a European search portal (ESP);

a shared biometric matching service (shared BMS);

a common identity repository (CIR);

a multiple-identity detector (MID).

to improve the effectiveness and efficiency of border checks at external borders;

to contribute to the prevention and the combating of illegal immigration;

to contribute to a high level of security within the area of freedom, security and justice of the Union including the maintenance of public security and public policy and safeguarding security in the territories of the Member States;

to improve the implementation of the common visa policy;

to assist in the examination of applications for international protection;

to contribute to the prevention, detection and investigation of terrorist offences and of other serious criminal offences;

to facilitate the identification of unknown persons who are unable to identify themselves or unidentified human remains in case of a natural disaster, accident or terrorist attack.

ensuring the correct identification of persons;

contributing to combating identity fraud;

improving data quality and harmonising the quality requirements for the data stored in the EU information systems while respecting the data processing requirements of the legal instruments governing the individual systems, data protection standards and principles;

facilitating and supporting technical and operational implementation by Member States of EU information systems;

strengthening, simplifying and making more uniform the data security and data protection conditions that govern the respective EU information systems, without affecting the special protection and safeguards afforded to certain categories of data;

streamlining the conditions for designated authorities' access to the EES, VIS, ETIAS and Eurodac, while ensuring necessary and proportionate conditions for that access;

supporting the purposes of the EES, VIS, ETIAS, Eurodac, SIS and ECRIS-TCN.

a central infrastructure, including a search portal enabling the simultaneous querying of the EES, VIS, ETIAS, Eurodac, SIS, ECRIS-TCN as well as of Europol data and the Interpol databases;

a secure communication channel between the ESP, Member States and Union agencies that are entitled to use the ESP;

a secure communication infrastructure between the ESP and the EES, VIS, ETIAS, Eurodac, Central SIS, ECRIS-TCN, Europol data and the Interpol databases as well as between the ESP and the central infrastructures of the CIR and the MID.

the fields of data to be used for querying;

the EU information systems, Europol data and the Interpol databases that are to be queried, those that can be queried and those that are to provide a reply to the user;

the specific data in the EU information systems, Europol data and the Interpol databases that may be queried;

the categories of data that may be provided in each reply.

the Member State or Union agency launching the query and the ESP profile used;

the date and time of the query;

the EU information systems and the Interpol databases queried.

a central infrastructure, which shall replace the central systems of the EES, VIS, SIS, Eurodac and ECRIS-TCN respectively, to the extent that it shall store biometric templates and allow searches with biometric data;

a secure communication infrastructure between the shared BMS, Central SIS and the CIR.

the data referred to in Article 16(1)(d), Article 17(1)(b) and (c) and Article 18(2)(a), (b) and (c) of Regulation (EU) 2017/2226;

the data referred to in point (6) of Article 9 of Regulation (EC) No 767/2008;

the data referred to in Article 20(2)(w) and (x), excluding data on palm prints, of Regulation (EU) 2018/1861;

the data referred to in Article 4(1)(u) and (v), excluding data on palm prints, of Regulation (EU) 2018/1860.

the Member State or Union agency launching the query;

the history of the creation and storage of biometric templates;

the EU information systems queried with the biometric templates stored in the shared BMS;

the date and time of the query;

the type of biometric data used to launch the query;

the results of the query and date and time of the result.

a central infrastructure that shall replace the central systems of respectively the EES, VIS, ETIAS, Eurodac and ECRIS-TCN to the extent that it shall store the data referred to in Article 18;

a secure communication channel between the CIR, Member States and Union agencies that are entitled to use the CIR in accordance with Union law and national law;

a secure communication infrastructure between the CIR and the EES, VIS, ETIAS, Eurodac and ECRIS-TCN as well as with the central infrastructures of the ESP, the shared BMS and the MID.

the data referred to in Article 16(1)(a) to (d), Article 17(1)(a), (b) and (c) and Article 18(1) and (2) of Regulation (EU) 2017/2226;

the data referred to in points (4)(a) to (c), (5) and (6) of Article 9 of Regulation (EC) No 767/2008;

the data referred to in Article 17(2)(a) to (e) of Regulation (EU) 2018/1240;

where a police authority is unable to identify a person due to the lack of a travel document or another credible document proving that person's identity;

where there are doubts about the identity data provided by a person;

where there are doubts as to the authenticity of the travel document or another credible document provided by a person;

where there are doubts as to the identity of the holder of a travel document or of another credible document; or

where a person is unable or refuses to cooperate.

the Member State or Union agency launching the query;

the purpose of access of the user querying via the CIR;

the date and time of the query;

the type of data used to launch the query;

the results of the query.

the Member State or Union agency launching the query;

the purpose of access of the user querying via the CIR;

the date and time of the query;

where a link is created, the data used to launch the query and the results of the query indicating the EU information system from which the data were received.

the date and time of the query;

the data used to launch the query;

the results of the query;

the Member State or Union agency querying the CIR.

a central infrastructure, storing links and references to EU information systems;

a secure communication infrastructure to connect the MID with SIS and the central infrastructures of the ESP and the CIR.

competent authorities designated in accordance with Article 9(2) of Regulation (EU) 2017/2226 when creating or updating an individual file in the EES in accordance with Article 14 of that Regulation;

the visa authorities referred to in Article 6(1) of Regulation (EC) No 767/2008 when creating or updating an application file in VIS in accordance with that Regulation;

the ETIAS Central Unit and the ETIAS National Units when carrying out the processing referred to in Articles 22 and 26 of Regulation (EU) 2018/1240;

the SIRENE Bureau of the Member State creating or updating a SIS alert in accordance with Regulations (EU) 2018/1860 and (EU) 2018/1861.

an individual file is created or updated in the EES in accordance with Article 14 of Regulation (EU) 2017/2226;

an application file is created or updated in VIS in accordance with Regulation (EC) No 767/2008;

an application file is created or updated in ETIAS in accordance with Article 19 of Regulation (EU) 2018/1240;

an alert on a person is created or updated in SIS in accordance with Article 3 of Regulation (EU) 2018/1860 and Chapter V of Regulation (EU) 2018/1861.

surname (family name); first name or names (given names); date of birth; nationality or nationalities; and sex; as referred to in Articles 16(1)(a), 17(1) and 18(1) of Regulation (EU) 2017/2226;

surname (family name); first name or names (given names); date of birth; sex; place and country of birth; and nationalities; as referred to in point (4)(a) and (aa) of Article 9 of Regulation (EC) No 767/2008;

surname (family name), first name(s) (given name(s)), surname at birth; alias(es); date of birth, place of birth, sex and current nationality; as referred to in Article 17(2) of Regulation (EU) 2018/1240;

surnames, forenames, names at birth, previously used names and aliases, place of birth, date of birth, gender and any nationalities held, as referred to in Article 20(2) of Regulation (EU) 2018/1861;

surnames, forenames, names at birth, previously used names and aliases, place of birth, date of birth, gender and any nationalities held, as referred to in Article 4 of Regulation (EU) 2018/1860.

the competent authority designated in accordance with Article 9(2) of Regulation (EU) 2017/2226 for matches that occurred when creating or updating an individual file in the EES in accordance with that Regulation;

the visa authorities referred to in Article 6(1) of Regulation (EC) No 767/2008 for matches that occurred when creating or updating an application file in VIS in accordance with that Regulation;

the ETIAS Central Unit and the ETIAS National Units for matches that occurred when creating or updating an application file in accordance with Regulation (EU) 2018/1240;

the SIRENE Bureau of the Member State for matches that occurred when creating or updating a SIS alert in accordance with Regulations (EU) 2018/1860 and (EU) 2018/1861.

in respect of persons wanted for arrest for surrender or extradition purposes referred to in Article 26 of Regulation (EU) 2018/1862;

on missing or vulnerable persons referred to in Article 32 of Regulation (EU) 2018/1862;

on persons sought to assist with a judicial procedure referred to in Article 34 of Regulation (EU) 2018/1862;

on persons for discreet checks, inquiry checks or specific checks referred to in Article 36 of Regulation (EU) 2018/1862.

the linked data share the same biometric data but have similar or different identity data;

the linked data have different identity data but share the same travel document data, and at least one of the EU information systems does not contain biometric data on the person concerned;

the linked data share the same identity data but have different biometric data;

the linked data have similar or different identity data, and share the same travel document data, but have different biometric data.

the linked data have different biometric data but share the same identity data and the authority responsible for the manual verification of different identities has concluded that the linked data refer to two different persons;

the linked data have different biometric data, have similar or different identity data, share the same travel document data and the authority responsible for the manual verification of different identities has concluded that the linked data refer to two different persons;

the linked data have different identity data but share the same travel document data, at least one of the EU information systems does not contain biometric data on the person concerned and the authority responsible for the manual verification of different identities has concluded that the linked data refer to two different persons.

the linked data share the same biometric data but have similar or different identity data and the authority responsible for the manual verification of different identities has concluded that the linked data refer to the same person in an unjustified manner;

the linked data have the same, similar or different identity data and the same travel document data, but different biometric data and the authority responsible for the manual verification of different identities has concluded that the linked data refer to two different persons, at least one of whom is using the same travel document in an unjustified manner;

the linked data share the same identity data, but have different biometric data and different or no travel document data and the authority responsible for the manual verification of different identities has concluded that the linked data refer to two different persons in an unjustified manner;

the linked data have different identity data, but share the same travel document data, at least one of the EU information systems does not contain biometric data on the person concerned and the authority responsible for the manual verification of different identities has concluded that the linked data refer to the same person in an unjustified manner.

where the link relates to one of the SIS alerts referred to in Article 29(2), immediately inform the relevant SIRENE Bureau of the Member State that created the SIS alert;

in all other cases, either rectify or erase the link from the MID immediately.

the linked data share the same biometric data and the same or similar identity data;

the linked data share the same or similar identity data, the same travel document data, and at least one of the EU information systems does not have biometric data on the person concerned;

the linked data share the same biometric data, the same travel document data and similar identity data;

the linked data share the same biometric data but have similar or different identity data and the authority responsible for the manual verification of different identities has concluded that linked data refer to the same person in a justified manner.

the Member State launching the query;

the purpose of user's access;

the date and time of the query;

the type of data used to launch the query;

the reference to the linked data;

the history of the identity confirmation file.

the tools necessary for anonymising data;

a central infrastructure, consisting of a data repository of anonymous data;

a secure communication infrastructure to connect the CRRS to the EES, VIS, ETIAS and SIS, as well as the central infrastructures of the shared BMS, the CIR and the MID.

the European Border and Coast Guard Agency shall be a data controller within the meaning of point (8) of Article 3 of Regulation (EU) 2018/1725 in relation to the processing of personal data by the ETIAS Central Unit;

the Member State authorities adding or modifying the data in the identity confirmation file shall be controllers in accordance with point (7) of Article 4 of Regulation (EU) 2016/679 or point (8) of Article 3 of Directive (EU) 2016/680 and shall have responsibility for the processing of the personal data in the MID.

physically protect data, including by making contingency plans for the protection of critical infrastructure;

deny unauthorised persons access to data-processing equipment and installations;

prevent the unauthorised reading, copying, modification or removal of data media;

prevent the unauthorised input of data and the unauthorised inspection, modification or deletion of recorded personal data;

prevent the unauthorised processing of data and any unauthorised copying, modification or deletion of data;

prevent the use of automated data-processing systems by unauthorised persons using data communication equipment;

ensure that persons authorised to access the interoperability components have access only to the data covered by their access authorisation, by means of individual user identities and confidential access modes only;

ensure that it is possible to verify and establish to which bodies personal data may be transmitted using data communication equipment;

ensure that it is possible to verify and establish what data have been processed in the interoperability components, when, by whom and for what purpose;

prevent the unauthorised reading, copying, modification or deletion of personal data during the transmission of personal data to or from the interoperability components or during the transport of data media, in particular by means of appropriate encryption techniques;

ensure that, in the event of interruption, installed systems can be restored to normal operation;

ensure reliability by making sure that any faults in the functioning of the interoperability components are properly reported;

monitor the effectiveness of the security measures referred to in this paragraph and take the necessary organisational measures related to internal monitoring to ensure compliance with this Regulation and to assess those security measures in the light of new technological developments.

any person or Member State that has suffered material or non-material damage as a result of an unlawful personal da processing operation or any other act incompatible with this Regulation by a Member State shall be entitled to receive compensation from that Member State;

any person or Member State that has suffered material or non-material damage as a result of any act by Europol, the European Border and Coast Guard Agency or eu-LISA incompatible with this Regulation shall be entitled to receive compensation from the agency in question.

an individual file is created or updated in the EES in accordance with Article 14 of Regulation (EU) 2017/2226;

an application file is created or updated in VIS in accordance with Article 8 of Regulation (EC) No 767/2008;

an application file is created or updated in ETIAS in accordance with Article 19 of Regulation (EU) 2018/1240.

chairmanship;

meeting venues;

preparation of meetings;

admission of experts to the meetings;

communication plans ensuring that non-participating Members of the Management Board are kept fully informed.

the connection to the communication infrastructure of the ESP and the CIR;

the integration of the existing national systems and infrastructures with the ESP, the CIR and the MID;

the organisation, management, operation and maintenance of its existing national infrastructure and of its connection to the interoperability components;

the management of, and arrangements for, access by the duly authorised staff of the competent national authorities to the ESP, the CIR and the MID in accordance with this Regulation and the creation and regular update of a list of those staff and their profiles;

the adoption of the legislative measures referred to in Article 20(5) and (6) in order to access the CIR for identification purposes;

the manual verification of different identities referred to in Article 29;

compliance with the data quality requirements established under Union law;

compliance with the rules of each EU information system regarding the security and integrity of personal data;

remedying any deficiencies identified in the Commission's evaluation report concerning data quality referred to in Article 37(5).

the common identity repository central infrastructure as referred to in Article 17(2)(a) of Regulation (EU) 2019/817 of the European Parliament and of the Council ( *11 );

a central information system, hereinafter referred to as ‘the Central Visa Information System’ (CS-VIS);

an interface in each Member State, hereinafter referred to as the ‘National Interface’ (NI-VIS), to provide the connection to the relevant central national authority of the respective Member State;

a communication infrastructure between the Central Visa Information System and the National Interfaces;

a Secure Communication Channel between the EES Central System and the CS-VIS;

a secure communication infrastructure between the VIS Central System and the central infrastructure of the European search portal established by Article 6(1) of Regulation (EU) 2019/817 and of the common identity repository established by Article 17(1) of Regulation (EU) 2019/817.

number of queries per ESP user profile;

number of queries to each of the Interpol databases.

number of queries for the purposes of Articles 20, 21 and 22;

nationality, gender and year of birth of the person;

the type of the travel document and the three-letter code of the issuing country;

the number of searches conducted with and without biometric data.

the number of searches conducted with and without biometric data;

the number of each type of link and the EU information systems containing the linked data;

the period of time for which a yellow and red link remained in the system.

the measures referred to in Articles 8(2), 9(7) and 43(5) have been adopted;

eu-LISA has declared the successful completion of a comprehensive test of the ESP, which it has conducted in cooperation with the Member States authorities and the Union agencies that may use the ESP;

eu-LISA has validated the technical and legal arrangements to collect and transmit the data referred to in Article 8(1) and has notified them to the Commission.

the measures referred to in Articles 13(5) and 43(5) have been adopted;

eu-LISA has declared the successful completion of a comprehensive test of the shared BMS, which it has conducted in cooperation with the Member States authorities;

eu-LISA has validated the technical and legal arrangements to collect and transmit the data referred to in Article 13 and has notified them to the Commission;

eu-LISA has declared the successful completion of the test referred to in paragraph 5(b).

the measures referred to in Articles 43(5) and 78(10) have been adopted;

eu-LISA has declared the successful completion of a comprehensive test of the CIR, which it has conducted in cooperation with the Member States authorities;

eu-LISA has validated the technical and legal arrangements to collect and transmit the data referred to in Article 18 and has notified them to the Commission;

eu-LISA has declared the successful completion of the test referred to in paragraph 5(b).

the measures referred to in Articles 28(5) and (7), 32(5), 33(6), 43(5) and 49(6) have been adopted;

eu-LISA has declared the successful completion of a comprehensive test of the MID, which it has conducted in cooperation with the Member States authorities and the ETIAS Central Unit;

eu-LISA has validated the technical and legal arrangements to collect and transmit the data referred to in Article 34 and has notified them to the Commission;

the ETIAS Central Unit has notified the Commission in accordance with Article 71(3);

eu-LISA has declared the successful completion of the tests referred to in paragraphs 1(b), 2(b), 3(b) and 5(b).

the measures referred to in Articles 37(4) have been adopted;

eu-LISA has declared the successful completion of a comprehensive test of the automated data quality control mechanisms and procedures, the common data quality indicators and the minimum data quality standards, which it has conducted in cooperation with the Member States authorities.

the measures referred to in Articles 39(5) and 43(5) have been adopted;

eu-LISA has declared the successful completion of a comprehensive test of the CRRS, which it has conducted in cooperation with the Member States authorities;

eu-LISA has validated the technical and legal arrangements to collect and transmit the data referred to in Article 39 and has notified them to the Commission.

an assessment of the application of this Regulation;

an examination of the results achieved against the objectives of this Regulation and its impact on fundamental rights, including in particular an assessment of the impact of the interoperability components on the right to non-discrimination;

an assessment of the functioning of the web portal, including figures regarding the use of the web portal and the number of requests that were resolved;

an assessment of the continuing validity of the underlying rationale of the interoperability components;

an assessment of the security of the interoperability components;

an assessment of the use of the CIR for identification;

an assessment of the use of the CIR for preventing, detecting or investigating terrorist offences or other serious criminal offences;

an assessment of any implications, including any disproportionate impact on the flow of traffic at border crossing points and those with a budgetary impact on the general budget of the Union;

an assessment of the search of the Interpol databases via the ESP, including information on the number of matches against Interpol databases and information on any problems encountered.

the exact purposes of the consultations including the types of terrorist offences or other serious criminal offences;

the reasonable grounds given for a substantiated suspicion that a suspect, perpetrator or victim is covered by Regulation (EU) 2017/2226, Regulation (EC) No 767/2008 or Regulation (EU) 2018/1240;

the number of requests for access to the CIR for the purposes of preventing, detecting or investigating terrorist offences or other serious criminal offences;

the number and types of cases that have ended in successful identifications;

the need and use made of the exceptions for cases of urgency including those cases where that urgency was not accepted by the ex post verification carried out by the central access point.