EUROPEAN COMMISSION

Brussels, 23.9.2020

COM(2020) 614 final

2016/0132(COD)

Amended proposal for a

REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

on the establishment of 'Eurodac' for the comparison of biometric data for the effective application of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] and of Regulation (EU) XXX/XXX [Resettlement Regulation], for identifying an illegally staying third-country national or stateless person and on requests for the comparison with Eurodac data by Member States' law enforcement authorities and Europol for law enforcement purposes and amending Regulations (EU) 2018/1240 and (EU) 2019/818

EXPLANATORY MEMORANDUM

1.CONTEXT OF THE PROPOSAL

•Context and reasons for the proposal

•Objectives of the proposal

The 2016 Commission proposal already enlarged the scope of Eurodac, adding new categories of persons for whom data should be stored, allowing its use to identify irregular migrants, lowering the age for fingerprinting, allowing the collection of identity information together with the biometric data, and extending the data storage period.

The proposal amending the 2016 proposal builds on the provisional agreement between co-legislators, complements these changes and aims at transforming Eurodac into a common European database to support EU policies on asylum, resettlement and irregular migration. It should therefore support the application of the various measures and rules foreseen in the proposal for a new Regulation on Asylum and Migration Management (e.g. relocation, shift of responsibility) and ensure consistency with the proposal for a Screening Regulation. Moreover, it aims at gathering more accurate and complete data to inform policy making and thus at better assisting with the control of irregular migration and the detection of unauthorised movements by counting individual applicants in addition to applications. It also aims to support the identification of appropriate policy solutions in this area by allowing statistics to be drawn up combining data from several databases. Another objective is to provide additional support to national authorities dealing with asylum applicants whose application has already been rejected in another Member State by marking rejected applications. Finally, the Regulations establishing a framework on interoperability between EU information systems, in particular Regulation 2019/818 includes Eurodac in its scope. Amendments stemming from the interoperability framework and relating to the access to Eurodac data, could not yet be made at the time of adoption of the Interoperability Regulations, as the current Eurodac database does not contain alphanumeric identity data. As a consequence, this proposal includes a number of amendments that seek to ensure that Eurodac will function properly within the new interoperability framework and with the same objective presents further necessary amendments to two other legal instruments, namely the VIS and ETIAS Regulations.

•Consistency with existing policy provisions in the policy area

•Consistency with other Union policies

(a)Interoperability insofar as this proposal must ensure the functioning of Eurodac in the framework for interoperability between EU information systems.

(b)Data Protection insofar as this proposal must ensure the protection of fundamental rights to respect for the private life of individuals whose personal data are processed in Eurodac.

(c)Security insofar as it takes into account the pre-entry stage foreseen in the proposal for a Screening Regulation which provides for a security check

2.LEGAL BASIS, SUBSIDIARITY AND PROPORTIONALITY

•Legal basis

•Variable Geometry

•Impact of the proposal on Denmark and on non-EU Member States associated to the (former) Dublin system

–the agreement associating Iceland and Norway, concluded in 2001 9 ;

–the agreement associating Switzerland, concluded on 28 February 2008 10 ;

–the protocol associating Liechtenstein, concluded on 18 June 2011 11 .

•Subsidiarity

•Proportionality

•Choice of the instrument and legislative technique

3.RESULTS OF EX-POST EVALUATIONS, STAKEHOLDER CONSULTATIONS AND IMPACT ASSESSMENTS

•Ex-post evaluations/fitness checks of existing legislation

•Stakeholder consultations

•Evidence-based policy-making

•Fundamental rights

4.BUDGETARY IMPLICATIONS

5.OTHER ELEMENTS

•Monitoring, evaluation and reporting arrangements 

The text of the 2016 proposal as provisionally agreed by co-legislators foresees in its Article 42 three types of reporting obligations as follows:

–Once a year, eu-LISA shall submit to the European Parliament, the Council the Commission and the EDPS a report on the activities of the Central System (on the basis of information provided by Member States);

–Seven years after adoption and every four years thereafter, the Commission shall produce an overall evaluation of Eurodac, examining the results achieved against objectives and the impact on fundamental rights (on the basis of information provided by eu-LISA, Member States and Europol);

–Every two years, each Member State and Europol shall prepare reports on the effectiveness of the comparison of biometric data with Eurodac data for law enforcement purposes. These reports shall be transmitted to the Commission by 30 June of the subsequent year. Every two years, the Commission shall compile these reports in a report on law enforcement access to Eurodac which will be transmitted to the European Parliament, the Council and the EDPS. This report is different for the report described under the previous point.

The yearly report that eu-LISA will have to prepare on the activities of the Central System, will include information on the management and performance of Eurodac against pre-defined quantitative indicators (e.g. total number of data sets and per category, number of hits, the way Member States implement the deadlines for transmitting biometric data to Eurodac, including delays etc).

The report containing the overall evaluation of Eurodac that the Commission will need to prepare will monitor the results achieved against the objectives set by the regulation and will measure the impact on fundamental rights, in particular data protection and privacy rights, including whether law enforcement access has led to indirect discrimination against persons covered by the Eurodac Regulation.

The reports on the effectiveness of the comparison of biometric data with Eurodac data prepared by Europol and each Member State will assess, among others, the exact purpose of the comparison, the grounds given for reasonable suspicion, the number and type of cases which ended with a successful identification.

•Detailed explanation of the specific provisions of the proposal

1.Counting applicants in addition to applications

Recent discussions in various fora (Council preparatory bodies, Advisory Groups) and contributions to the new Pact coming from Member States during consultation clearly pointed out a set of gaps in information gathering and analysis at EU level in the field of asylum and migration. This becomes particularly relevant when analysing unauthorised movements in this field: currently there is no possibility of knowing how many applicants there are in the EU because the numbers refer to applications and therefore several applications may belong to the same person. Considering this, it is necessary to transform the Eurodac system from a database counting applications to a database counting applicants. This can be done by linking all data sets in Eurodac belonging to one person, regardless of their category, in one sequence, which would allow the counting of persons. Furthermore, a specific provision would allow eu-LISA to produce statistics on the number of asylum applicants and first-time applicants, providing an accurate picture of how many third-country nationals and stateless persons request asylum in the EU. Aggregating these data with other type of data such as those regarding transfers under the Regulation on Asylum and Migration Management will supply the appropriate input for the right type of policy response in relation to unauthorised movements.

2.Cross-system statistics

A new provision building upon the relevant provisions of the Interoperability Regulations 21 (Article 39), will allow eu-LISA to draw up cross-system statistics using data from Eurodac, Entry/Exit System (EES), ETIAS and the Visa Information System (VIS). One aim would be to know for example how many of the third country nationals were issued a short-stay visa by a given Member State or in a given third country, proceeded to enter legally (and where) and then proceeded to apply for international protection (and where). This would offer the necessary background information for assessing such phenomena and for the appropriate policy response. The provision would also foresee that in addition to the Commission and the Member States, the future European Union Agency for Asylum and Frontex would also get access to such statistics as both agencies, in the framework of their respective mandate, produce valuable analysis in the area of migration and asylum.

3.Creating a new category for persons disembarked following a search and rescue (SAR) operation

The new proposal for a Regulation on Asylum and Migration Management provides a responsibility criterion for examining an application for international protection where the application was registered after the person concerned was disembarked following a search and rescue operation (under current rules such persons are covered by the irregular entry criterion). This better reflects in the asylum acquis the obligations stemming from the International Convention on Maritime Search and Rescue 22 . While the responsibility rules for this new category are the same as the rules for persons who enter irregularly, the distinction is relevant in relation to the fact that Member States of disembarkation face specific challenges as they cannot apply to SAR disembarkations the same tools as for irregular crossings by land or air. For instance, there are no official border checks for SAR arrivals, which not only means that points of entry are more difficult to define, but also that third country nationals have no points where to officially seek entry. Therefore, there is a need to have a separate category for these persons in Eurodac instead of registering them as persons who cross the border irregularly (as is currently the case). Moreover, this will also lead to a more accurate picture of the composition of migratory flows in the EU. 

4.Ensuring full consistency with the proposal for a Regulation on Asylum and Migration

In addition to creating the new category for persons disembarked following a search and rescue operation, this amended proposal also adds a set of provisions reflecting all the relevant aspects regarding the responsibility of a Member State (the various criteria to establish responsibility, the shift of responsibility and the cessation of responsibility). These provisions add to those that were already included in the original 2016 proposal. Finally, this amended proposal contains provisions regarding the relocation of beneficiaries of international protection, thus fully mirroring the various scenarios contained in the proposal for a Regulation on Asylum and Migration.

5.Ensuring consistency with screening

A limited number of changes were needed to ensure consistency with the proposal for a Screening Regulation. In this sense, the moment from which the time-limit for taking and transmission of biometric data for applicants starts running needed to be adapted to cater for the various possible scenarios foreseen by that proposal in order to ensure a smooth flow of the asylum procedure.

6.Indicating rejected applications

7.Indicating whether voluntary return and reintegration assistance has been granted

8.Indicating whether following screening it appears that the person could pose a threat to internal security

9.Indicating whether a visa has been issued

10.Interoperability consequential amendments and amendments related to the Interoperability Regulation, ETIAS 24 and VIS Regulations

It is necessary to introduce a set of technical consequential amendments stemming from the Interoperability Regulation (e.g. references to and definition of the common identity repository and of identity data or clarifications regarding the way the stored data will be split between the common identity repository and the Central System). The need to introduce these changes in the Eurodac Regulation were stated already when the two proposals for the Interoperability Regulations were presented. These amendments will ensure the proper legal basis for the functioning of Eurodac within the new interoperability framework. Likewise, it is necessary to introduce amendments to the Interoperability Regulation in order to include the various relevant references to Eurodac. Finally, it is also necessary to introduce a set of consequential amendments stemming from the ETIAS Regulation and from the VIS Regulation regulating the access to Eurodac of the ETIAS National Units and of the competent visa authorities respectively, as the issue of access rights to the various databases remains an aspect to be dealt with in the legislative act governing the respective databases.

2016/0132 (COD)

Amended proposal for a

REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

on the establishment of 'Eurodac' for the comparison of biometric data for the effective application of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] and of Regulation (EU) XXX/XXX [Resettlement Regulation], for identifying an illegally staying third-country national or stateless person and on requests for the comparison with Eurodac data by Member States' law enforcement authorities and Europol for law enforcement purposes and amending Regulations (EU) 2018/1240 and (EU) 2019/818

THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,

Having regard to the Treaty on the Functioning of the European Union, and in particular Articles 78(2)(d), (e) and (g), 79(2)(c), 87(2)(c) and 88(2)(a) thereof,

Having regard to the proposal from the European Commission,

After transmission of the draft legislative act to the national parliaments,

Acting in accordance with the ordinary legislative procedure,

Whereas:

(1)the following recitals are inserted after recital 4:

‘(4a) Moreover, for the purposes of effectively applying Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] and in accordance with the rules thereof, it is necessary to clearly mark in Eurodac the fact that there has been a shift of responsibility between Member States, including in cases of relocation. Furthermore, in order to reflect accurately the obligations Member States have to conduct search and rescue operations and to help these Member States with the specific challenges they face as they cannot apply to persons disembarked following such operations the same tools as for irregular crossings by land or air, it is also necessary to register third-country nationals or stateless persons disembarked following search and rescue operations as a separate category in Eurodac.

(4b) Furthermore, for the purposes of applying Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] it is necessary to flag whether, following security checks during screening, it appears that a person could pose a threat to internal security.’;

(2)the following recitals are inserted after recital 5:

‘(5a) It is also necessary to introduce provisions that would ensure the functioning of that system within the interoperability framework established by Regulations (EU) 2019/817 25 and 2019/818 26 of the European Parliament and of the Council.

(5b) Furthermore, it is necessary to introduce the provisions that would frame the access of European Travel Information and Authorization System (ETIAS) national units and of competent visa authorities to Eurodac in accordance with Regulation (EU) 2018/1240 27 and (EC) 767/2008 28 of the European Parliament and of the Council.

(5c) Likewise, for the purpose of managing irregular migration, it is necessary to allow eu-LISA to produce cross-system statistics using data from Eurodac, the Visa Information System, ETIAS and the Entry/Exit System. In order to specify the content of these cross-system statistics, implementing powers should be conferred on the Commission. Those powers should be exercised in accordance with Regulation (EU) 182/2011 of the European Parliament and of the Council of 16 February 2011 laying down the rules and general principles concerning mechanisms for control by the Member States of the Commission's exercise of implementing powers.’; 

(3)recital 6 is replaced by the following:

‘(6) To those ends, it is necessary to set up a system known as 'Eurodac', consisting of a Central System and of the Common Identity Repository established by Regulation (EU) 2019/818, which will operate a computerised central database of biometric fingerprint and facial image data, as well as of the electronic means of transmission between those [the Central System and the Common Identity Repository] and the Member States, hereinafter the "Communication Infrastructure".’;

(4)the following recital is inserted after recital 11:

‘(11a) For that purpose, it also necessary to clearly mark in Eurodac the fact that an application for international protection has been rejected where the third-country national or stateless person has no right to remain and has not been allowed to remain in accordance with Regulation (EU) XXX/XXX [Asylum Procedure Regulation].’;

(5)recital 14 is replaced by the following:

‘(14) Moreover, in order for Eurodac to effectively assist with the control of irregular migration and with the detection of secondary movements within the EU, it is necessary to allow the system to count applicants in addition to applications by linking all sets of data corresponding to one person, regardless of their category, in one sequence.’;

(6)the following recital is inserted after recital 24:

‘(24a) For the purposes of this Regulation, it is recalled that a person should be considered to be illegally staying on the territory of the Member State of relocation if that person does not apply for international protection following relocation or does otherwise not fulfil or no longer fulfils the conditions of entry as set out in Article 6 of Regulation (EU) 2016/399 or other conditions for entry, stay or residence in the Member State of relocation.’;

(7)the following recital is inserted after recital 60:

‘(60a) This Regulation should be without prejudice to the application of Directive 2004/38/EC of the European Parliament and of the Council 29 .’;

(8)recital 63 is deleted.

HAVE ADOPTED THIS REGULATION:

(9) Article 1 is replaced by the following:

Article 1

Purpose of "Eurodac”

1. A system known as "Eurodac" is hereby established, the purpose of which shall be to:

(a)assist in determining which Member State is to be responsible pursuant to Regulation (EU) No XXX/XXX [Regulation on Asylum and Migration Management] for examining an application for international protection lodged registered in a Member State by a third-country national or a stateless person, and otherwise to facilitate the application of Regulation (EU) No XXX/XXX [Regulation on Asylum and Migration Management] under the conditions set out in this Regulation;

(b)assist with the application of Regulation (EU) XXX/XXX [Resettlement Regulation] under the conditions set out in this Regulation;

(c)assist with the control of illegal irregular immigration to the Union and with the detection of secondary movements within the Union and with the identification of illegally staying third-country nationals and stateless persons for determining the appropriate measures to be taken by Member States including removal and repatriation of persons residing without authorisation;

(d)lay down the conditions under which Member States' designated authorities and the European Police Office (Europol) may request the comparison of fingerprint and facial image biometric or alphanumeric data with those stored in the Central System for law enforcement purposes for the prevention, detection or investigation of terrorist offences or of other serious criminal offences;

(e)assist in the correct identification of persons registered in Eurodac under the conditions and for the objectives referred to in Article 20 of Regulation (EU) 2019/818 by storing identity data, travel document data and biometric data in the common identity repository (CIR) established by that Regulation;

(f)support the objectives of the European Travel Information and Authorisation System (‘ETIAS’) established by Regulation (EU) 2018/1240;

(g)support the objectives of the Visa Information System (VIS) referred to in Regulation (EC) No 767/2008.

2. Without prejudice to the processing of data intended for Eurodac by the Member State of origin in databases set up under the latter's national law, fingerprint biometric data and other personal data may be processed in Eurodac only for the purposes set out in this Regulation, and in Regulation (EU) No XXX/XXX [Regulation on Asylum and Migration Management] and in Regulation (EU) XXX/XXX [Resettlement Regulation] [Article 34(1) of Regulation (EU) No 604/2013].’;

(10) Article 3 is amended as follows:

(a) in point (b) of paragraph 1, the following point (iv) is added:

‘(iv) in relation to a person covered by Article 14a(1), the Member State which transmits the personal data to the Central System and to the Common Identity Repository and receives the results of the comparison;’;

(b) in paragraph 1, the following points (p), (q) and (r) are added:

‘(p)“CIR” means the common identity repository as defined in Article 17 of Regulation (EU) 2019/818;

(q)“identity data” means the data referred to in Article 12(c) to (f) and (h), Article 13(2) (c) to (f) and (h), Article 14(2) (c) to (f) and (h) and Article 14a(c) to (f) and (h);

(r) “dataset” means the set of information recorded in Eurodac on the basis of Articles 12, 13, 14 or 14a, corresponding to one set of fingerprints of a data subject and composed of biometric data, alphanumeric data and, where available, a scanned colour copy of an identity or travel document.’;

(11) Article 4 is replaced by the following:

‘Article 4

System architecture and basic principles

1. Eurodac shall consist of:

(a)a Central System composed of:

(i)a Central Unit,

(ii)a Business Continuity Plan and System;

(b)a communication infrastructure between the Central System and Member States that provides a secure and encrypted communication channel for Eurodac data ("Communication Infrastructure");

(c)the common identity repository (CIR) as referred to in Article 17(2) of Regulation 2019/818;

(d)a secure communication infrastructure between the Central System and the central infrastructures of the European search portal, the shared biometric matching service, the CIR and the multiple-identity detector established by Regulation 2019/818.

2. The CIR shall contain the data referred to in Article 12, points (a) to (f), (h) and (i), Article 13(2) (a) to (f), (h), and (i), Article 14(2) (a) to (f), (h) and (i) and Article 14a(a) to (f), (h) and (i). The remaining Eurodac data shall be stored in the Central System.

23. The Eurodac Communication Infrastructure will be using the existing 'Secure Trans European Services for Telematics between Administrations' (TESTA) network. A separate virtual private network dedicated to the EURODAC shall be established on the existing TESTA private virtual network to ensure the logical separation of EURODAC data from other data. In order to ensure confidentiality, personal data transmitted to or from Eurodac shall be encrypted. 

34. Each Member State shall have a single National Access Point. Europol shall have a single Europol access point.

45. Data on persons covered by Articles 10(1), 13(1), 14(1) and 14a(1) which are processed in the Central System shall be processed on behalf of the Member State of origin under the conditions set out in this Regulation and separated by appropriate technical means.

6. All datasets registered in Eurodac corresponding to the same third country national or stateless person shall be linked in a sequence. Where a search is launched with the fingerprints in the dataset of a third-country national or stateless person and a hit is obtained against at least one other set of fingerprints in another dataset corresponding to that same third country national or stateless person, Eurodac shall automatically link those datasets on the basis of the fingerprints comparison. If necessary, the comparison of fingerprints shall be checked and confirmed by a fingerprint expert in accordance with Article 26. When the receiving Member State confirms the hit, it shall send a notification to eu-LISA that will confirm the linking.

57. The rules governing Eurodac shall also apply to operations carried out by the Member States as from the transmission of data to the Central System until use is made of the results of the comparison.’;

(12) the following Articles 8a, 8b, 8c and 8d are inserted:

‘Article 8a

Interoperability with ETIAS

1. From [the date of application of this Regulation], the Central System of Eurodac shall be connected to the European search portal referred to in Article 6 of Regulation (EU) 2019/818 in order to enable the automated processing referred to in Article 11 of Regulation (EU) 2018/1240.

2. The automated processing referred to in Article 11 of Regulation (EU) 2018/1240 shall enable the verifications provided for in Article 20 and the subsequent verifications of Articles 22 and 26 of that Regulation.

For the purpose of carrying out the verifications referred to in Article 20(2)(k) of Regulation (EU) 2018/1240, the ETIAS Central System shall use the European search portal, to compare the data in ETIAS with the data in Eurodac collected on the basis of Articles 12, 13, 14 and 14a of this Regulation corresponding to individuals having left or having been removed from the territory of the Member States in compliance with a return decision or removal order and using the correspondences listed in the table in Annex II of this Regulation.

The verifications shall be without prejudice to the specific rules provided for in Article 24(3) of Regulation (EU) 2018/1240.

Article 8b

Conditions for access to Eurodac for the manual processing by ETIAS National Units

1. Consultation of Eurodac by ETIAS National Units shall be carried out by means of the same alphanumerical data as those used for the automated processing referred to in Article 8a.

2. For the purposes of Article 1(1)(f), the ETIAS National Units, shall have access to and may consult the Eurodac, in a read-only format, for the purpose of examining applications for travel authorisation. In particular, the ETIAS National Units may consult the data referred to in Articles 12, 13, 14 and 14a.

3. Following consultation and access pursuant to paragraphs 1 and 2 of this Article the result of the assessment shall be recorded only in the ETIAS application files.

Article 8c

Access to Eurodac by the competent visa authorities

For the purpose of manually verifying hits triggered by the automated queries carried out by the Visa Information System in accordance with Articles [9a and 9c] of Regulation (EC) No 767/2008 and examining and deciding on visa applications in accordance with Article 21 of Regulation (EC) No 810/2009 of the European Parliament and of the Council 30 , the competent visa authorities shall have access to Eurodac to consult data in a read-only format.

Article 8d

Interoperability with the Visa Information System

From the [date of application of the Regulation (EU) XXX/XXX amending the VIS Regulation], as provided for in Article [9] of that Regulation, Eurodac shall be connected to the European search portal referred to in Article 6 of Regulation (EU) 2019/817 in order to enable the automated processing referred to in Article [9a] of Regulation (EC) No 767/2008 in order to query Eurodac and compare the relevant data in the Visa Information System with the relevant data in Eurodac. The verifications shall be without prejudice to the specific rules provided for in Article 9(b) of Regulation 767/2008.’;

(13) Article 9 is replaced by the following:

‘Article 9

Statistics

1. eu-LISA shall draw up statistics on the work of the Central System every month indicating in particular:

(a)the number of applicants and the number of first-time applicants resulting from the linking process referred to in Article 4(6);

(b)the number of rejected applicants resulting from the linking process referred to in Article 4(6) and pursuant to Article 12(za);

(ac)the number of data sets transmitted on persons referred to in Articles 10(1), 13(1), and 14(1) and 14a(1);

(bd)the number of hits for persons referred to in Article 10(1):

(i)for whom an application for international protection was registered who have subsequently lodged an application for international protection in another Member State,

(ii)who were apprehended in connection with the irregular crossing of an external border, and

(iii)who were found illegally staying in a Member State,

(iv)who were disembarked following a search and rescue operation;

(ce)the number of hits for persons referred to in Article 13(1):

(i)for whom an application for international protection was registered who have subsequently lodged an application for international protection,

(ii)who were apprehended in connection with the irregular crossing of an external border, and 

(iii)who were found illegally staying in a Member State;

(iv)who were disembarked following a search and rescue operation;

(df)the number of hits for persons referred to in Article 14(1):

(i)for whom an application for international protection was registered who have subsequently lodged an application for international protection in another Member State,

(ii)who were apprehended in connection with the irregular crossing of an external border, and 

(iii)who were found illegally staying in a Member State,

(iv)who were disembarked following a search and rescue operation;

(g) the number of hits for persons referred to in Article 14a(1):

(i)for whom an application for international protection was registered,

(ii)who were apprehended in connection with the irregular crossing of an external border,

(iii)who were illegally staying in a Member State,

(iv)who were disembarked following a search and rescue operation;

(eh)the number of fingerprint biometric data which the Central System had to request more than once from the Member States of origin because the fingerprint biometric data originally transmitted did not lend themselves to comparison using the computerised fingerprint and facial image recognition systems;

(fi)the number of data sets marked and unmarked blocked and unblocked in accordance with Article 19(1), and 17 (2), (3) and (4);

(gj)the number of hits for persons referred to in Article 19(1) and (4) for whom hits have been recorded under points (b), (c) and (d) to (g) of this Article;

(hk)the number of requests and hits referred to in Article 21(1);

(il)the number of requests and hits referred to in Article 22(1);

(jm)the number of requests made for persons referred to in Article 31;

(hn) the number of hits received from the Central System as referred to in Article 26(6).

2. The monthly statistical data for persons referred to in paragraph 1(a) to (h) (n) shall be published each month. At the end of each year, the yearly statistical data for persons referred to in paragraph 1(a) to (h) (n) shall be published by eu-LISA. The statistical data shall contain a breakdown of data for each Member State be broken down by Member State. The statistical data for persons referred to in paragraph 1 (c) shall, where possible, be broken down by year of birth and sex.

3. For the purpose of supporting the objective referred to in Article 1(c), eu-LISA shall produce monthly cross-system statistics. Those statistics shall not allow for the identification of individuals and will use data from Eurodac, the Visa Information System, ETIAS and the Entry/Exit System.

These statistics shall be made available to the Commission, to the [European Union Agency for Asylum], to the European Border and Coast Guard Agency and to the Member States. The Commission shall, by means of implementing acts, specify the content of the monthly cross-system statistics. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 41a(2).

34. At the request of the Commission, eu-LISA shall provide it with statistics on specific aspects for research and analysis purposes without allowing for individual identification as well as the possibility to produce regular statistics pursuant to paragraph 1. These statistics shall be shared with other Justice and Home Affairs Agencies if they are relevant for the implementation of their tasks related to the application of this Regulation as well as the statistics pursuant to paragraph 1 and shall, upon request, make them available to a Member State and to the [European Union Agency for Asylum].

5. eu-LISA shall store the data referred to in paragraphs 1 to 4 of this Article, which shall not allow for the identification of individuals, for research and analysis purposes, thus enabling the authorities referred to in paragraph 3 of this Article to obtain customisable reports and statistics in the central repository for reporting and statistics referred to in Article 39 of Regulation (EU) 2019/818.

6. Access to the central repository for reporting and statistics referred to in Article 39 of Regulation (EU) 2019/818 shall be granted to eu-LISA, to the Commission, to the [European Union Agency for Asylum] and to the authorities designated by each Member State in accordance with Article 28(2). Access may also be granted to authorised users of other Justice and Home Affairs Agencies if such access is relevant for the implementation of their tasks.’;

(14) Article 10 is replaced by the following:

‘Article 10

Collection and transmission of biometric data

1. Each Member State shall promptly take the fingerprints of all fingers and capture a facial image biometric data of every applicant for international protection of at least six years of age during the screening as referred to in Regulation (EU) XXX/XXX [Screening Regulation] or, where the biometric data could not be taken during the screening or where the applicant was not subject to screening, upon the registration of the application for international protection referred to in Article 27 of Regulation (EU) No XXX/XXX [Asylum Procedure Regulation] and shall, as soon as possible and no later than 72 hours after the biometric data have been taken after the lodging of his or her application for international protection, as defined by Article [21(2)] of Regulation (EU) No, transmit them together with the data referred to in Article 12 (c) to (p) of this Regulation to the Central System and to the CIR as appropriate in accordance with Article 4(2).

Where Article 3(1) of Regulation (EU) XXX/XXX [Screening Regulation] applies and the person applies for international protection during screening, for every applicant for international protection of at least six years of age, each Member State shall use the biometric data taken during screening and transmit them together with the data referred to in Article 12 (c) to (p) of this Regulation to the Central System and to the CIR as appropriate in accordance with Article 4(2), no later than 72 hours from the registration of the application referred to in Article 27 of Regulation (EU) XXX/XXX [Asylum Procedure Regulation].

Non-compliance with the 72-hour time-limit shall not relieve Member States of the obligation to take and transmit the fingerprints biometric data to the Central System CIR. Where the condition of the fingertips does not allow the taking of the fingerprints of a quality ensuring appropriate comparison under Article 26, the Member State of origin shall retake the fingerprints of the applicant and resend them as soon as possible and no later than 48 hours after they have been successfully retaken.

2. By way of derogation from paragraph 1, where it is not possible to take the fingerprints and facial image biometric data of an applicant for international protection on account of measures taken to ensure his or her health or the protection of public health, Member States shall take and send such fingerprints and facial image biometric data as soon as possible and no later than 48 hours after those health grounds no longer prevail.

In the event of serious technical problems, Member States may extend the 72-hour time-limit in paragraph 1 by a maximum of a further 48 hours in order to carry out their national continuity plans.

3. Fingerprint Where requested by the Member State concerned, the biometric data may also be taken and transmitted on behalf of that Member State by members of the European Border and Coast Guard Teams or by Member State asylum experts of the asylum support teams when exercising powers and performing their tasks in accordance with Regulation on the European Border [and Coast] Guard and repealing Regulation (EC) No 2007/2004, Regulation (EC) No 863/2007 and Council Decision 2005/267/EC] and [Regulation (EU) No. 439/2010] (EU) 2019/1896 and Regulation (EU) XXX/XXX [EU Agency for Asylum Regulation].

4. Each data set collected and transmitted in accordance with paragraph 1 shall be linked with other sets of data corresponding to the same third country national or stateless person in a sequence as set out in Article 4(6).’;

(15) Article 11 is replaced by the following:

‘Article 11

Information on the status of the data subject

1. As soon as the Member State responsible has been determined in accordance with Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] the Member State that conducts the procedures for determining the Member State responsible shall update its data set recorded pursuant to Article 12 of this Regulation regarding the person concerned by adding the Member State responsible.

Where a Member State becomes responsible because there are reasonable grounds to consider the applicant a danger to national security or public order of that Member State in accordance with Article 8(4) of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] it shall update its data set recorded pursuant to Article 12 of this Regulation regarding the person concerned by adding the Member State responsible.

12. The following information shall be sent to the Central System in order to be stored in accordance with Article 17 (1) for the purpose of transmission under Articles 15 and 16:

(a)when an applicant for international protection or another person as referred to in Article 21(1) 26 (1), points (b), (c) or (d) or (e) of Regulation (EU) No XXX/XXX [Regulation on Asylum and Migration Management] arrives in the Member State responsible following a transfer pursuant to a take back notification as referred to in Article 26 31 thereof of that Regulation, the Member State responsible shall update its data set recorded in conformity with Article 12 of this Regulation relating to the person concerned by adding his or her date of arrival;

(b)when an applicant for international protection arrives in the Member State responsible following a transfer pursuant to a decision acceding to a take charge request according to Article 24 30 of Regulation (EU) No XXX/XXX [Regulation on Asylum and Migration Management], the Member State responsible shall send a data set recorded in conformity with Article 12 of this Regulation relating to the person concerned and shall include his or her date of arrival;

(c)when an applicant for international protection arrives in the Member State of allocation pursuant to Article 34 of Regulation (EU) No. […/…], that Member State shall send a data set recorded in conformity with Article 12 of this Regulation relating to the person concerned and shall include his or her date of arrival and record that it is the Member State of allocation;

(dc)as soon as the Member State of origin ensures that the person concerned whose data was recorded in Eurodac in accordance with Article 12 of this Regulation has left the territory of the Member States in compliance with a return decision or removal order issued following the withdrawal or rejection of the application for international protection, it shall update its data set recorded in conformity with Article 12 of this Regulation relating to the person concerned by adding the date of his or her removal or when he or she left the territory;

(e)the Member State which becomes responsible in accordance with Article 19(1) of Regulation (EU) No […/…] shall update its data set recorded in conformity with Article 12 of this Regulation relating to the applicant for international protection by indicating that it has become the Member State responsible and by adding the date when the decision to examine the application was taken.

3. Where responsibility shifts to another Member State, pursuant to Articles 27(1) and Article 58(3) of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management], the Member State that establishes that responsibility has shifted, or the Member State of relocation, shall indicate the Member State responsible.

4. Where paragraphs 1 or 3 of this Article or Article 19(6) apply, the Central System shall, as soon as possible and no later than within 72 hours, inform all Member States of origin of the transmission of such data by another Member State of origin having produced a hit with data which they transmitted relating to persons referred to in Article 10(1), 13(1), 14(1) or 14a(1). Those Member States of origin shall also update the Member State responsible in their corresponding data sets.’;

(16) Article 12 is replaced by the following:

‘Article 12

Recording of data

Only the following data shall be recorded in the Central System and in the CIR as appropriate:

(a)fingerprint data;

(b) a facial image;

(c)surname(s) and forename(s), name(s) at birth and previously used names and any aliases, which may be entered separately;

(d)nationality(ies)

(e)place and date of birth;

(f)place of birth;

(fg)Member State of origin, place and date of the application for international protection; in the cases referred to in Article 112(b), the date of application shall be the one entered by the Member State who transferred the applicant;

(gh)sex;

(hi)where available, the type and number of identity or travel document; the three letter code of the issuing country and validity expiry date;

(j)where available, a scanned colour copy of an identity or travel document along with an indication of its authenticity or, where unavailable, another document which facilitates the identification of the third-country national or stateless person along with an indication of its authenticity;

(ik)reference number used by the Member State of origin;

(j)unique application number of the application for international protection pursuant to Article 22(2) of Regulation (EU) No. […/…];

(l)the Member State responsible in the cases referred to in Article 11(1), (2) or (3);

(km)the Member State of allocation relocation in accordance with Article 14b(1) 11(c);

(ln)date on which the fingerprints and/or facial image biometric data were taken;

(mo)date on which the data were transmitted to the Central System and to the CIR as appropriate;

(np)operator user ID;

(oq)where applicable in accordance with the cases referred to in Article 11(2)(a), the date of the arrival of the person concerned after a successful transfer;

(pr)where applicable in accordance with the cases referred to in Article 11(2)(b), the date of the arrival of the person concerned after a successful transfer;

(q)where applicable, in accordance with Article 11(c), the date of arrival of the person concerned after a successful transfer;

(rs)where applicable in accordance with the cases referred to in Article 11(2)(dc) , the date when the person concerned left or was removed from the territory of the Member States;

(t) where applicable, in accordance with the cases referred to in Article 14b(2), the date of arrival of the person concerned after a successful transfer;

(s)where applicable in accordance with Article 11(e), the date when the decision to examine the application was taken;

(u)where there are indications that a visa was issued to the applicant, the Member State which issued or extended the visa or on behalf of which the visa has been issued and the visa application number;

(v)the fact that the person could pose a threat to internal security following the screening referred to in Regulation (EU) No XXX/XXX [Screening Regulation] or following an examination pursuant Article 8(4) of Regulation (EU) No XXX/XXX [Regulation on Asylum and Migration Management];

(x)where applicable, the fact that the application for international protection has been rejected where the applicant has no right to remain and has not been allowed to remain in a Member State pursuant to Regulation (EU) XXX/XXX [Asylum Procedure Regulation];

(z)where applicable, the fact that assistance for voluntary return and reintegration (AVRR) has been granted.

2. A data set pursuant to paragraph 1 is considered created for the purpose of Article 27(1) of Regulation (EU) 818/2019 when all the data in points (a) to (f) and (h) are recorded.’;

(17) Article 13 is replaced by the following:

‘Article 13

Collection and transmission of biometric data

1. Each Member State shall promptly take the fingerprints of all fingers and capture a facial image biometric data of every third-country national or stateless person of at least six years of age who is apprehended by the competent control authorities in connection with the irregular crossing by land, sea or air of the border of that Member State having come from a third country and who is not turned back or who remains physically on the territory of the Member States and who is not kept in custody, confinement or detention during the entirety of the period between apprehension and removal on the basis of the decision to turn him or her back.

2. The Member State concerned shall, as soon as possible and no later than 72 hours after the date of apprehension, transmit to the Central System and to the CIR as appropriate the following data in relation to any third-country national or stateless person, as referred to in paragraph 1, who is not turned back:

(a)fingerprint data;

(b)a facial image;

(c)surname(s) and forename(s), name(s) at birth and previously used names and any aliases, which may be entered separately;

(d)nationality(ies);

(e)place and date of birth;

(f)place of birth;

(fg)Member State of origin, place and date of the apprehension;

(gh)sex;

(hi)where available, type and number of identity or travel document; three letter code of the issuing country and validity expiry date;

(j)where available, a scanned colour copy of an identity or travel document along with an indication of its authenticity or, where unavailable, another document which facilitates the identification of the third-country national or stateless person along with an indication of its authenticity;

(ik)reference number used by the Member State of origin;

(jl)date on which the fingerprints and/or facial image biometric data were taken;

(km)date on which the data were transmitted to the Central System and to the CIR as appropriate;

(ln)operator user ID;

(mo)where applicable in accordance with paragraph 6, the date when the person concerned left or was removed from the territory of the Member States;

(p)the Member State of relocation in accordance with Article 14b(1);

(q)where applicable, the fact that assistance for voluntary return and reintegration (AVRR) has been granted,

(r)the fact that the person could pose a threat to internal security following the screening referred to in Regulation (EU) XXX/XXX [Screening Regulation].

3. By way of derogation from paragraph 2, the data specified in paragraph 2 relating to persons apprehended as described in paragraph 1 who remain physically on the territory of the Member States but are kept in custody, confinement or detention upon their apprehension for a period exceeding 72 hours shall be transmitted before their release from custody, confinement or detention.

4. Non-compliance with the 72 hour time-limit referred to in paragraph 2 of this Article shall not relieve Member States of the obligation to take and transmit the fingerprints biometric data to the Central System CIR. Where the condition of the fingertips does not allow the taking of fingerprints of a quality ensuring appropriate comparison under Article 26, the Member State of origin shall retake the fingerprints of persons apprehended as described in paragraph 1 of this Article, and resend them as soon as possible and no later than 48 hours after they have been successfully retaken.

5. By way of derogation from paragraph 1, where it is not possible to take the fingerprints and facial image biometric data of the apprehended person on account of measures taken to ensure his or her health or the protection of public health, the Member State concerned shall take and send such fingerprints and facial image biometric data as soon as possible and no later than 48 hours after those health grounds no longer prevail.

In the event of serious technical problems, Member States may extend the 72-hour time-limit in paragraph 2 by a maximum of a further 48 hours in order to carry out their national continuity plans.

6. As soon as the Member State of origin ensures that the person concerned whose data was recorded in Eurodac in accordance with paragraph 1 has left the territory of the Member States in compliance with a return decision or removal order, it shall update its data set recorded in conformity with paragraph 2 relating to the person concerned by adding the date of his or her removal or when he or she left the territory.

7. Fingerprints Where requested by the Member State concerned, the biometric data may also be taken and transmitted on behalf of that Member State by members of the European Border and Coast Guard Teams or experts of the asylum support teams when exercising powers and performing their tasks in accordance with Regulation on the European Border [and Coast] Guard and repealing Regulation (EC) No 2007/2004, Regulation (EC) No 863/2007 and Council Decision 2005/267/EC (EU) 2019/1896 and Regulation (EU) XXX/XXX [EU Agency for Asylum Regulation].

8. Each data set collected and transmitted in accordance with paragraph 1 shall be linked with other sets of data corresponding to the same third country national or stateless person in a sequence as set out in Article 4(6).

9. A data set pursuant to paragraph 2 is considered created for the purpose of Article 27(1) of Regulation (EU) 818/2019 when all the data in points (a) to (f) and (h) are recorded.’;

(18) Article 14 is replaced by the following:

‘Article 14

Collection and transmission of biometric data

1. Each Member State shall promptly take the fingerprints of all fingers and capture a facial image biometric data of every third-country national or stateless person of at least six years of age who is found illegally staying within its territory.

2. The Member State concerned shall, as soon as possible and no later than 72-hours after the date of apprehension the third-country national or the stateless person has been found to be illegally staying, transmit to the Central System and to the CIR as appropriate the following data in relation to any third-country national or stateless person, as referred to in paragraph 1:

(a)fingerprint data;

(b)a facial image;

(c)surname(s) and forename(s), name(s) at birth and previously used names and any aliases, which may be entered separately;

(d)nationality(ies);

(e)place and date of birth;

(f)place of birth;

(fg)Member State of origin, place and date of the apprehension;

(gh)sex;

(hi)where available, type and number of identity or travel document; three letter code of the issuing country and validity expiry date;

(j)where available, a scanned colour copy of an identity or travel document along with an indication of its authenticity or, where unavailable, another document which facilitates the identification of the third-country national or stateless person along with an indication of its authenticity;

(ik)reference number used by the Member State of origin;

(jl)date on which the fingerprints and/or facial image biometric data were taken;

(km)date on which the data were transmitted to the Central System and to the CIR as appropriate;

(ln)operator user ID;

(mo) where applicable in accordance with paragraph 6 5, the date when the person concerned left or was removed from the territory of the Member States;

(p)the Member State of relocation in accordance with Article 14b(1);

(q)where applicable, in accordance with the cases referred to in Article 14b(2), the date of arrival of the person concerned after a successful transfer;

(r)where applicable, the fact that assistance for voluntary return and reintegration (AVRR) has been granted;

(s)where applicable, the fact that the person could pose a threat to internal security following the screening referred to in Regulation (EU) XXX/XXX [Screening Regulation].

3. The fingerprint data of a third-country national or a stateless person as referred to in paragraph 1 shall be transmitted to the Central System solely for the purpose of comparison and compared with the fingerprint data of persons fingerprinted for the purposes of Article10(1), 13(1) and 14(1) transmitted by other Member States and already recorded in the Central System.

43. Non-compliance with the 72 hour time-limit referred to in paragraph 3 2 of this Article shall not relieve Member States of the obligation to take and transmit the fingerprints biometric data to the Central System CIR. Where the condition of the fingertips does not allow the taking of fingerprints of a quality ensuring appropriate comparison under Article 26, the Member State of origin shall retake the fingerprints of persons apprehended as described in paragraph 1 of this Article, and resend them as soon as possible and no later than 48 hours after they have been successfully retaken.

54. By way of derogation from paragraph 1, where it is not possible to take the fingerprints and facial image biometric data of the apprehended person on account of measures taken to ensure his or her health or the protection of public health, the Member State concerned shall take and send such fingerprints and facial image biometric data as soon as possible and no later than 48 hours after those health grounds no longer prevail.

In the event of serious technical problems, Member States may extend the 72-hour time-limit in paragraph 2 by a maximum of a further 48 hours in order to carry out their national continuity plans.

65. As soon as the Member State of origin ensures that the person concerned whose data was recorded in Eurodac in accordance with Article 13(1) of this Regulation paragraph 1 has left the territory of the Member States in compliance with a return decision or removal order, it shall update its data set recorded in conformity with paragraph 2 of this Article relating to the person concerned by adding the date of his or her removal or when he or she left the territory.

6. Each data set collected and transmitted in accordance with paragraph 1 shall be linked with other sets of data corresponding to the same third country national or stateless person in a sequence as set out in Article 4(6).

7. A data set pursuant to paragraph 2 is considered created for the purpose of Article 27(1) of Regulation (EU) 818/2019 when all the data in points (a) to (f) and (h) are recorded.’;

(19) the following Chapter is inserted after Article 14:

‘chapter iv a

third-country nationals or stateless persons disembarked following a search and rescue operation

Article 14a

Collection and transmission of biometric data

1. Each Member State shall promptly take the biometric data of every third-country national or stateless person of at least six years of age who is disembarked following a search and rescue operation as defined in Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management].

2. The Member State concerned shall, as soon as possible and no later than 72 hours after the date of disembarkation, transmit to the Central System and to the CIR, as appropriate, the following data in relation to any third-country national or stateless person, as referred to in paragraph 1:

(a)fingerprint data;

(b)a facial image;

(c)surname(s) and forename(s), name(s) at birth and previously used names and any aliases, which may be entered separately;

(d)nationality(ies);

(e)date of birth;

(f)place of birth;

(g)Member State of origin, place and date of disembarkation;

(h)sex;

(i)where available, type and number of identity or travel document; three letter code of the issuing country and expiry date;

(j)where available, a scanned colour copy of an identity or travel document along with an indication of its authenticity or, where unavailable, another document which facilitates the identification of the third-country national or stateless person along with an indication of its authenticity;

(k)reference number used by the Member State of origin;

(l)date on which the biometric data were taken;

(m)date on which the data were transmitted to the Central System and to the CIR as appropriate;

(n)operator user ID;

(o)where applicable in accordance with paragraph 6, the date when the person concerned left or was removed from the territory of the Member States;

(p)the Member State of relocation in accordance with Article 14b(1);

(q)where applicable, the fact that assistance for voluntary return and reintegration (AVRR) has been granted,

(r)the fact that the person could pose a threat to internal security following the screening referred to in Regulation (EU) XXX/XXX [Screening Regulation].

4. Non-compliance with the 72 hour time-limit referred to in paragraph 2 of this Article shall not relieve Member States of the obligation to take and transmit the biometric data to the to the CIR. Where the condition of the fingertips does not allow the taking of fingerprints of a quality ensuring appropriate comparison under Article 26, the Member State of origin shall retake the fingerprints of persons disembarked as described in paragraph 1 of this Article, and resend them as soon as possible and no later than 48 hours after they have been successfully retaken.

5. By way of derogation from paragraph 1, where it is not possible to take the biometric data of the disembarked person on account of measures taken to ensure his or her health or the protection of public health, the Member State concerned shall take and send such biometric data as soon as possible and no later than 48 hours after those health grounds no longer prevail.

In the event of serious technical problems, Member States may extend the 72-hour time-limit in paragraph 2 by a maximum of a further 48 hours in order to carry out their national continuity plans.

6. As soon as the Member State of origin ensures that the person concerned whose data was recorded in Eurodac in accordance with paragraph 1 has left the territory of the Member States in compliance with a return decision or removal order, it shall update its data set recorded in conformity with paragraph 2 relating to the person concerned by adding the date of his or her removal or when he or she left the territory.

7. Where requested by the Member State concerned, the biometric data may also be taken and transmitted on behalf of that Member State by members of the European Border and Coast Guard Teams or experts of the asylum support teams when exercising powers and performing their tasks in accordance with Regulation(EU) 2019/1896 and Regulation (EU) XXX/XXX [EU Agency for Asylum Regulation].

8. Each data set collected and transmitted in accordance with paragraph 1 shall be linked with other sets of data corresponding to the same third country national or stateless person in a sequence as set out in Article 4(6).

9. A data set pursuant to paragraph 1 is considered created for the purpose of Article 27(1) of Regulation (EU) 818/2019 when all the data in points (a) to (f) and (h) are recorded.’;

(20) the following Chapter is inserted after Article 14a:

‘chapter iv b

information on relocation

 Article 14b

Information on the status of relocation of the data subject

1. As soon as the Member State of relocation is obliged to relocate the person concerned pursuant to Article 57(7) of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management], the benefiting Member State shall update its data set recorded pursuant to Articles 12, 13, 14 or 14a of this Regulation relating to the person concerned by adding the Member State of relocation.

2. When a person arrives in the Member State of relocation following the confirmation by the Member State of relocation to relocate the person concerned pursuant to Article 57(7) of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management], that Member State shall send a data set recorded in conformity with Articles 12 or 14 of this Regulation relating to the person concerned and shall include his or her date of arrival. The data set shall be stored in accordance with Article 17 (1) for the purpose of transmission under Articles 15 and 16.’;

(21) Article 17 is amended as follows:

(a) the following paragraph 3a is inserted:

‘3a. For the purposes laid down in Article 14a(1), each set of data relating to a third-country national or stateless person as referred to in Article 14a(2) shall be stored in the Central System and in the CIR as appropriate for five years from the date on which his or her biometric data were taken.’;

(b) paragraph 4 is replaced by the following:

‘(4). Upon expiry of the data storage periods referred to in paragraphs (1) to (3a) of this Article, the Central System shall automatically erase the data of the data-subjects shall be deleted from the Central System and from the CIR as appropriate.’;

(22) Article 19 is replaced by the following:

‘Article 19

Marking and blocking of data

1. For the purposes laid down in Article 1(1)(a), the Member State of origin which granted international protection to an applicant for international protection to a person whose data were previously recorded in the Central System and in the CIR as appropriate pursuant to Article 12 shall mark the relevant data in conformity with the requirements for electronic communication with the Central System established by eu-LISA. That mark shall be stored in the Central System in accordance with Article 17(1) for the purpose of transmission under Article 15 and 16. The Central System shall, as soon as possible and no later than 72 hours, inform all Member States of origin of the marking of data by another Member State of origin having produced a hit with data which they transmitted relating to persons referred to in Article 10(1), 13(1), or 14(1), or 14a(1). Those Member States of origin shall also mark the corresponding data sets.

2. The data of beneficiaries of international protection stored in the Central System and in the CIR as appropriate and marked pursuant to paragraph 1 of this Article shall be made available for comparison for the purposes laid down in Article 1(1)(d) for a period of three years after the date on which the data subject was granted international protection until such data is automatically erased from the Central System and from the CIR as appropriate in accordance with Article 17(4).

Where there is a hit, the Central System shall transmit the data referred to in Article 12(b) to (s) for all the data sets corresponding to the hit. The Central System shall not transmit the mark referred to in paragraph 1 of this Article. Upon the expiry of the period of three years, the Central System shall automatically block such data from being transmitted in the event of a request for comparison for the purposes laid down in Article 1(1)(c), whilst leaving those data available for comparison for the purposes laid down in Article 1(1)(a) until the point of their erasure. Blocked data shall not be transmitted, and the Central System shall return a negative result to the requesting Member State in the event of a hit.

3. The Member State of origin shall unmark or unblock data concerning a third-country national or stateless person whose data were previously marked or blocked in accordance with paragraphs 1 or 2 of this Article if his or her status is revoked or ended or the renewal of his or her status is refused under [Articles 14 or 19 of Directive 2011/95/EU] withdrawn under Articles 14 or 20 of Regulation No (EU) XXX/XXX [Qualification Regulation].

4. For the purposes laid down in Article 1(1)(a) and (c), the Member State of origin which issued granted a residence document to an illegally staying third-country national or stateless person whose data were previously recorded in the Central System and in the CIR as appropriate pursuant to Article 13 (2) and 14(2) or to a third-country national or stateless person disembarked following a search and rescue operation whose data were previously recorded in the Central System and in the CIR as appropriate pursuant to Article 14a(2) shall mark the relevant data in conformity with the requirements for electronic communication with the Central System established by eu-LISA. That mark shall be stored in the Central System in accordance with Article 17(2), and (3) and (3a) for the purpose of transmission under Article 15 and 16. The Central System shall, as soon as possible and no later than 72-hours, inform all Member States of origin of the marking of data by another Member State of origin having produced a hit with data which they transmitted relating to persons referred to in Articles 10(1), 13(1), or 14(1), or 14a(1). Those Member States of origin shall also mark the corresponding data sets.

5. The data of illegally staying third-country nationals or stateless persons stored in the Central System and in the CIR and marked pursuant to paragraph 4 of this Article shall be made available for comparison for the purposes laid down in Article 1(1)(d) until such data is automatically erased from the Central System and from the CIR in accordance with Article 17 (4).

6. For the purposes of Article 58(4) of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management], the Member State of relocation shall, following the registration of the data pursuant to Article 14b(2), register itself as the Member State responsible and mark that data with the marking introduced by the Member State who granted protection.”;

(23) in Article 21, the following paragraph is inserted:

‘1a. Where the designated authorities consulted the CIR in accordance with Article 22(1) of Regulation 2019/818, they may access Eurodac for consultation under the conditions foreseen in this Article where the reply received pursuant to Article 22(2) of Regulation (EU) 2019/818 indicates that data is stored in Eurodac.’;

(24) in Article 22, the following paragraph 1a is inserted:

‘1a. Where Europol consulted the CIR in accordance with Article 22(1) of Regulation (EU) 2019/818, they may access Eurodac for consultation under the conditions foreseen in this Article where the reply received pursuant to Article 22(2) of Regulation (EU) 2019/818 indicates that data is stored in Eurodac.’;

(25) in Article 28, the following paragraph is inserted:

‘3a. Access for the purposes of consulting the Eurodac data stored in the CIR shall be granted to the duly authorised staff of the national authorities of each Member State and to the duly authorised staff of the Union bodies competent for the purposes laid down in Articles 20 and 21 of Regulation (EU) 2019/818. That access shall be limited to the extent necessary for the performance of the tasks of those national authorities and Union bodies in accordance with those purposes and shall be proportionate to the objectives pursued.’;

(26) Article 29, is amended as follows:

(a) the following paragraphs 1a and 1b are inserted:

‘1a. For the purposes of Article 8a, eu-LISA shall keep records of each data processing operation carried out within Eurodac. Records of such type of operations shall include the elements provided for in the first paragraph and the hits triggered while carrying out the automated processing laid down in Article 20 of Regulation (EU) 2018/1240.

1b. For the purpose of Article 8c, Member States and eu-LISA shall keep records of each data processing operation carried out within Eurodac and the Visa Information System in accordance with this Article and Article 34 of Regulation (EC) 767/2008.’;

(b) paragraph 3 is replaced by the following:

‘3. For the purposes laid down in Article (1)(1)(a), and (b), (bc), (f) and (g), each Member State shall take the necessary measures in order to achieve the objectives set out in paragraphs 1, 1a, 1b and 2 of this Article in relation to its national system. In addition each Member State shall keep record of the staff duly authorised to enter or retrieve the data.’;

(27) in Article 39(2), the following point (i) is inserted:

‘(i)where relevant, a reference to the use of the European search portal to query Eurodac as referred to in Article 7(2) of the Regulation (EU) 2019/818.’;

(28) the following Chapter VIIIa is inserted after Article 40:

‘CHAPTER VIIIa

AMENDMENTS TO REGULATIONS (EU) 2018/1240 AND (EU) 2019/818

Article 40a

Amendments to Regulation (EU) 2018/1240

Regulation (EU) 2018/1240 is amended as follows:

(1) in Article 11 the following paragraph 6a is inserted:

‘6a. For the purpose of proceeding to the verifications referred to in point (k) of Article 20(2), the automated processing referred to in paragraph 1 of this Article, shall enable the ETIAS Central System to query Eurodac established by [Regulation (EU) XXX/XXX], with the data referred to in Article 17(2), points (a) to (d):

(a) surname (family name), surname at birth, first name(s) (given name(s)), date of birth, place of birth, sex, current nationality;

(b) other names (alias(es), artistic name(s), usual name(s)), if any;

(c) other nationalities (if any);

(d) type, number, the country of issue of the travel document.’;

(2) in Article 25a(1), the following point (e) is inserted:

‘(e) Articles 12, 13, 14 and 14a of Regulation (EU) XXX/XXX [Eurodac Regulation].’;

(3) in Article 88, paragraph 6 is replaced by the following:

‘6. ETIAS’ operations shall start irrespective of whether interoperability with Eurodac or ECRIS-TCN is put in place.’;

Article 40b

Amendments to Regulation (EU) 2019/818

Regulation (EU 2019/818 is amended as follows:

(1) in Article 4, point (20) is replaced by the following:

‘(20). ‘designated authorities’ means the Member State designated authorities as defined in Article 6 of the Regulation (EU) XXX/XXX [Eurodac Regulation], in point (26) of Article 3(1) of Regulation (EU) 2017/2226 of the European Parliament and the Council, in point (3a) of Article 4 of Regulation (EC) 767/2008, and point (21) of Article 3(1) of Regulation (EU) 2018/1240 of the European Parliament and of the Council;’;

(2) in paragraph 1 of Article 10, the introductory wording is replaced by the following:

‘Without prejudice to Article 39 of Regulation (EU) XXX/XXX [Eurodac Regulation], Articles 12 and 18 of Regulation (EU) 2018/1862, Article 29 of Regulation (EU) 2019/816 and Article 40 of Regulation (EU) 2016/794, eu-LISA shall keep logs of all data processing operations within the ESP. Those logs shall include, in particular, the following:’;

(3) paragraph 1 of Article 13 is amended as follows:

(a) point (b) is replaced by the following:

‘(b) the data referred to in Article 5(1), point (b), and (2) of Regulation (EU) 2019/816;’;

(b) the following point (c) is added:

’(c) the data referred to in Articles 12, points (a) and (b), 13(2), points (a) and (b), 14(2), points (a) and (b) and 14a(2), points (a) and (b) of Regulation (EU) XXX/XXX [Eurodac Regulation].’;

(4). Article 14 is replaced by the following:

‘Article 14

Searching biometric data with the shared biometric matching service

In order to search the biometric data stored within the CIR and SIS, the CIR and SIS shall use the biometric templates stored in the shared BMS. Queries with biometric data shall take place in accordance with the purposes provided for in this Regulation and in Regulations (EC) No 767/2008, (EU) 2017/2226, Regulation (EU) XXX/XXX [Eurodac Regulation], Regulations (EU) 2018/1860, (EU) 2018/1861, (EU) 2018/1862 and (EU) 2019/816.’;

(5) In Article 16, the introductory wording of paragraph 1 is replaced by the following:

‘Without prejudice to Article 39 of Regulation (EU) XXX/XXX [Eurodac Regulation], Article 12 and 18 of Regulation (EU) 2018/1862 and to Article 29 of Regulation (EU) 2019/816, eu-LISA shall keep logs of all data processing operations within the shared BMS.’;

(6) In Article 18, paragraph 1 is replaced by the following:

‘1. The CIR shall store the following data, logically separated according to the information system from which the data have originated:

a) the data referred to in Article 12, points (a) to (f), (h) and (i), Article 13(2), points (a) to (f), (h) and (i), Article 14(2), points (a) to (f), (h) and (i) and Article 14a, points (a) to (f), (h) and (i) of Regulation (EU) XXX/XXX [Eurodac Regulation];

b) the data referred to in Article 5(1), point (b), and (2) and the following data listed in Article 5(1), point (a) of Regulation (EU) 2019/816: surname (family name), first names (given names), date of birth, place of birth (town and country), nationality or nationalities, gender, previous names, if applicable, where available pseudonyms or aliases, as well as, where available, information on travel documents.’;

(7) In Article 23, paragraph 1 is replaced by the following:

‘1. The data referred to in Article 18(1), (2) and (2a) shall be deleted from the CIR in an automated manner in accordance with the data retention provisions of Regulation (EU) XXX/XXX [Eurodac Regulation] and of Regulation (EU) 2019/816.’;

(8) Article 24, is replaced by the following:

‘Article 24

Keeping of logs

Without prejudice to Article 39 of Regulation (EU) XXX/XXX [Eurodac Regulation] and Article 29 of Regulation (EU) 2019/816, eu-LISA shall keep logs of all data processing operations within the CIR in accordance with paragraphs 2, 3 and 4 of this Article.’;

(9) In Article 26(1), points (aa), (ab), (ac) and (ad) are inserted:

‘(aa)the authorities competent to assess a request for international protection when assessing a new request for international protection;

(ab)the authorities competent to collect the data provided for in Chapter III of Regulation (EU) XXX/XXX [Eurodac Regulation] when transmitting data to Eurodac;

(ac)the authorities competent to collect the data provided for in Chapter IV of Regulation (EU) XXX/XXX [Eurodac Regulation] when transmitting data to Eurodac;

(ad)the authorities competent to collect the data provided for in Chapter IVA of Regulation (EU) XXX/XXX [Eurodac Regulation] when transmitting data to Eurodac;’;

(10) Article 27 is amended as follows:

(a) the following point (aa) is inserted in paragraph 1:

‘(aa) a data set is transmitted to Eurodac in accordance with Articles 10, 13, 14 and 14a of Regulation (EU) XXX/XXX [Eurodac Regulation];’;

(b) the following point (aa) is inserted in paragraph 3:

‘(aa) surname(s); forename(s); name(s) at birth, previously used names and aliases; date of birth, place of birth, nationality(ies) and sex as referred to in Article 12 to 14a of Regulation (EU) XXX/XXX [Eurodac Regulation];’;

(11) in Article 29(1), the following point (aa) is inserted:

‘(aa) the authority assessing a request for international protection as provided for in Regulation (EU) XXX/XXX [Eurodac Regulation] for hits that occurred when assessing such request;’;

(12) in Article 39, paragraph 2 is replaced by the following:

‘2. eu-LISA shall establish, implement and host in its technical sites the CRRS containing the data and statistics referred to in Article 42(8) of Regulation (EU) XXX/XXX [Eurodac Regulation], Article 74 of Regulation (EU) 2018/1862 and Article 32 of Regulation (EU) 2019/816 logically separated by EU information system. Access to the repository CRRS shall be granted by means of controlled, secured access and specific user profiles, solely for the purpose of reporting and statistics, to the authorities referred to in Article 42(8) of Regulation (EU) XXX/XXX [Eurodac Regulation], Article 74 of Regulation (EU) 2018/1862 and Article 32 of Regulation (EU) 2019/816.’;

(13) in Article 47, the following new indent is inserted in paragraph 3:

‘Persons whose data are recorded in the Eurodac shall be informed about the processing of personal data for the purposes of this Regulation in accordance with paragraph 1 when a new data set is transmitted to Eurodac in accordance with Articles 10, 12, 13, 14 and 14a of Regulation (EU) XXX/XXX [Eurodac Regulation].’;

(14) Article 50 is replaced by the following:

‘Article 50

Communication of personal data to third countries, international organisations and

private parties

Without prejudice to Article 31 of Regulation (EC) No 767/2008, Articles 25 and 26 of Regulation (EU) 2016/794, Articles 37 and 38 of Regulation (EU) XXX/XXX [Eurodac Regulation], Article 41 of Regulation (EU) 2017/2226, Article 65 of Regulation (EU) 2018/1240 and the querying of Interpol databases through the ESP in accordance with Article 9(5) of this Regulation which comply with the provisions of Chapter V of Regulation (EU) 2018/1725 and Chapter V of Regulation (EU) 2016/679, personal data stored in, processed or accessed by the interoperability components shall not be transferred or made available to any third country, to any international organisation or to any private party.’;

(29) the following Article 41a is inserted:

Article 41a

Committee Procedure

1. The Commission shall be assisted by a committee. That committee shall be a committee within the meaning of Regulation (EU) 182/2011.

2. Where reference is made to this paragraph, Article 5 of Regulation (EU) 182/2011 shall apply.

3. Where the Committee delivers no opinion, the Commission shall not adopt the draft implementing act and the third subparagraph of Article 5(4) of Regulation (EU) 182/2011 shall apply.

This Regulation shall be binding in its entirety and directly applicable in the Member States in accordance with the Treaties.

Done at Brussels,

LEGISLATIVE FINANCIAL STATEMENT

1.FRAMEWORK OF THE PROPOSAL/INITIATIVE 

1.1.Title of the proposal/initiative 

1.2.Policy area(s) concerned (Programme cluster)

1.3.The proposal/initiative relates to: 

◻ a new action 

◻ a new action following a pilot project/preparatory action 31  

⌧ the extension of an existing action 

◻ a merger or redirection of one or more actions towards another/a new action 

1.4.Objective(s)

1.4.1.The Commission's multiannual strategic objective(s) targeted by the proposal/initiative 

1.4.2.Specific objective(s) and ABM/ABB activity(ies) concerned 

1.4.3.Expected result(s) and impact

Specify the effects which the proposal/initiative should have on the beneficiaries/groups targeted.

1.4.4.Indicators of results and impact 

Specify the indicators for monitoring implementation of the proposal/initiative.

1.5.Grounds for the proposal/initiative 

1.5.1.Requirement(s) to be met in the short or long term including a detailed timeline for roll-out of the implementation of the initiative

1.5.2.Added value of Union involvement (it may result from different factors, e.g. coordination gains, legal certainty, greater effectiveness or complementarities). For the purposes of this point 'added value of Union involvement' is the value resulting from Union intervention which is additional to the value that would have been otherwise created by Member States alone.

1.5.3.Lessons learned from similar experiences in the past

1.5.4.Compatibility and possible synergy with other appropriate instruments

1.6.Duration and financial impact 

◻ limited duration

–◻    in effect from [DD/MM]YYYY to [DD/MM]YYYY

–◻    Financial impact from YYYY to YYYY for commitment appropriations and from YYYY to YYYY for payment appropriations.

⌧ unlimited duration

–Implementation with a development phase during the first three years after adoption,

–followed by entry into operation and maintenance.

1.7.Management mode(s) planned 

◻ Direct management by the Commission

–◻ by its departments, including by its staff in the Union delegations;

–◻    by the executive agencies

◻ Shared management with the Member States

⌧ Indirect management by entrusting budget implementation tasks to:

–◻ third countries or the bodies they have designated;

–◻ international organisations and their agencies (to be specified);

–◻the EIB and the European Investment Fund;

–⌧ bodies referred to in Articles 70 and 71 of the Financial Regulation;

–◻ public law bodies;

–◻ bodies governed by private law with a public service mission to the extent that they provide adequate financial guarantees;

–◻ bodies governed by the private law of a Member State that are entrusted with the implementation of a public-private partnership and that provide adequate financial guarantees;

–◻ persons entrusted with the implementation of specific actions in the CFSP pursuant to Title V of the TEU, and identified in the relevant basic act.

–If more than one management mode is indicated, please provide details in the ‘Comments’ section.

Comments

2.MANAGEMENT MEASURES 

2.1.Monitoring and reporting rules 

Specify frequency and conditions.

2.2.Management and control system(s) 

2.2.1.Justification of the management mode(s), the funding implementation mechanism(s), the payment modalities and the control strategy proposed

2.2.2.Information concerning the risks identified and the internal control system(s) set up to mitigate them

2.2.3.Estimation and justification of the cost-effectiveness of the controls (ratio of "control costs ÷ value of the related funds managed"), and assessment of the expected levels of risk of error (at payment & at closure) 

2.3.Measures to prevent fraud and irregularities 

Specify existing or envisaged prevention and protection measures, e.g. from the Anti-Fraud Strategy.

3.ESTIMATED FINANCIAL IMPACT OF THE PROPOSAL/INITIATIVE 

3.1.Heading of the multiannual financial framework and new expenditure budget line(s) proposed 

   * eu-LISA receives contributions from the countries associated with the Schengen Agreement (NO, IS, CH, LI)

3.2.Estimated impact on expenditure 

3.2.1.Summary of estimated impact on expenditure 

EUR million (to three decimal places)

This section should be filled in using the 'budget data of an administrative nature' to be firstly introduced in the Annex to the Legislative Financial Statement , which is uploaded to DECIDE for interservice consultation purposes.

EUR million (to three decimal places)

EUR million (to three decimal places)

There is no Europol related costs since the costs related to the Europol Access Point shall be borne by Europol.

3.2.2.Estimated impact on eu-LISA's appropriations - outputs table

–◻    The proposal/initiative does not require the use of operational appropriations

–⌧    The proposal/initiative requires the use of operational appropriations, as explained below:

Commitment appropriations in EUR million (to three decimal places)

3.2.3.Summary of estimated impact on appropriations of an administrative nature

(1)The proposal/initiative does not require the use of appropriations of an administrative nature

(2)The proposal/initiative requires the use of appropriations of an administrative nature, as explained below:

EUR million (to three decimal places)

The appropriations required for human resources and other expenditure of an administrative nature will be met by appropriations from the DG that are already assigned to management of the action and/or have been redeployed within the DG, together if necessary with any additional allocation which may be granted to the managing DG under the annual allocation procedure and in the light of budgetary constraints.

3.2.3.1.Estimated requirements of human resources

(1)The proposal/initiative does not require the use of human resources.

(2)The proposal/initiative requires the use of human resources, as explained below:

Estimate to be expressed in full time equivalent units

The human resources required will be met by staff from the DG who are already assigned to management of the action and/or have been redeployed within the DG, together if necessary with any additional allocation which may be granted to the managing DG under the annual allocation procedure and in the light of budgetary constraints.

Description of tasks to be carried out:

Estimated impact on the staff (additional FTE) – establishment plan of eu-LISA

Recruitment is planned for January 2021. All staff must be available as of early 2021 to start the development in due time and ensure the entry into operations of Eurodac in 2021. The 2 new Temporary Agents (TAs) are needed to cover needs both for the project implementation as well as for operational support and maintenance after deployment to production. These resources will be used:

·To support the project implementation as project team members, including activities as: the definition of requirements and technical specifications, cooperation and support to MS during the implementation, updates of the Interface Control Document (ICD), the follow-up of the contractual deliveries, project testing activities (including MS test coordination), documentation delivery and updates etc.

·To support transition activities for putting the system into operations in cooperation with the contractor (releases follow-up, operational process updates, trainings (including MS training activities) etc.

·To support the longer term activities, definition of specifications, contractual preparations in case there is reengineering of the system (e.g. due to Image recognition) or in case the new Eurodac Maintenance in Working Order (MWO) contract will need to be amended to cover additional changes (from technical and budgetary perspective)

·To enforce the second level support following Entry into Operation (EiO), during continuous maintenance and operations.

The two new resources (FTE TA) will act on top of the internal team capabilities which will be as well utilised for the project/contractual and financial follow-up/ operational activities. The use of TAs will provide adequate duration and continuity of the contracts to ensure business continuity and use of the same specialized people for operational support activities after the project conclusion. On top the operational support activities require access to Production environment that cannot be assigned to contractors or external staff.

3.2.4.Third-party contributions 

The proposal/initiative:

(1)does not provide for co-financing by third parties

(2)provides for the co-financing by third parties estimated below:

Appropriations in EUR million (to three decimal places)

3.3.Estimated impact on revenue 

(1)The proposal/initiative has no financial impact on revenue.

(2)The proposal/initiative has the following financial impact:

◻    on own resources

⌧    on other revenue

please indicate, if the revenue is assigned to expenditure lines    

⌧ Respective expenditure line in eu-LISA budget

EUR million (to three decimal places)

For assigned revenue, specify the budget expenditure line(s) affected.

[…]

Other remarks (e.g. method/formula used for calculating the impact on revenue or any other information). 

Eu-LISA shall receive contributions from countries associated with the Eurodac related measures as laid down in the respective agreements *.

The calculation shall be based on calculations for revenues for the implementation of the Eurodac system from the States that currently contribute to the general budget of the European Union (consumed payments) an annual sum for the relevant financial year, calculated in accordance with its gross domestic product as a percentage of the gross domestic product of all the participating States. Since the consumed payments are known only a posteriori, amounts for relevant years will be known only a posteriori, hence we put p.m. instead of actual amounts. Actual amounts should be based on EUROSTAT data and may vary according to the economic situation of the participating States.

* Agreement between the European Community and the Republic of Iceland and the Kingdom of Norway concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Iceland or Norway (OJ L 93, 3.4.2001, p. 40).

Agreement between the European Community and the Swiss Confederation concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Switzerland (OJ L 53, 27.2.2008, p. 5).

Protocol between the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Community and the Swiss Confederation concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Switzerland (OJ L 160 18.6.2011 p. 39)

Protocol between the European Community, the Swiss Confederation and the Principality of Liechtenstein to the Agreement between the European Community and the Swiss Confederation concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Switzerland (2006/0257 CNS, concluded on 24.10.2008, publication in OJ pending) and Protocol to the Agreement between the Community, Republic of Iceland and the Kingdom of Norway concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State, Iceland and Norway (OJ L 93, 3.4.2001).

(1)    OJ L […], […], p. […].

(2)    OJ L […], […], p. […].

(3)    OJ L […], […], p. […].

(4)    OJ L […], […], p. […].

(5)    Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA, OJ L 135, 22.5.2019, p. 27-84

(6)    Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum and migration and amending Regulations (EU) 2018/1726, (EU) 2018/1862 and (EU) 2019/816, OJ L 135, 22.5.2019, p. 85–135

(7)    Last subparagraph of Art. 79 of Regulation (EU) 2019/817, last subparagraph of Art. 75 of Regulation (EU) 2019/818.

(8)    Agreement between the European Community and the Kingdom of Denmark on the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in Denmark or any other Member State of the European Union and “Eurodac” for the comparison of fingerprints for the effective application of the Dublin Convention, OJ L 66, 8.3.2006, p.37

(9)    Agreement between the European Community and the Republic of Iceland and the Kingdom of Norway concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Iceland or Norway, OJ L 93, 3.4.2001, p. 40.

(10)    Agreement between the European Community and the Swiss Confederation concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Switzerland, OJ L 53, 27.2.2008, p. 5.

(11)    Protocol between the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Community and the Swiss Confederation concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Switzerland, OJ L 160 18.6.2011 p. 39.

(12)    Protocol between the European Community, the Swiss Confederation and the Principality of Liechtenstein to the Agreement between the European Community and the Swiss Confederation concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State or in Switzerland (2006/0257 CNS, concluded on 24.10.2008, OJ L 161, 24.6.2009, p. 8) and Protocol to the Agreement between the Community, Republic of Iceland and the Kingdom of Norway concerning the criteria and mechanisms for establishing the State responsible for examining a request for asylum lodged in a Member State, Iceland and Norway (OJ L 93, 3.4.2001).

(13)    See for example the EASO’s report on secondary movements (not public).

(14)    The Initiative for Children in Migration called for a common approach to address the issue of missing (unaccompanied and separated) children, to establish effective mechanisms to tackle the risks of trafficking, and the adoption of child-specific standards for asylum procedures.

(15)    For example, Berlin Action Plan on a new European Asylum Policy, 25 November 2019, signed by 33 organisations and municipalities.

(16)    UNHCR Recommendations for the European Commission’s proposed Pact on Migration and Asylum, January 2020.

(17)    IOM Recommendations for the new European Union Pact on Migration and Asylum, February 2020.

(18)    CEPS Project Report, Search and rescue, disembarkation and relocation arrangements in the Mediterranean. Sailing Away from Responsibility?, June 2019.

(19)    EUI Policy Brief, Migration policy scoreboard: A Monitoring Mechanism for EU Asylum and Migration policy, March 2020

(20)    All studies and reports of the European Migration Network are available at: https://ec.europa.eu/home-affairs/what-we-do/networks/european_migration_network_en.

(21)    Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA (OJ L 135, 22.5.2019, p. 27) and Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum and migration and amending Regulations (EU) 2018/1726, (EU) 2018/1862 and (EU) 2019/816 (OJ L 135, 22.5.2019, p.85).

(22)    Adopted in Hamburg, Germany on 27 April 1979.

(23)    Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation), OJ L 218, 13.8.2008, p. 60–81.

(24)    Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226, OJ L 236, 19.9.2018, p. 1–71.

(25)    Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA, OJ L 135, 22.5.2019, p. 27-84

(26)    Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum and migration and amending Regulations (EU) 2018/1726, (EU) 2018/1862 and (EU) 2019/816, OJ L 135, 22.5.2019, p. 85–135

(27)    Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226, OJ L 236, 19.9.2018, p. 1–71

(28)    Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation), OJ L 218, 13.8.2008, p. 60–81

(29)    Directive 2004/38/EC of the European Parliament and of the Council of 29 April 2004 on the right of citizens of the Union and their family members to move and reside freely within the territory of the Member States amending Regulation (EEC) No 1612/68 and repealing Directives 64/221/EEC, 68/360/EEC, 72/194/EEC, 73/148/EEC, 75/34/EEC, 75/35/EEC, 90/364/EEC, 90/365/EEC and 93/96/EEC, OJ L 158, 30.4.2004, p. 77

(30)    Regulation (EC) No 810/2009 of the European Parliament and of the Council of 13 July 2009 establishing a Community Code on Visas (Visa Code), OJ L 243, 15.9.2009, p. 1–58

(31)    As referred to in Article 58(2)(a) or (b) of the Financial Regulation.

(32)    OJ L 180, 29.6.2013, p.1

(33)    Regulation (EU) No. 604/2013 of the European Parliament and of the Council of 26 June 2013 establishing the criteria and mechanisms for determining the Member State responsible for examining an application for international protection lodged in one of the Member States by a third-country national or a stateless person (recast). OJ L 180, 29.6.2013, p31.

(34)    COM(2016) 205 final.

(35)    Regulation (EU) No 515/2014 of the European Parliament and of the Council of 16 April 2014 establishing, as part of the Internal Security Fund, the instrument for financial support for external borders and visa and repealing Decision No 574/2007/EC, OJ L150, 20.5.2014, p.143.

(36)

   Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011. Article 1.3 "The Agency shall be responsible for the operational management of the Schengen Information System (SIS II), the Visa Information System (VIS) and Eurodac. ", OJ L 295, 21.11.2018, p. 99–137.

(37)    Diff. = Differentiated appropriations / Non-diff. = Non-differentiated appropriations.

(38)    EFTA: European Free Trade Association.

(39)    Candidate countries and, where applicable, potential candidates from the Western Balkans.

(40)    All contractual costs for the functional updates are split between the first 2 years with the biggest part of the budget in the 2nd year (following acceptance).

(41)    Capacity payments is split within the 3 years as 40%, 40%, 20%

(42)    Technical and/or administrative assistance and expenditure in support of the implementation of EU programmes and/or actions (former ‘BA’ lines), indirect research, direct research.

(43)    AC= Contract Staff; AL = Local Staff; END = Seconded National Expert; INT = agency staff; JPD= Junior Professionals in Delegations.

(44)    Sub-ceiling for external staff covered by operational appropriations (former ‘BA’ lines).

(45)    As regards traditional own resources (customs duties, sugar levies), the amounts indicated must be net amounts, i.e. gross amounts after deduction of 20 % for collection costs.

EUROPEAN COMMISSION

Brussels, 23.9.2020

COM(2020) 614 final

ANNEX

to the

Amended proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

on the establishment of 'Eurodac' for the comparison of biometric data for the effective application of Regulation (EU) XXX/XXX [Regulation on Asylum and Migration Management] and of Regulation (EU) XXX/XXX [Resettlement Regulation], for identifying an illegally staying third-country national or stateless person and on requests for the comparison with Eurodac data by Member States' law enforcement authorities and Europol for law enforcement purposes and amending Regulations (EU) 2018/1240 and (EU) 2019/818

ANNEX II

Table of correspondences referred to in Article 8a

(1)    Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226, OJ L 236, 19.9.2018, p. 1.