access points;

(f)‘business process model’ means a graphical and textual representation of a conceptual model of several related, structured activities or tasks, along with the relevant data models, and the sequence in which the activities or tasks have to be performed, in order to achieve a meaningful interaction between two or more parties;

(g)‘operational management’ means all the tasks necessary to keep the e‑CODEX system functioning in accordance with this Regulation.

CHAPTER 2
Composition, functions and responsibilities in relation to the e-CODEX system

Article 4
Composition of the e-CODEX system

1.The e-CODEX system shall be composed of an e-CODEX access point and digital procedural standards.

2.The e-CODEX access point shall be composed of:

(a)a gateway consisting of a software, based on a common set of protocols, enabling the secure exchange of information over a telecommunications network with other gateways using the same common set of protocols;

(b)a connector, making it possible to link connected systems to the gateway referred to in point (a), and consisting of a software, based on a common set of open protocols, enabling the following:

(i)structuring, logging and linking of messages;

(ii)the verification of their integrity and authenticity;

(iii)the creation of time-linked evidences of receipt for the exchanged messages.

3.A digital procedural standard shall consist of the business process models and the templates defining the electronic format of the documents used in the context of the procedures laid down by legal acts listed in Annex I.

Article 5
Responsibilities of the Commission

1.By 31 December 2022 the Commission shall establish, by means of implementing acts:

(a)the minimum technical specifications and standards, including on security, underpinning the components of the e-CODEX system referred to in Article 4;

(b)the service level requirements for the activities to be carried out by eu-LISA in accordance with Article 6 as well as other necessary technical specifications for those activities.

(c)the specific arrangements of the handover/takeover process referred to in Article 9.

2.The Commission may adopt implementing acts establishing detailed technical specifications on the digital procedural standards defined in Article 4(3).

3.The implementing acts referred to in paragraphs 1 and 2 shall be adopted in accordance with the examination procedure referred to in Article 17(2).

4.The Commission shall maintain a list of authorised e-CODEX access points which are operated by Union institutions, bodies and agencies, and the cross-border civil and criminal procedures as well as forms which each access point is authorised to apply. It shall notify the changes to eu-LISA without delay, without prejudice to the annual notification provided for in Article 14.

5.The Commission shall designate up to five e-CODEX correspondents. Only e-CODEX correspondents shall be entitled to request and receive technical support referred to in Article 6(2)(f) from eu-LISA in relation to the e-CODEX system operated by Union institutions, bodies and agencies.

Article 6
Responsibilities of eu-LISA

1.eu-LISA shall be responsible for the operational management of the components of the e-CODEX system referred to in Article 4(2)(b) and (3) and of the supporting software listed in Annex II.

2.The operational management of the e-CODEX system shall consist in particular of the following:

(a)development, maintenance, bug fixing and distribution to the authorised e‑CODEX access points of the software products referred to in paragraph 1;

(b)development, maintenance, distribution and updates of all documentation relating to the components of the e-CODEX system and its supporting software products referred to in paragraph 1 to the authorised e-CODEX access points;

(c)development, maintenance, update and distribution to the authorised e-CODEX access points of a configuration file containing an exhaustive list of authorised e-CODEX access points, including the procedures and forms each of these access points is authorised to apply;

(d)technical changes to e-CODEX and addition of new features, published as new versions of e-CODEX, in order to respond to emerging requirements laid down by the implementing acts referred to in Article 5(2) or by the the e-CODEX Advisory Group;

(e)support and coordination of testing activities, including connectivity, involving the authorised e-CODEX access points;

(f)technical support for the e-CODEX correspondents in relation to the e-CODEX system;

(g)maintenance and distribution to the authorised e-CODEX access points of the business process models, of the templates defining the electronic format of documents referred to in Article 4(3) and of the underlying pre-defined collection of data models;

(h)publication on the eu-LISA website of a list of the authorised e-CODEX access points, which have been notified to eu-LISA, and the cross-border civil and criminal procedures each of these access points is authorised to apply;

(i)respond to requests for technical advice and support from the Commission services in the context of the preparation of the implementing acts provided for in Article 5(2);

(j)preparation and distribution to the authorised e-CODEX access points of new business process models and templates defining the electronic format of documents referred to in Article 4(3), including by organising and facilitating workshops with the e-CODEX correspondents.

3.eu-LISA shall be responsible for the following additional tasks:

(a)provision, operation and maintenance in eu-LISA's technical sites of the hardware and software IT infrastructure necessary for carrying out its tasks;

(b)provision, operation and maintenance of a central testing platform;

(c)informing the general public through the Internet about e-CODEX, by means of a set of large-scale communication channels, such as websites or social media platforms;

(d)preparation, update and online distribution of non-technical information relating to the e-CODEX system and the activities carried out by eu-LISA.

4.eu-LISA shall make resources available on an on-call basis during business hours to provide a single point of contact to which the authorised e-CODEX access points can notify security issues. Following such notifications, eu-LISA shall analyse the security issue and, if necessary, inform the authorised e-CODEX access points impacted by that security issue.

Article 7
Responsibilities of the Member States

1.Member States shall maintain a list of authorised e-CODEX access points, operated within their territory, and the cross-border civil and criminal procedures as well as forms which each access point is authorised to apply. They shall notify the changes to eu-LISA without delay, without prejudice to the annual notification provided for in Article 14.

2.Each Member State shall designate up to five e-CODEX correspondents. Only those correspondents shall be entitled to request and receive the technical support referred to in Article 6(2)(f).

Article 8
Responsibilities of entities operating authorised e-CODEX access points

1.The entity operating an authorised e-CODEX access point shall be responsible for its secure set-up and operation. This responsibility shall include the necessary adaptations to the connector referred to in Article 4(2)(b) to make it compatible with any connected systems and any other necessary technical adaptations to its connected systems.

2.The entity operating an authorised e-CODEX access point shall provide for a mechanism in its connected system(s) allowing for the retrieval of relevant data on the use of cross-border civil and criminal procedures in accordance with the relevant provisions of the legal acts listed in Annex I.

3.The responsibility for any damage resulting from the operation of an authorised e-CODEX access point and any connected systems shall be borne by the entity operating that authorised e-CODEX access point.

Article 9
Handover and takeover

1.The entity managing the e-CODEX system shall, by 31 December 2022at the latest, submit a common handover document to eu-LISA specifying the detailed arrangements for the transfer of the e-CODEX system, including the criteria for a successful handover process and completion and related documentation, as established by the implementing acts pursuant to Article 5(1)(c), including provisions on intellectual property rights or usage rights relating to the e-CODEX system and the supporting software listed in Annex II enabling eu-LISA to carry out its responsibilities in accordance with Article 6.

2.During not more than six months after the delivery of the handover document referred to in paragraph 1 a handover/takeover process shall take place between the entity managing the e-CODEX system and eu-LISA. During that period, the entity managing the e-CODEX system shall retain full responsibility for the e-CODEX system and shall ensure that only corrective maintenance activities are performed in the system, excluding any other types of changes to the system. It shall, in particular, not deliver any new release of the e-CODEX system.

3.The Commission shall monitor the handover/takeover process in order to ensure that the detailed arrangements of the process are correctly implemented by the entity managing the e-CODEX system and eu-LISA, on the basis of the criteria referred to in paragraph 1.

4.eu-LISA shall take over responsibility for the e-CODEX system at the date when the Commission has declared the successful completion of the handover/takeover process referred to in paragraph 2 and not earlier than on 1 July 2023.

Article 10
Security

1.After the successful takeover of the e-CODEX system, eu-LISA shall be responsible for maintaining a high level of security when carrying out its tasks, including the security of the hardware and software IT infrastructure referred to in Article 6(3). In particular, eu-LISA shall ensure that an e-CODEX security plan is established and maintained and that the e-CODEX system is operated according to this security plan, taking into account the classification of the information processed in e-CODEX and eu-LISA information security rules. Such a plan shall provide for regular security inspections and audits including software security assessments of the e-CODEX system with the participation of the entities operating an e-CODEX access point.

2.When carrying out its responsibilities, eu-LISA shall implement the principles of security by design and data protection by design and by default. Classified information shall not be transmitted via e-CODEX, unless eu-LISA accredits the system and the competent national security authorities of the Member States accredit the access points.

3.The entity operating an authorised e-CODEX access point shall have the exclusive responsibility for the security of that access point, including the security of data transmitted through it.

It shall without delay notify any security issue to eu-LISA and to the Member State that maintains the list of authorised e-CODEX access points where that access point is listed, or, in the case of an access point operated by a Union institution, body or agency, to the Commission.

eu-LISA shall develop security rules and guidance regarding e-CODEX access points. The entity operating an authorised e-CODEX access point shall provide eu-LISA with statements proving its compliance with the rules for the security of e-CODEX access points. Those statements shall be updated on a yearly basis, or whenever a change is otherwise required.

Article 11
e-CODEX Advisory Group

1.As from 1 January 2023, the e-CODEX Advisory Group established pursuant to Article 27(dc) of Regulation (EU) 2018/1726 shall provide eu-LISA with the necessary expertise related to the e-CODEX system, in particular in the context of preparation of its annual work programme and its annual activity report. It shall also follow up on the state of implementation in the Member States. The Advisory Group shall be informed of any security issues.

2.During the handover/takeover process the e-CODEX Advisory Group shall meet regularly, at least every second month, until the takeover process is successfully completed.

3.The e-CODEX Advisory Group shall report after each meeting to the Programme Management Board. It shall provide the technical expertise to support the tasks of the Programme Management Board and shall follow up on the state of implementation in the Member States.

4.The e-CODEX Advisory Group shall involve in its work the professional organisations and other stakeholders, which participated in the management of the e-CODEX system at the time of its handover.

Article 12
Programme Management Board

1.By 1 January 2023, the Management Board of eu-LISA shall establish an e-CODEX Programme Management Board composed of ten members.

2.The Programme Management Board shall be composed of eight members appointed by the Management Board, the Chair of the Advisory Group referred to in Article 11 and one member appointed by the Commission. The Management Board shall ensure that the members it appoints to the Programme Management Board have the necessary experience and expertise regarding the e-CODEX system.

3.eu-LISA shall participate in the work of the Programme Management Board. To that end, representatives of eu-LISA shall attend the meetings of the Programme Management Board in order to report on work regarding the e-CODEX system and on any other related work and activities.

4.The Programme Management Board shall meet at least once every three months, and more often when necessary. It shall ensure the adequate management of the e‑CODEX system, in particular during the handover/takeover process and with regard to the implementation of the acts adopted pursuant to Article 5(2). The Programme Management Board shall submit written reports regularly and if possible every second month to the Management Board of eu-LISA on the progress of the project. The Programme Management Board shall have no decision-making power nor any mandate to represent the members of the Management Board.

5.The Programme Management Board shall establish its rules of procedure which shall include in particular rules on:

(a)choice of the chair;

(b)meeting venues;

(c)preparation of meetings;

(d)admission of experts to the meetings, including professional organisations and other stakeholders, participating in the management of the e-CODEX system at the moment of its handover;

(e)communication plans ensuring that non-participating members of the Management Board are kept fully informed.

6.The chairmanship of the Programme Management Board shall be held by a Member State which is fully bound by the legal acts listed in Annex I and using e-CODEX within their scope, as well as fully bound by the legal acts governing the development, establishment, operation and use of all the large-scale IT systems managed by eu-LISA.

7.All travel and subsistence expenses incurred by the members of the Programme Management Board shall be paid by eu-LISA. Article 10 of the eu-LISA Rules of Procedure shall apply mutatis mutandis.

8.The Programme Management Board's secretariat shall be ensured by eu-LISA.

Article 13
Training

eu-LISA shall perform tasks related to the provision of training on the technical use of the e‑CODEX system in accordance with Regulation (EU) 2018/1726, including provision of online training material.

Article 14
Notifications

1.By 31 January of every year after the successful takeover of the e-CODEX system by eu-LISA, Member States shall notify eu-LISA of the following information:

(a)the list of authorised e-CODEX access points which are operated within their territory, and the cross-border civil and criminal procedures and forms which each e-CODEX access point is authorised to apply, as referred to in Article 7(1);

(b)a list of the cross-border civil and criminal procedures for which they use the e-CODEX system, and the extent to which the e-CODEX system can be used for each of these procedures;

(c)the number of messages sent and received by each authorised e‑CODEX access point operating within their territory, grouped by corresponding authorised e-CODEX access point and cross-border civil and criminal procedure;

(d)the number and type of incidents encountered by entities operating authorised e-CODEX access points within the territory of the Member State and impacting the security of the e-CODEX system.

2.By 31 January of every year after the successful takeover of the e-CODEX system by eu-LISA, the Commission shall notify eu-LISA of the following information:

(a)the list of authorised e-CODEX access points that are operated by Union institutions, bodies and agencies, and the cross-border civil and criminal procedures and forms that each e-CODEX access point is authorised to apply, referred to in Article 5(4);

(b)a list of the cross-border civil and criminal procedures for which they use the e-CODEX system, and the extent to which the e-CODEX system can be used for each of these procedures;

(c)the number of messages sent and received by each authorised e‑CODEX access point operated by Union institutions, bodies and agencies, grouped by corresponding authorised e-CODEX access point and cross-border civil and criminal procedure;

(d)the number and type of incidents encountered by entities operating authorised e-CODEX access points that are operated by Union institutions, bodies and agencies and impacting the security of the e-CODEX system.

Article 15
Monitoring and reporting

1.For the first time two years after it takes over responsibility for the e-CODEX system, and every two years thereafter, eu-LISA shall submit a report to the Commission on the technical functioning and use of the e-CODEX system, including the security of the system.

2.eu-LISA shall consolidate the data received from the Commission and the Member States pursuant to Article 14 and provide the following indicators as part of the report provided for in paragraph 1:

(a)the list and number of cross-border civil and criminal procedures for which the e-CODEX system has been used during the reporting period;

(b)the number of authorised e-CODEX access points for each Member State and for each civil and criminal procedure;

(c)the steps of the cross-border civil and criminal procedures for which the e-CODEX system can be used, for each Member State;

(d)the number of messages sent through the system for each civil and criminal procedure between each of the authorised e-CODEX access points;

(e)the number and type of incidents impacting the security of the e-CODEX system and compliance information with the e-CODEX security plan.

3.For the first time, three years after eu-LISA takes over responsibility for the e‑CODEX system, and every four years thereafter, the Commission shall produce an overall evaluation of the e-CODEX system. That overall evaluation shall include an assessment of the application of this Regulation and an examination of results achieved against objectives, and may propose possible future actions. At the time of the first evaluation, the Commission shall also reexamine the role of the Programme Management Board and its continuation. The Commission shall transmit the evaluation report to the European Parliament and the Council.

Article 16
Amendments to Regulation (EU) 2018/1726

Regulation (EU) 2018/1726 is amended as follows:

(1)in Article 1, the following paragraph 4a is inserted:

“4a. The Agency shall be responsible for the development, operational management, including technical evolutions, of the computerised system for communication in cross-border civil and criminal proceedings (e-CODEX system.)”;

(2)the following Article 8b is inserted:

“Article 8b

Tasks related to the e-CODEX system

In relation to the e-CODEX system, the Agency shall perform:

(a)the tasks conferred on it by Regulation (EU) No XXX/20XX of the European Parliament and of the Council*;

(b)tasks relating to training on the technical use of the e-CODEX system, including provision of online training materials.

__________

*    on a computerised system for communication in cross-border civil and criminal proceedings (e-CODEX system), and amending Regulation (EU) 2018/1726 (OJ L …).”;

(3)in Article 14, paragraph 1 is replaced by the following:

“1.The Agency shall monitor developments in research relevant for the operational management of SIS II, VIS, Eurodac, the EES, ETIAS, DubliNet, ECRIS-TCN, e-CODEX and other large-scale IT systems as referred to in Article 1(5).”

(4)in Article 19, paragraph 1 is amended as follows:

(a)point (ff) is replaced by the following:

“(ff)adopt reports on the technical functioning of the following:

(i)SIS pursuant to Article 60(7) of Regulation (EU) 2018/1861 of the European Parliament and of the Council* and Article 74(8) of Regulation (EU) 2018/1862 of the European Parliament and of the Council**;

(ii)VIS pursuant to Article 50(3) of Regulation (EC) No 767/2008 and Article 17(3) of Decision 2008/633/JHA;

(iii)EES pursuant to Article 72(4) of Regulation (EU) 2017/2226;

(iv)ETIAS pursuant to Article 92(4) of Regulation (EU) 2018/1240;

(v)ECRIS-TCN and of the ECRIS reference implementation pursuant to Article 36(8) of Regulation (EU) 2019/816 of the European Parliament and of the Council***;

(vi)the interoperability components pursuant to Article 78(3) of Regulation (EU) 2019/817 and Article 74(3) of Regulation (EU) 2019/818;

(vii)the e‑CODEX system pursuant to Article 14(1) of Regulation (EU) XXX of 20XX [this Regulation]

__________

*    Regulation (EU) 2018/1861 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, and amending the Convention implementing the Schengen Agreement, and amending and repealing Regulation (EC) No 1987/2006 (OJ L 312, 7.12.2018, p. 14).

**    Regulation (EU) 2018/1862 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA, and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EU. (OJ L 312, 7.12.2018, p. 56).

***    Regulation (EU) 2019/816 of the European Parliament and of the Council of 17 April 2019 establishing a centralised system for the identification of Member States holding conviction information on third-country nationals and stateless persons (ECRIS-TCN) to supplement the European Criminal Records Information System and amending Regulation (EU) 2018/1726 (OJ L 135, 22.5.2019, p. 1).” ;

(b)point (mm) is replaced by the following:

“(mm)ensure annual publication of the following:

(i)the list of competent authorities authorised to search directly the data contained in SIS pursuant to Article 41(8) of Regulation (EU) 2018/1861 and Article 56(7) of Regulation (EU) 2018/1862, together with the list of Offices of the national systems of SIS (N.SIS) and SIRENE Bureaux pursuant to Article 7(3) of Regulation (EU) 2018/1861 and Article 7(3) of Regulation (EU) 2018/1862 respectively;

(ii)the list of competent authorities pursuant to Article 65(2) of Regulation (EU) 2017/2226;

(iii)the list of competent authorities pursuant to Article 87(2) of Regulation (EU) 2018/1240;

(iv)the list of central authorities pursuant to Article 34(2) of Regulation (EU) 2019/816;

(v)the list of authorities pursuant to Article 71(1) of Regulation (EU) 2019/817 and Article 67(1) of Regulation (EU) 2019/818;

(vi)the list of authorised e-CODEX access points pursuant to Article 6(2)(h) of Regulation (EU) XXX of 20XX [on the e-CODEX system – this Regulation];”;

(5)in Article 27(1), the following point (dc) is inserted:

“(dc)e-CODEX Advisory Group;”.

CHAPTER 3
Final provisions

Article 17
Committee procedure

1.The Commission shall be assisted by a committee. That committee shall be a committee within the meaning of Regulation (EU) No 182/2011.

2.Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply.

Article 18
Costs

1.The costs incurred in the performance of the tasks referred to in Article 6 shall be borne by the general budget of the European Union.

2.The costs for the tasks referred to in Article 7 and Article 8 shall be borne by the Member States and the entities operating authorised e-CODEX access points respectively.

Article 19
Entry into force

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in the Member States in accordance with the Treaties.

Done at Brussels,

LEGISLATIVE FINANCIAL STATEMENT

1.FRAMEWORK OF THE PROPOSAL/INITIATIVE

1.1.Title of the proposal/initiative

1.2.Policy area(s) concerned in the ABM/ABB structure

1.3.Nature of the proposal/initiative

1.4.Objective(s)

1.5.Grounds for the proposal/initiative

1.6.Duration and financial impact

1.7.Management mode(s) planned

2.MANAGEMENT MEASURES

2.1.Monitoring and reporting rules

2.2.Management and control system

2.3.Measures to prevent fraud and irregularities

3.ESTIMATED FINANCIAL IMPACT OF THE PROPOSAL/INITIATIVE

3.1.Heading(s) of the multiannual financial framework and expenditure budget line(s) affected

3.2.Estimated impact on expenditure 

3.2.1.Summary of estimated impact on expenditure

3.2.2.Estimated impact on operational appropriations

3.2.3.Estimated impact on appropriations of an administrative nature

3.2.4.Compatibility with the current multiannual financial framework

3.2.5.Third-party contributions

3.3.Estimated impact on revenue

LEGISLATIVE FINANCIAL STATEMENT

1.FRAMEWORK OF THE PROPOSAL/INITIATIVE

1.1.Title of the proposal/initiative

Regulation of the European Parliament and of the Council on a computerised system for communication in cross-border civil and criminal proceedings (e-CODEX system), and amending Regulation (EU) 2018/1726

1.2.Policy area(s) concerned (Programme cluster)

Investing in People, Social Cohesion & Values, Justice, Rights and Values

1.3.The proposal/initiative relates to:

◻ a new action 

◻ a new action following a pilot project/preparatory action 39  

⌧ the extension of an existing action 

◻ a merger or redirection of one or more actions towards another/a new action

1.4.Grounds for the proposal/initiative

1.4.1.Requirement(s) to be met in the short or long term including a detailed timeline for roll-out of the implementation of the initiative

The goal of this legal proposal is to establish the e-CODEX system and entrust eu‑LISA (“the Agency”) with its operational management, and further technical evolutions of the system within the Agency’s responsibilities laid down in Article 6.

e-CODEX was developed between 2010 and 2016 by 21 EU Member States with the participation of other countries/territories and organisations. The total cost of the project development was about 24 million EUR of which 50% were funded by EU grants and 50% by the participating Member States. An additional 2 million EUR were awarded for maintaining e-CODEX between 2016 and 2018 (Me-CODEX project) and an additional 3 million EUR were made available through a grant for maintenance of the system between 2019 and 2021 (Me-CODEX II project). A handover of e-CODEX to eu-LISA is envisaged to take place in the first half of 2023. Therefore, a further maintenance project will be needed to cover the need of the system’s maintenance in the 2021-2023 period.

The system is and will continue to be operated by its users (Member States) in a decentralised way, with each Member State operating one or multiple e-CODEX access points. To establish an access point, a Member State would use the software products maintained by eu-LISA and will receive from eu-LISA technical assistance during the phases of installation and configuration of the access point. eu-LISA will also provide support to operational deployments of access points.

The Commission retains its policy-related role in monitoring and steering the work taking place in eu-LISA, defining the high-level elements of the e-CODEX system through implementing acts and working towards establishing the e-CODEX system as the secure communication channel used for judicial cooperation in the context of a list of cross-border judicial procedures in the EU.

Short term requirement: eu-LISA to become operational with respect to the execution of the tasks defined in Article 6 by 30 June 2023.

Long term requirement: The gradual establishment of the e-CODEX system as the main digital solution for cross-border cooperation between judicial authorities and cross-border judicial procedures in the European Union.

1.4.2.Added value of Union involvement (it may result from different factors, e.g. coordination gains, legal certainty, greater effectiveness or complementarities). For the purposes of this point 'added value of Union involvement' is the value resulting from Union intervention which is additional to the value that would have been otherwise created by Member States alone.

Reasons for action at European level (ex-ante): In the absence of EU action, there is a risk that Member States develop national IT systems independently, leading to a lack of interoperability between them. Operational management and further technical evolutions at EU level is the only way to achieve an interoperable system for cross-border communication between judicial authorities.

Expected generated EU added value (ex-post): The e-CODEX pilots carried out by Member States show the potential of the system for digitalising procedures such as the European Small Claims or European Payment Order in the civil law area, or for the exchange of Mutual Legal Assistance requests and European Investigation Orders in the criminal area.

Having e-CODEX managed by eu-LISA will contribute to eliminating these limiting factors by:

Providing an off the shelf solution which will generate economies of scale as the EU will have to maintain only one IT solution for secure cross-border communication in the judicial area. Thus, the costs for Member States to digitalise their cross-border procedures are expected to decrease and to become less of a barrier. Where Member States do not have tools available to fulfil the system requirements, reference implementations based on e-CODEX could be provided by the EU.

Establishing e-CODEX as a stable sustainable solution will generate trust from the Member States that investments in local systems to be connected to e-CODEX will not be short lived and thus will have the potential to generate the expected return on investment.

Further EU legislative proposals for digitalisation of judicial processes could already indicate e-CODEX as the preferred IT system for cross-border communication, which would facilitate the later implementation process.

1.4.3.Lessons learned from similar experiences in the past

Without a stable and clearly defined governance structure and operational set-up, systems such as e-CODEX, even if deemed extremely useful by all the participants, never evolve beyond their pilot status to provide true EU added value.

1.4.4.Compatibility and possible synergy with other appropriate instruments

The initiative comes to support the digitalisation of a list of legal acts adopted in the area of judicial cooperation by helping to establish a secure communication channel between the competent authorities that are involved in their application.

The e-CODEX system is one of the key components of the Commission’s e-Justice policy to enhance access to and efficiency of justice in and across Member States and is included in the e-Justice 2019-2023 Action Plan European e-Justice 40 . In the context of a Digital Single Market that aims to provide high-speed, secure and trustworthy infrastructures and services, solutions for fostering e-Justice were part of the 2016 eGovernment Action Plan 41 . The e-Justice portal, a one-stop shop for judicial information in the EU, offers citizens in Member States where electronic transmission is allowed, the possibility of submitting small claims for European payment orders electronically, using the e-CODEX system.

e-CODEX is one of the e-Justice Digital Service Infrastructures within the Connecting Europe Facility (CEF) 42 programme.

Moreover, one of the components of e-CODEX has been taken up and maintained by the Commission as part of the eDelivery building block within CEF, which shows that it is a useful system not only for justice, but also in other areas.

So far e-CODEX has been developed and maintained with EU financing or co-financing. With the adoption of this proposal, further financing by grants will no longer be necessary, leading to cost savings for the EU budget.

In terms of synergies, this proposal will ensure that the EU Member States can benefit from the investments that were already made in order to create the e-CODEX system and also avoid incurring further costs for the development of another system to fulfil the same business need in the judicial area.

1.5.Duration and financial impact

◻ limited duration

–◻    in effect from [DD/MM]YYYY to [DD/MM]YYYY

–◻    Financial impact from YYYY to YYYY for commitment appropriations and from YYYY to YYYY for payment appropriations.

⌧ unlimited duration

–Implementation with a start-up period from 2022 to 2023,

–followed by full-scale operation.

1.6.Management mode(s) planned 43  

◻ Direct management by the Commission

–◻ by its departments, including by its staff in the Union delegations;

–◻    by the executive agencies

◻ Shared management with the Member States

⌧ Indirect management by entrusting budget implementation tasks to:

–◻ third countries or the bodies they have designated;

–◻ international organisations and their agencies (to be specified);

–◻ the EIB and the European Investment Fund;

–⌧ bodies referred to in Articles 70 and 71 of the Financial Regulation;

–◻ public law bodies;

–◻ bodies governed by private law with a public service mission to the extent that they provide adequate financial guarantees;

–◻ bodies governed by the private law of a Member State that are entrusted with the implementation of a public-private partnership and that provide adequate financial guarantees;

–◻ persons entrusted with the implementation of specific actions in the CFSP pursuant to Title V of the TEU, and identified in the relevant basic act.

–If more than one management mode is indicated, please provide details in the ‘Comments’ section.

Comments

2.MANAGEMENT MEASURES

2.1.Monitoring and reporting rules

Specify frequency and conditions.

Article 15 of the Regulation – Monitoring and reporting – sets out the obligation for the Agency to report to the Commission its activities pertaining to the e-CODEX system.

This specific tool comes to supplement the existing mechanisms set forth in Article 39of the Regulation (EU) 2018/1726 that establishes the Agency.

2.2.Management and control system(s)

2.2.1.Justification of the management mode(s), the funding implementation mechanism(s), the payment modalities and the control strategy proposed

This Regulation does not affect the existing management mode(s) where the Agency is concerned.

2.2.2.Information concerning the risks identified and the internal control system(s) set up to mitigate them

The main risk in the short term is whether eu-LISA has the capacity to cope with the additional tasks stemming from this Regulation in a timely fashion, considering its current priority tasks of developing and managing the Entry/Exit System (EES), the European Travel Information and Authorisation System (ETIAS), the European Criminal Records Information System for third country nationals (ECRIS-TCN), the modernised Schengen Information System (SIS), the Visa Information System (VIS) and Eurodac.

This risk is mitigated by delaying the end of the handover phase of e-CODEX to eu-LISA to 1 July 2023, and by the fact that the scope of the transfer proposed under this Regulation is comparatively small, and resources are not shared with and are independent from those concerning other on-going legal proposals.

2.2.3.Control method(s) envisaged

As a Union Agency, eu-LISA applies adequate horizontal control methods of decentralised agencies.

The eu-LISA Financial Rules, which are based on the Framework Financial Regulation for agencies sets out the appointment of an internal auditor and internal audit requirements.

Any implementing act extending the judicial procedures covered by e-CODEX shall include a revised legislative financial statement ensuring the assignment of proper financial and human resources to eu-LISA.

eu-LISA implements an Internal Control Framework based on the Internal Control Framework of the European Commission and on the original Committee of Sponsoring Organisations’ integrated internal control framework. The Single Programming Document must provide information on the internal control systems, while the Consolidated Annual Activity Report (CAAR) must contain information on the efficiency and effectiveness of the internal control systems, including as regards risk assessment.

Internal supervision is also provided by eu-LISA’s Internal Audit Capability, on the basis of an annual audit plan notably taking into consideration the assessment of risks in eu-LISA.

2.2.4.Estimation and justification of the cost-effectiveness of the controls (ratio of "control costs ÷ value of the related funds managed"), and assessment of the expected levels of risk of error (at payment & at closure)

This Regulation does not affect the cost-effectiveness of the existing controls where the Agency is concerned.

2.3.Measures to prevent fraud and irregularities

Specify existing or envisaged prevention and protection measures, e.g. from the Anti-Fraud Strategy.

As a Union Agency, eu-LISA applies adequate horizontal measures to prevent fraud, corruption and other unlawful activities, as provided for by Article 50 of Regulation (EU) 2018/1726.

3.ESTIMATED FINANCIAL IMPACT OF THE PROPOSAL/INITIATIVE

3.1.Heading of the multiannual financial framework and new expenditure budget line(s) proposed

3.2.Estimated impact on expenditure

3.2.1.Summary of estimated impact on expenditure

EUR million (to three decimal places)

EUR million (to three decimal places)

EUR million (to three decimal places)

3.2.2.Estimated impact on eu-LISA's appropriations

–◻    The proposal/initiative does not require the use of appropriations of an administrative nature

–⌧    The proposal/initiative requires the use of appropriations of an administrative nature, as explained below:

EUR million (to three decimal places)

The total amount of required internal staff is 5 FTE:

·5 FTE will be ensured by new internal staff – two Temporary Agents (AD 5-7) and three Contract Agents (FG IV);

·2 FTE (2 CAs) will be recruited already as of 1 September 2022 in order to initiate the recruitment process and ensure that the full team is in place at the start of the takeover process (1 January 2023).

Technical services will be ensured by procurement of external service providers (a total of 8 following the completion of the handover to the eu-LISA).

Further costs are calculated for travel and daily subsistence for one representative from each Member State to attend:

·4 meetings of the advisory group per year 48 ;

·4 meetings of the Programme Management Board per year;

·4 project progress report meetings per year in the first three years, subsequently reduced to 2;

·3 business modelling workshops per year.

Mission costs are included to allow eu-LISA staff to attend the committee meetings organised for the adoption of Implementing Acts pursuant to Article 5 of the Regulation.

The cost for hardware & software products is meant to cover operational needs and the supplementation of the existing hardware infrastructure at eu-LISA with regard to Article 6 (3) (a) of this Regulation. Following the initial investment, a 20% rate for maintenance costs was used (replacement of hardware, software licences, etc.). In terms of data centre floor space, the usage is negligible considering that new hardware (if needed) is limited to four blade servers in a main site and the same in a backup site.

3.2.3.Summary of estimated impact on appropriations of an administrative nature

–◻    The proposal/initiative does not require the use of appropriations of an administrative nature

–⌧    The proposal/initiative requires the use of appropriations of an administrative nature, as explained below:

EUR million (to three decimal places)

The appropriations required for human resources and other expenditure of an administrative nature will be met by appropriations from the DG that are already assigned to management of the action and/or have been redeployed within the DG, together if necessary with any additional allocation which may be granted to the managing DG under the annual allocation procedure and in the light of budgetary constraints.

The administrative expenditure covers 1 AD official at DG Justice and Consumers of the Commission. His/her main functions (see further down) are:

–To oversee the work towards the implementing acts foreseen in Article 5, organise the handover process and subsequently act as a policy liaison officer vis-à-vis the Agency;

–Mission costs for Commission staff to attend the meetings organised by eu-LISA (10 / year – participation in Management Board, Programme Managament Board and Advisory Group meetings);

–Travel and daily subsistence for one representative from each Member State to participate in committee meetings for the adoption of Implementing Acts foreseen in Article 5 of the Regulation (planned for 2022).

3.2.3.1.Estimated requirements of human resources

eu-LISA Agency Summary

–◻    The proposal/initiative does not require the use of human resources.

–⌧    The proposal/initiative requires the use of human resources, as explained below:

EUR million (to three decimal places)

5 internal personnel (two Temporary Agents and three Contract Agents) are proposed in order to fulfil key tasks. There is a need to have a dedicated pool of resources for the e-CODEX system in order to avoid competition for resources with Home affairs activities. Member States stakeholders are particularly sensitive to the issue of guaranteeing the allocation of dedicated resources to the e-CODEX system.

With the help of external service providers, these resources will be able to manage the maintenance of the existing system, the further evolutions of the e-CODEX system and the gradual extension of e-CODEX support to legal procedures in the area of judicial cooperation at a pace of one or two per year, depending on the complexity.

Estimated impact on the staff (additional FTE) – establishment plan

Estimated impact on the staff (additional) – external personnel

Following the expected adoption of the Regulation by 1 January 2022, the recruitment of key personnel will have to be completed by 1 January 2023 and that of remaining personnel by 1 July 2023. The key personnel will work in the period of 1 January – 1 July 2023 to ensure the successful takeover of the e-CODEX system from the e-CODEX Member State consortium. From 1 July 2023 onwards, the Agency will become solely responsible for all activities set out in Article 6 of the Regulation.

DG Justice and Consumers Summary

–◻    The proposal/initiative does not require the use of human resources.

–⌧    The proposal/initiative requires the use of human resources, as explained below:

Estimate to be expressed in full time equivalent units

The human resources required will be met by staff from the DG who are already assigned to management of the action and/or have been redeployed within the DG, together if necessary with any additional allocation which may be granted to the managing DG under the annual allocation procedure and in the light of budgetary constraints.

Description of tasks to be carried out:

3.2.4.Third-party contributions

The proposal/initiative:

–⌧    does not provide for co-financing by third parties

–◻    provides for the co-financing by third parties estimated below:

Appropriations in EUR million (to three decimal places)

3.3.Estimated impact on revenue

–⌧    The proposal/initiative has no financial impact on revenue.

–◻    The proposal/initiative has the following financial impact:

–◻    on own resources

–◻    on other revenue

please indicate, if the revenue is assigned to expenditure lines ◻    

EUR million (to three decimal places)

For assigned revenue, specify the budget expenditure line(s) affected.

Other remarks (e.g. method/formula used for calculating the impact on revenue or any other information).

(1)    TITLE V of the Treaty on the functioning of the European Union.

(2)    Regulation (EC) No 1896/2006 of the European Parliament and of the Council of 12 December 2006 creating a European order for payment procedure (OJ L 399, 30.12.2006, p. 1).

(3)    Regulation (EC) No 861/2007 of the European Parliament and of the Council of 11 July 2007 establishing a European Small Claims Procedure (OJ L 199, 31.7.2007, p. 1).

(4)    Regulation (EU) No 655/2014 of the European Parliament and of the Council of 15 May 2014 establishing a European Account Preservation Order procedure to facilitate cross-border debt recovery in civil and commercial matters (OJ L 189, 27.6.2014, p. 59).

(5)    Technically, the TESTA NG network can also be used instead of the internet; however, this is not required.

(6)    To facilitate secure and interoperable communication, the initial e-CODEX project put forward three key building blocks: bi-directional message delivery (now CEF eDelivery); message building and tracking (e-CODEX ‘Connector’); and standards/templates for digital forms (e-CODEX XML Schemas).

(7)    Austria, Belgium, Croatia, Czechia, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Malta, the Netherlands, Poland, Portugal, Romania, Spain and the United Kingdom.

(8)    Jersey, Norway, Turkey, CCBE and CNUE.

(9)    From the Competitiveness and Innovation framework Programme’s (CIP) ICT Policy Support programme (DG CONNECT) and action grant via the Justice programme (DG JUST).

(10)    The impact assessment includes a list of the cross-border procedures for which e-CODEX has been used in pilot projects.

(11)    https://e-justice.europa.eu/home.do

(12)    In accordance with Regulation (EC) No 1896/2006 of the European Parliament and of the Council of 12 December 2006 creating a European order for payment procedure (OJ L 399, 30.12.2006, p. 1).

(13)    In accordance with Regulation (EC) No  861/2007 of the European Parliament and of the Council of 11 July 2007 establishing a European Small Claims Procedure (OJ L 199, 31.7.2007, p. 1).

(14)    Proposal for a Regulation amending Regulation (EC) No 1393/2007 of the European Parliament and of the Council on the service in the Member States of judicial and extrajudicial documents in civil or commercial matters (service of documents) (COM/2018/379 final). Proposal for a Regulation amending Council Regulation (EC) No 1206/2001 of 28 May 2001 on cooperation between the courts of the Member States in the taking of evidence in civil or commercial matters (COM/2018/378 final).

(15)    Evaluation by the Commission (three external experts) in 2016 of the e-Justice Communication via Online Data Exchange project (e-CODEX) submitted in the ICT Policy Support Programme within the Competitiveness and Innovation Framework Programme (CIP), grant agreement n° 270968.

(16)    COM(2020) 710.

(17)    The EU has adopted several legislative instruments in accordance with the principle of mutual recognition: European arrest Arrest warrant – FD 2002/584 (OJ L 190, 18.7.2002, pp. 1); Freezing orders of property and evidence – FD 2003/577 (OJ L 196, 2.8.2003, p. 45); Financial penalties – FD 2005/214 (OJ L 76, 22.3.2005, p. 16); Confiscation orders – FD 2006/783 (OJ L 328, 24.11.2006, p. 59); Transfer of prisoners and custodial sentences — FD 2008/909 (OJ L 327, 5.12.2008, p. 27); Probation decisions and alternative sanctions – FD 2008/947 (OJ L 337, 16.12.2008, p. 102); European supervision order in pre-trial procedures – FD 2009/829 (OJ L 294, 11.11.2009, p. 20); Prevention and settlement of conflicts of jurisdiction – FD 2009/948 (OJ L 328, 15.12.2009, p. 42); European investigationorder – Directive 2014/41/EU (OJ L 130, 1.5.2014, p. 1); European Protection Order – Directive 2011/99/EU (OJ L 338, 21.12.2011, p. 2). In addition, in 2016, the Commission adopted a Proposal for a Regulation of the European Parliament and of the Council on the mutual recognition of freezing and confiscation orders (COM/2016/0819 final) and, in 2018, a Proposal for a Regulation of the European Parliament and of the Council on European Production and Preservation Orders for electronic evidence in criminal matters (COM/2018/225 final).

(18)    Directive 2014/41/EU of the European Parliament and of the Council of 3 April 2014 regarding the European Investigation Order in criminal matters (OJ L 130 of 1 May 2014, p. 1).

(19)    Germany (North Rhine-Westphalia), France, the Netherlands, Austriathe European Bailiff’s Foundation, the European Lawyers’ Foundation and the Aristotle University of Thessaloniki.

(20)    Council Conclusions ‘Access to justice – seizing the opportunities of digitalisation’ (OJ C 342 I, 14.10.2020, p. 1).

(21)    Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa (OJ L 138, 22.5.2019, p. 27 ) and Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum and migration (OJ L 135, 22.5.2019, p. 85).

(22)    Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011 (OJ L 295, 21.11.2018, p. 99).

(23)    2019-2023 Action Plan European e-Justice (OJ C 96, 13.3.2019, p. 9).

(24)    Communication from the Commission to the European Parliament, the Council, The European Economic and Social Committee and the Committee of the Regions, EU eGovernment Action Plan 2016-2020 Accelerating the digital transformation of government COM(2016) 179 final.

(25)    Regulation (EU) No 1316/2013 of the European Parliament and of the Council of 11 December 2013 establishing the Connecting Europe Facility, amending Regulation (EU) No 913/2010 and repealing Regulations (EC) No 680/2007 and (EC) No 67/2010 (OJ L 348, 20.12.2013, p. 129).

(26)    Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011 (OJ L 295, 21.11.2018, p. 99).

(27)      

(28)    Study carried out within Work Package 3 of the e-CODEX project (e-CODEX D3.5/D3.7/D3.8 WP3 Final Report).

(29)    European Commission (2017). Long Term Sustainability of Digital Service Infrastructures, Luxembourg: Publications Office of the European Union http://publications.europa.eu/resource/cellar/4374d088-c8ee-11e7-9b01-01aa75ed71a1.0001.01/DOC_1.

(30)    Future analysis “Governance model for the European Union IT Agency (eu-LISA)” - https://www.riigikantselei.ee/sites/default/files/content-editors/uuringud/governance_mode_for_the_european_union_it_agency_eu-lisa_final_report.pdf  

(31)    Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39).

(32)    Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA (OJ L 119, 4.5.2016, p. 89).

(33)    Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011 (OJ L 295, 21.11.2018, p. 99)

(34)    Regulation (EU) No 182/2011 of the European Parliament and of the Council of 16 February 2011 laying down the rules and general principles concerning mechanisms for control by Member States of the Commission's exercise of implementing powers (OJ L 55, 28.2.2011, p. 13).

(35)    Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).

(36)    Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA (OJ L 119, 4.5.2016, p. 89).

(37)    Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance.) (OJ L 295, 21.11.2018, p. 39).

(38)    OJ ...

(39)    As referred to in Article 58(2)(a) or (b) of the Financial Regulation.

(40)    2019-2023 Action Plan European e-Justice (OJ C 96, 13.3.2019, p. 9).

(41)    Communication from the Commission to the European Parliament, the Council, The European Economic and Social Committee and the Committee of the Regions, EU eGovernment Action Plan 2016-2020 Accelerating the digital transformation of government COM(2016) 179 final.

(42)    Regulation (EU) No 1316/2013 of the European Parliament and of the Council of 11 December 2013 establishing the Connecting Europe Facility, amending Regulation (EU) No 913/2010 and repealing Regulations (EC) No 680/2007 and (EC) No 67/2010 (OJ L 348, 20.12.2013, p. 129-).

(43)    Details of management modes and references to the Financial Regulation may be found on the BudgWeb site: https://myintracomm.ec.europa.eu/budgweb/EN/man/budgmanag/Pages/budgmanag.aspx  

(44)    Diff. = Differentiated appropriations / Non-diff. = Non-differentiated appropriations.

(45)    EFTA: European Free Trade Association.

(46)    Candidate countries and, where applicable, potential candidates from the Western Balkans.

(47)    Outputs are products and services to be supplied (e.g.: number of student exchanges financed, number of km of roads built, etc.).

(48)    Increased in 2023 due to the need of increased collaboration during the hand-over period.

(49)    Technical and/or administrative assistance and expenditure in support of the implementation of EU programmes and/or actions (former ‘BA’ lines), indirect research, direct research.

(50)    As of 1 September 2022.

(51)    AC= Contract Staff; AL = Local Staff; END = Seconded National Expert; INT = agency staff; JPD= Junior Professionals in Delegations.

(52)    Sub-ceiling for external staff covered by operational appropriations (former ‘BA’ lines).

(53)    As regards traditional own resources (customs duties, sugar levies), the amounts indicated must be net amounts, i.e. gross amounts after deduction of 20 % for collection costs.

EUROPEAN COMMISSION

Brussels, 2.12.2020

COM(2020) 712 final

ANNEXES

to the

Proposal for a Regulation of the European Parliament and of the Council

on a computerised system for communication in cross-border civil and criminal proceedings (e-CODEX system), and amending Regulation (EU) 2018/1726

{SEC(2020) 408 final} - {SWD(2020) 541 final} - {SWD(2020) 542 final}

ANNEX I

Legal instruments falling within the scope this Regulation

Instruments in the area of judicial cooperation in civil matters

(1)Council Regulation (EC) No 44/2001 of 22 December 2000 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters 1

(2)Council Decision of 28 May 2001 establishing a European Judicial Network in civil and commercial matters (2001/470/EC) 2

(3)Council Regulation (EC) No 1206/2001 of 28 May 2001 on cooperation between the courts of the Member States in the taking of evidence in civil or commercial matters 3

(4)Council Directive 2002/8/EC of 27 January 2003 to improve access to justice in cross-border disputes by establishing minimum common rules relating to legal aid for such disputes 4

(5)Council Regulation (EC) No 2201/2003 of 27 November 2003 concerning jurisdiction and the recognition and enforcement of judgments in matrimonial matters and the matters of parental responsibility, repealing Regulation (EC) No 1347/2000 5

(6)Regulation (EC) No 805/2004 of the European Parliament and of the Council of 21 April 2004 creating a European Enforcement Order for uncontested claims 6

(7)Regulation (EC) No 1896/2006 of the European Parliament and of the Council of 12 December 2006 creating a European order for payment procedure 7

(8)Regulation (EC) No 861/2007 of the European Parliament and of the Council of 11 July 2007 establishing a European Small Claims Procedure 8  

(9)Regulation (EC) No 864/2007 of the European Parliament and of the Council of 11 July 2007 on the law applicable to non-contractual obligations (Rome II) 9

(10)Regulation (EC) No 1393/2007 of the European Parliament and of the Council of 13 November 2007 on the service in the Member States of judicial and extrajudicial documents in civil or commercial matters (service of documents), and repealing Council Regulation (EC) No 1348/2000 10

(11)Directive 2008/52/EC of the European Parliament and of the Council of 21 May 2008 on certain aspects of mediation in civil and commercial matters 11

(12)Regulation (EC) No 593/2008 of the European Parliament and of the Council of 17 June 2008 on the law applicable to contractual obligations (Rome I) 12

(13)Council Regulation (EC) No 4/2009 of 18 December 2008 on jurisdiction, applicable law, recognition and enforcement of decisions and cooperation in matters relating to maintenance obligations 13

(14)Council Regulation (EU) No 1259/2010 of 20 December 2010 implementing enhanced cooperation in the area of the law applicable to divorce and legal separation 14

(15)Regulation (EU) No 650/2012 of the European Parliament and of the Council of 4 July 2012 on jurisdiction, applicable law, recognition and enforcement of decisions and acceptance and enforcement of authentic instruments in matters of succession and on the creation of a European Certificate of Succession 15

(16)Regulation (EU) No 1215/2012 of the European Parliament and of the Council of 12 December 2012 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters (recast) 16

(17)Regulation (EU) No 606/2013 of the European Parliament and of the Council of 12 June 2013 on mutual recognition of protection measures in civil matters 17

(18)Regulation (EU) No 655/2014 of the European Parliament and of the Council of 15 May 2014 establishing a European Account Preservation Order procedure to facilitate cross-border debt recovery in civil and commercial matters 18

(19)Regulation (EU) 2015/848 of the European Parliament and of the Council of 20 May 2015 on insolvency proceedings 19

(20)Council Regulation (EU) 2016/1103 of 24 June 2016 implementing enhanced cooperation in the area of jurisdiction, applicable law and the recognition and enforcement of decisions in matters of matrimonial property regimes 20

(21)Council Regulation (EU) 2016/1104 of 24 June 2016 implementing enhanced cooperation in the area of jurisdiction, applicable law and the recognition and enforcement of decisions in matters of the property consequences of registered partnerships 21

(22)Regulation (EU) 2016/1191 of the European Parliament and of the Council of 6 July 2016 on promoting the free movement of citizens by simplifying the requirements for presenting certain public documents in the European Union and amending Regulation (EU) No 1024/2012 22

(23)Directive (EU) 2019/1023 of the European Parliament and of the Council of 20 June 2019 on preventive restructuring frameworks, on discharge of debt and disqualifications, and on measures to increase the efficiency of procedures concerning restructuring, insolvency and discharge of debt, and amending Directive (EU) 2017/1132 (Directive on restructuring and insolvency) 23

Instruments in the area of judicial cooperation in criminal matters

(1)Convention drawn up on the basis of Article K.3 of the Treaty on European Union, relating to extradition between the Member States of the European Union 24  

(2)Convention drawn up on the basis of Article K.3 of the Treaty on European Union, on simplified extradition procedure between the Member States of the European Union 25

(3)Convention established by the Council in accordance with Article 34 of the Treaty on European Union, on Mutual Assistance in Criminal Matters between the Member States of the European Union 26  

(4)Protocol established by the Council in accordance with Article 34 of the Treaty on European Union to the Convention on Mutual Assistance in Criminal Matters between the Member States of the European Union 27  

(5)Council Framework Decision 2002/584/JHA of 13 June 2002 on the European arrest warrant and the surrender procedures between Member States 28

(6)Council Framework Decision 2002/465/JHA of 13 June 2002 on joint investigation teams 29

(7)Council Framework Decision 2003/577/JHA of 22 July 2003 on the execution in the European Union of orders freezing property or evidence 30

(8)Council Directive 2004/80/EC of 29 April 2004 relating to compensation to crime victims 31

(9)Council Framework Decision 2005/214/JHA of 24 February 2005 on the application of the principle of mutual recognition to financial penalties 32

(10)Council Framework Decision 2006/783/JHA of 6 October 2006 on the application of the principle of mutual recognition to confiscation orders 33  

(11)Council Framework Decision 2008/909/JHA of 27 November 2008 on the application of the principle of mutual recognition to judgments in criminal matters imposing custodial sentences or measures involving deprivation of liberty for the purpose of their enforcement in the European Union 34  

(12)Council Framework Decision 2008/947/JHA of 27 November 2008 on the application of the principle of mutual recognition to judgments and probation decisions with a view to the supervision of probation measures and alternative sanctions 35  

(13)Council Framework Decision 2009/299/JHA of 26 February 2009 amending Framework Decisions 2002/584/JHA, 2005/214/JHA, 2006/783/JHA, 2008/909/JHA and 2008/947/JHA, thereby enhancing the procedural rights of persons and fostering the application of the principle of mutual recognition to decisions rendered in the absence of the person concerned at the trial 36

(14)Council Framework Decision 2009/829/JHA of 23 October 2009 on the application, between Member States of the European Union, of the principle of mutual recognition to decisions on supervision measures as an alternative to provisional detention 37

(15)Council Framework Decision 2009/948/JHA of 30 November 2009 on prevention and settlement of conflicts of exercise of jurisdiction in criminal proceedings 38

(16)Directive 2011/99/EU of the European Parliament and of the Council of 13 December 2011 on the European protection order 39

(17)Directive 2012/29/EU of the European Parliament and of the Council of 25 October 2012 establishing minimum standards on the rights, support and protection of victims of crime, and replacing Council Framework Decision 2001/220/JHA 40

(18)Directive 2014/41/EU of the European Parliament and of the Council of 3 April 2014 regarding the European Investigation Order in criminal matters 41

(19)Regulation (EU) 2018/1805 of the European Parliament and of the Council of 14 November 2018 on the mutual recognition of freezing orders and confiscation orders 42

(20)[Proposal for a Regulation (EU) on European Production and Preservation Orders for electronic evidence in criminal matters 43 ]

ANNEX II

Software products and related documentation to be handed over to eu-LISA under Article 9

(1)Central Testing Platform (software product that provides a set of functions which can be used to verify the correct operation of e-CODEX access points and the correct use of the e‑CODEX digital procedural standards in the connected systems linked to these)

(2)Configuration Management Tool (software product used to assist in the performance of the task defined in Article 6 (2) (c))

(3)Metadata Workbench (software product used to assist in the performance of parts of the tasks defined in Article 6)

(1)    OJ L 12, 16.1.2001, p. 1.

(2)    OJ L 174, 27.6.2001, p. 25.

(3)    OJ L 174, 27.6.2001, p. 1.

(4)    OJ L 26, 31.1.2003, p. 41.

(5)    OJ L 338, 23.12.2003, p. 1.

(6)    OJ L 143, 30.4.2004, p. 15.

(7)    OJ L 399, 30.12.2006, p. 1.

(8)    OJ L 199, 31.7.2007, p. 1.

(9)    OJ L 199, 31.7.2007, p. 40.

(10)    OJ L 324, 10.12.2007, p. 79.

(11)    OJ L 136, 24.5.2008, p. 3.

(12)    OJ L 177, 4.7.2008, p. 6.

(13)    OJ L 7, 10.1.2009, p. 1.

(14)    OJ L 343, 29.12.2010, p. 10.

(15)    OJ L 201, 27.7.2012, p. 107.

(16)    OJ L 351, 20.12.2012, p. 1.

(17)    OJ L 181, 29.6.2013, p. 4.

(18)    OJ L 189, 27.6.2014, p. 59.

(19)    OJ L 141, 5.6.2015, p. 19.

(20)    OJ L 183, 8.7.2016, p. 1.

(21)    OJ L 183, 8.7.2016, p. 30.

(22)    OJ L 200, 26.7.2016, p. 1.

(23)    OJ L 172, 26.6.2019, p. 18.

(24)    OJ C 313, 23.10.1996, p. 12.

(25)    OJ C 78, 30.3.1995, p. 2.

(26)    OJ C 197, 12.7.2000, p. 3.

(27)    OJ C 326, 21.11.2001, p. 2.

(28)    OJ L 190, 18.7.2002, p. 1.

(29)    OJ L 162, 20.6.2002, p. 1.

(30)    OJ L 196, 2.8.2003, p. 45.

(31)    OJ L 261, 6.8.2004, p. 15.

(32)    OJ L 76, 22.3.2005, p. 16.

(33)    OJ L 328, 24.11.2006, p. 59.

(34)    OJ L 327, 5.12.2008, p. 27.

(35)    OJ L 337, 16.12.2008, p. 102.

(36)    OJ L 81, 27.3.2009, p. 24.

(37)    OJ L 294, 11.11.2009, p. 20.

(38)    OJ L 328, 15.12.2009, p. 42.

(39)    OJ L 338, 21.12.2011, p. 2.

(40)    OJ L 315, 14.11.2012, p. 57.

(41)    OJ L 130, 1.5.2014, p. 1.

(42)    OJ L 303, 28.11.2018, p. 1.

(43)    COM(2018) 225 final (The proposal is in the legislative process).