02000Q3614 — MT — 23.04.2020 — 013.001


Dan it-test hu maħsub purament bħala għodda ta’ dokumentazzjoni u m’għandu l-ebda effett legali. L-istituzzjonijiet tal-Unjoni m'għandhom l-ebda responsabbiltà għall-kontenut tiegħu. Il-verżjonijiet awtentiċi tal-atti rilevanti, inklużi l-preamboli tagħhom, huma dawk ippubblikati fil-Ġurnal Uffiċjali tal-Unjoni Ewropea u disponibbli f’EUR-Lex. Dawk it-testi uffiċjali huma aċċessibbli direttament permezz tal-links inkorporati f’dan id-dokument

►B

IR-REGOLI TA' PROĊEDURA TAL-KUMMISSJONI

(K(2000) 3614)

(ĠU L 308 8.12.2000, p. 26)

Emendat bi:

 

 

Il-Ġurnal Uffiċjali

  Nru

Paġna

Data

►M1

ID-DEĊIŻJONI TAL-KUMMISSJONI 2001/844/KE, KEFA, Euratom tad-29 ta' Novembru 2001

  L 317

1

3.12.2001

 M2

Emendat bi: DEĊIŻJONI TAL-KUMMISSJONI 2005/94/KE, Euratom tat-3 ta’ Frar 2005

  L 31

66

4.2.2005

►M3

Emendat bi: DEĊIŻJONI TAL-KUMMISSJONI 2006/70/KE, Euratom tal-31 ta' Jannar 2006

  L 34

32

7.2.2006

►M4

Emendat bi: DEĊIŻJONI TAL-KUMMISSJONI 2006/548/KE, Euratom tat-2 ta' Awwissu 2006

  L 215

38

5.8.2006

►M5

ID-DEĊIŻJONI TAL-KUMMISSJONI 2001/937/KE, ECSC, Euratom tal-5 ta' Diċembru 2001

  L 345

94

29.12.2001

►M6

ID-DEĊIŻJONI TAL-KUMMISSJONI 2002/47/KE, KEFA, Euratom tat-23 ta' Jannar 2002

  L 21

23

24.1.2002

 M7

ID-DEĊIŻJONI TAL-KUMMISSJONI 2003/246/KE, Euratom tas-26 ta' Marzu 2003

  L 92

14

9.4.2003

►M8

ID-DEĊIŻJONI TAL-KUMMISSJONI 2004/563/KE, Euratom tas-7 ta' Lulju 2004

  L 251

9

27.7.2004

 M9

DEĊIŻJONI TAL-KUMMISSJONI 2005/960/KE, Euratom tal-15 ta’ Novembru 2005

  L 347

83

30.12.2005

►M10

DEĊIŻJONI TAL-KUMMISSJONI 2006/25/KE, Euratom tat-23 ta' Diċembru 2005

  L 19

20

24.1.2006

►M11

DEĊIŻJONI TAL-KUMMISSJONI 2007/65/KE tal-15 ta' Diċembru 2006

  L 32

144

6.2.2007

►M12

DEĊIŻJONI TAL-KUMMISSJONI 2008/401/KE, Euratom tat-30 ta’ April 2008

  L 140

22

30.5.2008

►M13

DEĊIŻJONI TAL-KUMMISSJONI 2010/138/UE, Euratom tal-24 ta’ Frar 2010

  L 55

60

5.3.2010

►M14

DEĊIŻJONI TAL-KUMMISSJONI 2011/737/UE, Euratom tad-9 ta’ Novembru 2011

  L 296

58

15.11.2011

►M15

DEĊIŻJONI TAL-KUMMISSJONI (UE, Euratom) 2020/555 tat-22 ta’ April 2020

  L 127I

1

22.4.2020


Ikkoreġut bi:

►C1

Rettifika, ĠU L 076M, 24.3.2009, p.  64  (94/2005)




▼B

IR-REGOLI TA' PROĊEDURA TAL-KUMMISSJONI

(K(2000) 3614)



▼M13



KAPITOLU I

IL-KUMMISSJONI

Artikolu 1

Il-prinċipju tar-responsabbiltà kollettiva

Il-Kummissjoni taġixxi bħala kulleġġ skont id-dispożizzjonijiet ta' dan ir-Regolament Intern, u fir-rispett tal-prijoritajiet li din stabbiliet fil-qafas ta' orjentazzjonijiet politiċi definiti mill-President, skont l-Artikolu 17(6), TUE.

Artikolu 2

L-orjentazzjonijiet politiċi, il-prijoritajiet, il-programm ta' ħidma u l-baġit

Fir-rispett tal-orjentazzjonijiet politiċi definiti mill-President, il-Kummissjoni tistabbilixxi l-prijoritajiet tagħha u tittraduċihom fil-programm ta' ħidma u l-abbozz tal-baġit li tadotta annwalment.

Artikolu 3

Il-President

1.  Il-President jistabbilixxi l-linji gwida politiċi li fuqhom għandha taħdem il-Kummissjoni ( 1 ). Huwa jmexxi l-ħidmiet tal-Kummissjoni sabiex jiżgura t-twettiq tagħhom.

2.  Il-President jiddeċiedi dwar l-organizzazzjoni interna tal-Kummissjoni, sabiex jiżgura li taġixxi b'mod koerenti, effikaċji u b'mod kolleġġjali ( 2 ).

Mingħajr preġudizzju għall-Artikolu 18(4) TUE, il-President jagħti lill-Membri tal-Kummissjoni oqsma ta’ attivitajiet partikolari li għalihom ikunu speċifikament responsabbli għat-tħejjija tal-ħidmiet tal-Kummissjoni u t-twettiq tad-deċiżjonijiet tagħha ( 3 ).

Il-President jista' jitlob lill-Membri tal-Kummisjsoni li jwettqu azzjonijiet speċifiċi bil-għan li tiġi żgurata l-implimentazzjoni tal-orjentazzjonijiet politiċi li stabbilixxa u l-prijoritajiet stabbiliti mill-Kummissjoni.

F’kull ħin, huwa jista’ jimmodifika dawn il-kompiti ( 4 ).

Il-Membri tal-Kummissjoni għandhom jeżerċitaw il-funzjonijiet mogħtija lilhom mill-President taħt l-awtorità tiegħu ( 5 ).

3.  Il-President jaħtar il-Viċi Presidenti, minbarra r-Rappreżentant Għoli tal-Unjoni għall-Affarijiet Barranin u l-Politika ta' Sigurtà, fost il-Membri tal-Kummissjoni ( 6 ), u jfassal l-ordni ta' preċedenza fi ħdan il-Kummissjoni.

4.  Il-President jista' jwaqqaf gruppi fost il-Membri tal-Kummissjoni billi jaħtar il-President tagħhom, jistabbilixxi l-mandat u l-modalitajiet ta' funzjonament, u jiddeċiedi dwar il-kompożizzjoni u t-terminu tagħhom.

5.  Il-President għandu jirrappreżenta lill-Kummissjoni. Huwa għandu jaħtar lill-Membri tal-Kummissjoni sabiex jassistuh f'dan il-kompitu.

6.  Bla ħsara għall-Artikolu 18(1), TUE, Membru tal-Kummissjoni għandu jippreżenta r-riżenja tiegħu jekk il-President jitolbu jagħmel dan ( 7 ).

Artikolu 4

Il-proċess tat-teħid tad-deċiżjonijiet

Id-deċiżjonijiet tal-Kummissjoni jittieħdu:

(a) 

fil-laqgħat tal-Kummissjoni bi proċedura orali skont id-dispożizzjonijiet tal-Artikolu 8 ta’ dan ir-Regolament Intern, jew

(b) 

bi proċedura bil-miktub skont id-dispożizzjonijiet tal-Artikolu 12 ta’ dan ir-Regolament Intern, jew

(c) 

bi proċedura ta’ awtorizzazzjoni skont id-dispożizzjonijiet tal-Artikolu 13 ta’ dan ir-Regolament Intern, jew

(d) 

bi proċedura ta’ delega skont id-dispożizzjonijiet tal-Artikolu 14 ta’ dan ir-Regolament Intern.



SEZZJONI 1

Il-laqgħat tal-kummissjoni

Artikolu 5

Meta tissejjaħ laqgħa

1.  Il-laqgħat tal-Kummissjoni għandhom jissejħu mill-President.

2.  B’regola ġenerali, il-Kummissjoni tiltaqa’ mill-inqas darba fil-ġimgħa. Barra minn hekk, din tiltaqa’ kull meta jkun meħtieġ.

▼M15

F’ċirkostanzi eċċezzjonali, jekk parti jew il-Membri kollha tal-Kummissjoni ma jitħallewx jattendu laqgħa tal-Kummissjoni personalment, il-President jista’ jistieden lil dawn biex jipparteċipaw permezz ta’ sistemi ta’ telekomunikazzjoni li jippermettu l-identifikazzjoni u l-parteċipazzjoni effettiva tagħhom.

▼M13

3.  Il-Membri tal-Kummissjoni huma mitluba li jattendu għal-laqgħat kollha. F'każ li ma jkunux jistgħu, għandhom jinfurmaw, fi żmien xieraq, lill-President bir-raġunijiet tal-assenza tagħhom. Il-President għandu jiddeċiedi jekk Membri għandhomx jinħelsu minn dan l-obbligu f'ċerti ċirkostanzi.

Artikolu 6

L-aġenda tal-laqgħat tal-Kummissjoni

1.  Il-President jadotta l-aġenda ta’ kull laqgħa tal-Kummissjoni.

2.  Mingħajr preġudizzju għall-prerogattiva tal-President biex jadotta l-aġenda, kull proposta li tinvolvi spiża sinifikattiva trid tkun ippreżentata bi ftehim mal-Membru tal-Kummissjoni responsabbli mill-baġit.

3.  Jekk Membru tal-Kummissjoni jipproponi ż-żieda ta’ punt fl-aġenda, il-President għandu jiġi mgħarraf kif inhu stipulat mill-Kummissjoni b’konformità mar-regoli ta’ implimentazzjoni previsti fl-Artikolu 28 ta’ dan ir-Regolament Intern, minn hawn ‘il quddiem “ir-regoli ta’ implimentazzjoni”.

4.  L-aġenda u d-dokumenti meħtieġa għandhom jitwasslu lill-Membri tal-Kummissjoni kif inhu stipulat b’konformità mar-regoli ta’ implimentazzjoni.

5.  Il-Kummissjoni, fuq proposta tal-President, tista' tiddiskuti kwistjonijiet li mhumiex fuq l-aġenda jew li fir-rigward tagħhom tqassmu tard id-dokumenti.

Artikolu 7

Il-Kworum

In-numru ta' Membri preżenti meħtieġ sabiex ikun hemm kworum għandu jkun daqs il-maġġoranza tan-numru ta' Membri speċifikata fit-Trattat.

▼M15

Meta l-President jagħmel użu mit-tieni subparagrafu tal-Artikolu 5(2), il-Membri tal-Kummissjoni li jipparteċipaw fid-deliberazzjonijiet permezz tas-sistemi ta’ telekomunikazzjoni msemmija fih għandhom jitqiesu bħala preżenti għall-finijiet tal-kworum.

▼M13

Artikolu 8

It-teħid tad-deċiżjonijiet

1.  Il-Kummissjoni għandha tieħu deċiżjonijiet abbażi ta' proposti minn wieħed jew aktar mill-Membri tagħha.

2.  Għandha ssir votazzjoni jekk din tkun mitluba minn xi Membru. Dan il-vot jirrigwarda l-abbozz inizjali jew abbozz ta' emenda mill-Membru jew Membri responsabbli għall-inizjattiva in kwistjoni jew mill-President.

3.  Id-deċiżjonijiet tal-Kummissjoni għandhom ikunu adottati jekk maġġoranza tan-numru tal-Membri, kif speċifikata fit-Trattat, jivvutaw favur.

4.  Il-President għandu jeżamina r-riżultat tad-diskussjonijiet, li għandhom jiġu mtennija fil-minuti tal-laqgħa kif inhu pprovdut fl-Artikolu 11 ta’ dan ir-Regolament Intern.

Artikolu 9

Il-kunfidenzjalità

Il-laqgħat tal-Kummissjoni m'għandhomx ikunu pubbliċi. Id-dibattiti għandhom jibqgħu kunfidenzjali.

Artikolu 10

Il-preżenza tal-uffiċjali u ta’ persuni oħra

1.  Sakemm il-Kummissjoni ma tiddeċidix xort’oħra, is-Segretarju Ġenerali u l-Kap tal-Kabinett tal-President għandhom jassistu għal-laqgħat. Ir-regoli ta’ implimentazzjoni jiddeterminaw il-kundizzjonijiet li fihom persuni oħra huma awtorizzati li jassistu għal-laqgħat.

2.  Jekk Membru tal-Kummissjoni jkun assenti, il-Kap tal-Kabinett tiegħu jista' jattendi għal-laqgħa u, fuq stedina mill-President, jista' jesprimi l-opinjoni tal-Membru assenti.

3.  Il-Kummissjoni tista’ tiddeċiedi li tisma' kull persuna oħra.

▼M15

4.  Meta l-President jagħmel użu mit-tieni subparagrafu tal-Artikolu 5(2), il-persuni msemmija fil-paragrafi 1 sa 3 ta’ hawn fuq jistgħu jattendu l-laqgħat permezz tas-sistemi tat-telekomunikazzjoni msemmija fl-imsemmi subparagrafu.

▼M13

Artikolu 11

Il-minuti

1.  Il-minuti għandhom jittieħdu f’kull laqgħa tal-Kummissjoni.

2.  L-abbozz tal-minuti huwa suġġett għall-approvazzjoni tal-Kummissjoni f’laqgħa sussegwenti. Il-minuti approvati għandhom ikunu awtentikati permezz tal-firem tal-President u tas-Segretarju Ġenerali.



SEZZJONI 2

Il-proċeduri l-oħra għat-teħid tad-deċiżjonijiet

Artikolu 12

Id-deċiżjonijiet bi proċedura bil-miktub

1.  Il-ftehim tal-Membri tal-Kummissjoni dwar abbozz minn wieħed jew aktar minnhom jista’ jinkiseb permezz ta’ proċedura bil-miktub, sakemm ikunu rċevew minn qabel l-opinjoni favorevoli tas-Servizz Legali kif ukoll il-qbil minn qabel tad-dipartimenti li jkunu ġew ikkonsultati b’mod xieraq b’konformità mal-kundizzjonijiet stipulati fl-Artikolu 23 ta’ dan ir-Regolament Intern.

Din l-opinjoni favorevoli u/jew dan il-qbil jistgħu jiġu mibdula bi ftehim bejn il-Membri tal-Kummissjoni, meta t-tnedija ta' proċedura bil-miktub ta' finalizzazzjoni hekk kif definita skont il-modalitajiet ta' applikazzjoni tiġi deċiżi f'laqgħa tal-Kulleġġ, fuq proposta tal-President.

2.  Għal dan il-għan, it-test tal-abbozz għandu jitwassal bil-kitba lill-Membri tal-Kummissjoni kollha, taħt il-kundizzjonijiet stipulati minn din, b’konformità mar-regoli ta’ implimentazzjoni, f‘limitu ta’ żmien li fih il-Membri għandhom jgħarrfu r-riżervi tagħhom jew l-emendi li jistgħu jkunu jridu jagħmlu fir-rigward tal-abbozz.

3.  Fil-proċedura bil-kitba, kull Membru tal-Kummissjoni jista’ jitlob li l-abbozz iwassal għal dibattitu. Għal dan il-għan, huwa għandu jindirizza talba motivata lill-President.

4.  Test ta’ abbozz għandu jiġi adottat mill-Kummissjoni jekk l-ebda Membru ma jkun ressaq jew ikkonferma talba għas-sospensjoni fil-limitu ta’ żmien stabbilit għall-proċedura bil-miktub.

▼M14

5.  Kull membru tal-Kummissjoni li jkun jixtieq jissospendi proċedura bil-miktub fil-qasam tal-kordinazzjoni u s-sorveljanza tal-politiki ekonomiċi u tal-baġit tal-Istati Membri, b'mod partikolari fiż-żona tal-Euro, għandu jindirizza talba motivata f'dan is-sens lill-President, liema talba għandha tindika espliċitament l-elementi tal-abbozz ta' deċiżjoni li tkun tirrigwarda, fuq il-bażi ta' evalwazzjoni imparzjali u oġġettiva tal-mument, tal-istruttura, tar-raġunament jew tar-riżultat tad-deċiżjoni proposta.

Jekk il-President iqis li din il-motivazzjoni ma tkunx fondata u jekk it-talba għal sospensjoni tinżamm, huwa jista' jiċħad is-sospensjoni u jiddeċiedi li l-proċedura bil-miktub titkompla; f'dan il-każ, is-Segretarju Ġenerali għandu jistaqsi lill-membri l-oħra tal-Kummissjoni għall-pożizzjoni tagħhom biex jiżgura li l-kworum stabbilit fl-Artikolu 250 tat-Trattat dwar il-Funzjonament tal-Unjoni Ewropea huwa rrispettat. Il-President jista' wkoll jinkludi l-punt, għall-finijiet tal-adozzjoni tiegħu, fl-aġenda tal-laqgħa li jkun imiss tal-Kummissjoni.

▼M13

Artikolu 13

Id-deċiżjonijiet bi proċedura ta’ delega

1.  Sakemm ikun rispettat għal kollox il-prinċipju tar-responsabbiltà kollettiva, il-Kummissjoni tista’ tawtorizza wieħed jew iktar mill-Membri tagħha li jieħdu miżuri ta’ mmaniġġjar u ta’ amministrazzjoni f’isimha, fil-limiti u skont il-kundizzjonijiet li tistipula.

2.  Il-Kummissjoni tista' wkoll, bil-ftehim tal-President, tagħti struzzjonijiet lil wieħed jew aktar mill-Membri tagħha sabiex jadotta t-test definittiv ta' xi strument jew ta' xi proposta li għad iridu jkunu preżentati lill-istituzzjonijiet l-oħra u li l-partijiet essenzali tagħhom kienu diġà deċiżi f'diskussjoni.

3.  Jekk id-deċiżjoni li tagħti din l-awtorizzazzjoni ma tagħmilx projbizzjoni espressa, l-awtorità mogħtija b'dan il-mod tista' tkun sottodelegata lid-Diretturi-Ġenerali u lill-Kapijiet tas-Servizzi.

4.  Id-dispożizzjonijiet tal-ewwel, it-tieni u t-tielet paragrafi għandhom japplikaw mingħajr preġudizzju għar-regoli dwar id-delega fil-qasam finanzjarju u għas-setgħat mogħtija lill-awtorità li taħtar u lill-awtorità bis-setgħa li tikkonkludi l-kuntratti tal-impjieg.

Artikolu 14

Id-deċiżjonijiet bi proċedura ta’ delega

Sakemm ikun irrispettat għal kollox il-prinċipju tar-responsabbiltà kollettiva tagħha, il-Kummissjoni tista’ tiddelega f’isimha l-adozzjoni tal-miżuri tal-ġestjoni u tal-amministrazzjoni lid-Diretturi Ġenerali u lill-Kapijiet tad-Dipartimenti, fil-limiti u skont il-kundizzjonijiet li tistipula.

Artikolu 15

Is sottodelega għad-deċiżjonijiet individwali tal-għotjiet u għotja ta’ kuntratti

Id-Direttur Ġenerali jew il-Kap tas-servizz li jkun kiseb kompetenzi sottodelegati jew delegati, f’konformità mal-Artikoli 13 u 14 għall-adozzjoni tad-deċiżjonijiet ta’ ffinanzjar, jista’ jiddeċiedi li jissottodelega t-teħid ta' ċerti deċiżjonijiet individwali ta' għotjiet jew ta' għotja ta' kuntratti lid-Direttur kompetenti jew, bi ftehim mal-Membru tal-Kummissjoni responsabbli, lill-Kap tal-Unità kompetenti, fil-limiti u l-kundizzjonijiet stipulati bir-regoli ta’ implimentazzjoni.

Artikolu 16

L-informazzjoni dwar id-deċiżjonijiet meħuda

Id-deċiżjonijiet adottati bi proċedura bil-miktub, bi proċedura ta’ delega jew bi proċedura ta’ delega għandhom jiġu rreġistrati f’nota tal-ġurnata jew ta' kull ġimgħa li għandha tiġi rreġistrata fil-minuti tal-laqgħa tal-Kummissjoni li jkun imiss.



SEZZJONI 3

Dispożizzjonijiet komuni għall-proċeduri tat-teħid tad-deċiżjonijiet

Artikolu 17

L-awtentifikazzjoni tal-atti adottati mill-Kummissjoni

1.  L-atti adottati fil-laqgħa għandhom jiġu mehmuża, fil-lingwa jew fil-lingwi awtentiċi, b’mod li ma jkunux jistgħu jiġu sseparati, ma’ nota sommarja ppreparata matul il-laqgħa tal-Kummissjoni li fiha jkunu ġew adottati. Huma għandhom ikunu awtentikati bil-firem tal-President u tas-Segretarju Ġenerali fl-aħħar paġna tan-nota sommarja.

▼M15

Meta l-President jagħmel użu mit-tieni subparagrafu tal-Artikolu 5(2), u meta ċ-ċirkostanzi ma jippermettux li tiġi ffirmata n-nota, il-kunsens espliċitu bil-miktub tal-President u s-Segretarju Ġenerali tal-Kummissjoni jistgħu eċċezzjonalment jissostitwixxu l-firma rispettiva tagħhom u għandhom jiġu mehmuża man-nota.

▼M13

2.  L-atti mhux leġiżlattivi tal-Kummissjoni imsemmijin fl-Artikolu 297(2) TFUE u adottati permezz ta' proċedura bil-miktub jiġu awtentikati permezz tal-firem tal-President u s-Segretarju Ġenerali fl-aħħar paġna tan-nota sommarja msemmija fil-paragrafu preċedenti, sakemm ma jkunx meħtieġ li dawn l-atti jiġu ppubblikati u jidħlu fis-seħħ qabel ma ssir il-laqgħa li jmiss tal-Kummissjoni. Għall-iskop ta' din l-awtentikazzjoni, kopja tal-noti tal-ġurnata msemmijin fl-Artikolu 16 ta' dan ir-Regolament Intern hija mehmuża b'mod li ma jkunux jistgħu jiġu sseparati, man-nota sommarja msemmija fil-paragrafu preċedenti.

L-atti l-oħra adottati mill-proċedura bil-miktub u l-atti adottati mill-proċedura ta’ delega f’konformità mal-Artikolu 12 u l-Artikolu 13(1) u (2), ta’ dan ir-Regolament Intern huma mehmuża fil-lingwa jew fil-lingwi awtentiċi b’mod li ma jkunux jistgħu jiġu sseparati, man-nota tal-ġurnata msemmija fl-Artikolu 16 ta’ dan ir-Regolament Intern. Dawn l-istrumenti għandhom jiġu awtentikati bil-firma tas-Segretarju Ġenerali fuq l-aħħar paġna tan-nota tal-ġurnata.

3.  L-atti adottati mill-proċedura ta’ delega jew b’sottodelega huma mehmuża fil-lingwa jew fil-lingwi awtentiċi b’mod li ma jkunux jistgħu jiġu sseparati, permezz tal-applikazzjoni informatika prevista għal dan il-għan, man-nota tal-ġurnata msemmija fl-Artikolu 16 ta' dan ir-Regolament Intern. Dawn l-atti għandhom jiġu awtentikati b’dikjarazzjoni ta’ awtoċertifikazzjoni ffirmata mill-uffiċjal sottodelegat jew delegat f’konformità mal-Artikolu 13(3), l-Artikoli 14 u 15 ta’ dan ir-Regolament Intern.

4.  Fis-sens ta' dan ir-Regolament Intern, “atti” għandha t-tifsira tal-atti li għandhom l-għamla stabbilita fl-Artikolu 288 TFUE.

5.  Għall-finijiet ta’ dan ir-Regolament Intern, “lingwi awtentiċi” tfisser il-lingwi uffiċjali kollha tal-Unjoni Ewropea, mingħajr preġudizzju lejn l-applikazzjoni tar-Regolament tal-Kunsill (KE) Nru 920/2005 ( 8 ), fejn jidħlu atti ġenerali, u għal atti oħrajn, il-lingwa ta’ min ikun qed jiġi indirizzat.



SEZZJONI 4

Il-preparazzjoni u l-eżekuzzjoni tad-deċiżjonijiet tal-kummissjoni

Artikolu 18

Il-gruppi tal-Membri tal-Kummissjoni

Il-gruppi tal-Membri tal-Kummissjoni jikkontribwixxu għall-koordinazzjoni u għall-preparazzjoni tal-ħidmiet tal-Kummissjoni skont l-orjentazzjonijiet politiċi u l-mandat definiti mill-President.

Artikolu 19

Il-kabinetti u r-relazzjonijiet mas-servizzi

1.  Il-Membri tal-Kummissjoni għandu jkollhom kabinett inkarigat li jassisti fit-twettiq tal-ħidmiet tagħhom u fil-preparazzjoni tad-deċiżjonijiet tal-Kummissjoni. Ir-regoli dwar l-għamla u l-funzjonament tal-kabinetti jitwaqqfu mill-President.

2.  Fir-rispett tal-prinċipji mwaqqfa mill-President, il-Membru tal-Kummissjoni japprova r-regoli ta' ħidma mas-servizzi li jaqgħu taħt ir-responsabbiltà tiegħu. Dawn ir-regoli jispeċifikaw partikolarment il-mod ta’ kif il-Membri tal-Kummissjoni jagħtu l-istruzzjonijiet tagħhom lis-servizzi kkonċernati, li mingħandom jirċievu b'mod regolari kull informazzjoni meħtieġa dwar il-qasam ta’ attività tagħhom biex jeżerċitaw ir-responsabbiltà tagħhom.

Artikolu 20

Is-Segretarju Ġenerali

1.  Is-Segretarju Ġenerali jgħin lill-President sabiex, fil-qafas tal-orjentazzjonijiet politiċi li ddefinixxa, il-Kummissjoni twettaq il-prijoritajiet li tkun stabbiliet.

2.  Is-Segretarju Ġenerali jikkontribwixxi biex jiżgura l-koerenza politika billi jorganizza l-koordinazzjoni meħtieġa bejn is-servizzi sa mill-bidu ta' xogħol ta' tħejjija, fost oħrajn skont id-dispożizzjonijiet tal-Artikolu 23 ta' dan ir-Regolament Intern.

Huwa jiżgura li d-dokumenti ppreżentati lill-Kummissjoni huma ta' kwalità tajba u konformi mar-regoli fil-forma u jikkontribwixxi, f'dan il-kuntest, għall-prinċipji ta' sussidjarjetà u proporzjonalità, għall-obbligi esterni, għall-kunsiderazzjonijiet interistituzzjonali u għall-istrateġija ta' komunikazzjoni tal-Kummissjoni.

3.  Is-Segretarju Ġenerali jassisti lill-President fil-preparazzjoni tal-ħidmiet u fit-tmexxija tal-laqgħat tal-Kummissjoni.

Huwa jassisti wkoll lill-presidenti tal-gruppi tal-Membri maħluqa b’konformità mal-Artikolu 3, paragrafu 4, ta’ dawn ir-Regolament Intern fil-preparazzjoni u fit-tmexxija tal-laqgħat tagħhom. Huwa jipprovdi s-segretarjat ta' dawn il-gruppi.

4.  Is-segretarju ġenerali jiżgura l-implimentazzjoni tal-proċeduri tat-teħid tad-deċiżjonijiet u jara li d-deċiżjonijiet imsemmija fl-Artikolu 4 ta’ dan ir-Regolament Intern jiġu eżegwiti.

B'mod partikolari, ħlief f'każ speċifiku, huwa jieħu l-miżuri meħtieġa biex jara li jkun hemm in-notifika u l-pubblikazzjoni f'’ll-Ġurnal Uffiċjali tal-Unjoni Ewropea tal-atti tal-Kummissjoni, kif ukoll it-tixrid ta’ dokumenti tal-Kummissjoni u tad-dipartimenti tagħha f’istituzzjonijiet oħrajn tal-Unjoni Ewropea u l-parlamenti nazzjonali.

Huwa inkarigat mid-diffużjoni ta' informazzjoni bil-miktub li l-Membri tal-Kummissjoni jixtiequ jiċċirkolaw fosthom.

5.  Is-Segretarju Ġenerali jiżgura r-relazzjonijiet uffiċjali mal-istituzzjonijiet l-oħra tal-Unjoni Ewropea, suġġett għal deċiżjonijiet tal-Kummissjoni li teżerċita xi funzjoni hija stess jew li tassenja din il-funzjoni lill-Membri jew lis-servizzi tagħha.

F'dan il-kuntest, huwa jiżgura l-koerenza ġenerali permezz ta' koordinazzjoni bejn is-servizzi matul il-ħidmiet tal-istituzzjonijiet oħrajn.

6.  Is-Segretarju Ġenerali jiżgura informazzjoni xierqa tal-Kummissjoni dwar l-istat ta' progress tal-proċeduri interni u interistituzzjonali.



KAPITOLU II

ID-DIPARTIMENTI TAL-KUMMISSJONI

Artikolu 21

L-istruttura tad-dipartimenti

Il-Kummissjoni toħloq, biex tħejji u timplimenta l-azzjoni tagħha u b'dan il-mod twettaq il-prijoritajiet u l-orjentamenti politiċi definiti mill-President, ġabra ta' servizzi, strutturati f'Direttorati Ġenerali u servizzi assimilati.

B’mod ġenerali, id-Direttorati Ġenerali u s-servizzi relatati huma mqassma f’direttorati, u d-direttorati f’unitajiet.

Artikolu 22

Il-ħolqien ta’ funzjonijiet u ta’ strutturi speċifiċi

Biex jintlaħqu ċertu bżonnijiet partikolari, il-President jista’ joħloq funzjonijiet u strutturi speċifiċi inkarigati b'missjonijiet preċiżi. Hu jiddetermina wkoll ir-responsabbiltajiet u r-regoli tal-operat tagħhom.

Artikolu 23

Il-kooperazzjoni u l-koordinazzjoni bejn id-dipartimenti

1.  Biex tkun assigurata l-effikaċja tal-Kummissjoni, is-servizzi jaħdmu f’kooperazzjoni mill-qrib u b’mod koordinat sa mill-bidu tal-preparazzjoni u l-implimentazzjoni tad-deċiżjonijiet.

2.  Id-dipartiment responsabbli mill-preparazzjoni ta’ inizjattiva jara li, sa mill-bidu tal-ħidmiet preparatorji, ikun hemm koordinazzjoni effettiva bejn id-dipartiementi kollha li għandhom interess leġittimu għal din l-inizjattiva skont il-kompetenza u tar-responsabbiltajiet jew tan-natura tal-kwistjonijiet.

3.  Qabel ma dokument jiġi sottomess lill-Kummissjoni, id-dipartiment responsabbli jipproċedi fil-ħin li hemm bżonn għall-konsultazzjonijiet tad-dipartimenti li għandhom interess leġittimu għall-abbozz, b’konformità mar-regoli ta’ implimentazzjoni.

4.  Is-Servizz Legali għandu jkun ikkonsultat dwar l-abbozzi kollha ta' u l-proposti kollha għal strumenti legali u dwar id-dokumenti kollha li jista' jkollhom implikazzjonijiet legali.

Biex tinbeda proċedura tat-teħid tad-deċiżjonijiet previsti fl-Artikoli 12, 13 u 14 ta’ dan ir-Regolament Intern, il-konsultazzjoni tas-Servizz Legali hi dejjem meħtieġa ħlief għad-deċiżjonijiet dwar l-atti standard fejn il-ftehim ikun diġà sar minn qabel (atti repetittivi). Din mhix meħtieġa għall-atti msemmija fl-Artikolu 15 ta' dan ir-Regolament Intern.

5.  Il-konsultazzjoni tas-Segretarjat Ġenerali hija obbligatorja għall-inizjattivi kollha

— 
li huma sottomessi għall-approvazzjoni permezz tal-proċedura orali, bla ħsara għall-kwistjonijiet ta' persunal ta' ambitu individwali, jew
— 
li għandhom importanza politika, jew
— 
li jidhru fil-programm ta’ ħidma annwali tal-Kummissjoni kif ukoll fl-istrument ta’ programmazzjoni fis-seħħ, jew
— 
li jikkonċernaw l-aspetti istituzzjonali, jew
— 
li huma sottomessi għall-analiżi ta’ impatt jew għal konsultazzjoni pubblika,

kif ukoll għal kull teħid ta' kariga jew inizjattiva konġunta li tista' timpenja l-Kummissjoni quddiem istituzzjonijiet jew entitajiet oħra.

▼M14

5a.  Hija obbligatorja l-konsultazzjoni mad-Direttorat Ġenerali għall-affarijiet ekonomiċi u finanzjarji fil-każ tal-inizjattivi kollha li jirrigwardaw jew li jkollhom impatt potenzjali fuq it-tkabbir, il-kompetittività jew l-istabbiltà ekonomika fl-Unjoni Ewropea jew fiż-żona tal-Euro.

▼M13

6.  Ħlief għall-atti msemmijin fl-Artikolu 15 ta' dan ir-Regolament Intern, il-konsultazzjoni tad-direzzjoni ġenerali responsabbli għall-baġit u tad-direzzjoni ġenerali responsabbli għar-riżorsi umani u s-sigurtà hija obbligatorja fuq id-dokumenti kollha li għandhom impatt eventwali rispettivament fuq il-baġit, il-finanzi, il-persunal u l-amministrazzjoni. L-istess bżonn japplika għad-dipartiment inkarigat mill-ġlieda kontra l-frodi.

7.  Id-dipartiment responsabbli għandu jara kif jistabbilixxi proposta li tiġbor il-ftehim tad-dipartimenti kkonsultati. F’każ ta’ nuqqas ta’ ftehim, dan għandu jakkumpanja l-proposta bl-opinjonijiet differenti ta’ dawn id-dipartimenti, mingħajr preġudizzju lejn id-dispożizzjonijiet tal-Artikolu 12 ta’ dan ir-Regolament Intern.



KAPITOLU III

ID-DELEGI

Artikolu 24

Kontinwità ta' servizz

Il-Membri tal-Kummissjoni u s-servizzi jiżguraw li jieħdu kull dispożizzjoni utli biex jiżguraw il-kontinwità tas-servizz, fir-rispett tad-dispożizzjonijiet imwaqqfa għal dan il-għan mill-Kummissjoni jew il-President.

Artikolu 25

Id-delegi tal-President

F’każ li l-President ma jkunx jista’ jeżerċita l-karigi tiegħu, dawn għandhom jiġu eżerċitati minn viċi-President jew minn Membru fl-ordni stabbilita mill-President.

Artikolu 26

Id-delegi tas-Segretarju Ġenerali

Id-dmirjiet tas-Segretarju Ġenerali jitwettqu, f'każ li dan ikun indispost jew jekk il-post tiegħu jkun vakanti, mid-deputat Segretarju Ġenerali preżenti li jkollu l-grad l-iktar għoli u, f'każ tal-istess grad, l-iktar anzjanità fil-grad u, f'anzjanità indaqs, l-ikbar età, jew minn uffiċjal maħtur mill-Kummissjoni.

Fin-nuqqas ta’ Deputat Segretarju Ġenerali preżenti jew ta’ uffiċjal maħtur mill-Kummissjoni, id-delega għandha tiġi eżerċitata mis-subordinat preżenti li għandu l-grupp ta' funzjoni l-iktar għoli, li għandu l-grad l-iktar għoli u, f'każ li l-grad ikun indaqs, l-ikbar anzjanità fil-grad, u f'każ tal-istess anzjanità fil-grad, l-iktar anzjan fiż-żmien.

Artikolu 27

Id-delegati tas-superjuri ġerarkiċi

1.  Id-dmirjiet tad-Direttur Ġenerali jitwettqu, f'każ li dan ikun indispost jew jekk il-post tiegħu jkun vakanti, mid-deputat Direttur Ġenerali preżenti li jkollu l-grad l-iktar għoli u, f'każ tal-istess grad, l-iktar anzjanità fil-grad u, f'anzjanità indaqs, l-ikbar età, jew minn uffiċjal maħtur mill-Kummissjoni.

Fin-nuqqas ta’ Deputat Direttur Ġenerali preżenti jew ta’ uffiċjal maħtur mid-Direttur-Ġenerali, id-delega għandha tiġi eżerċitata mis-subordinat preżenti li għandu l-grupp ta' funzjoni l-iktar għoli, li għandu l-grad l-iktar għoli u, f'każ li l-grad ikun indaqs, l-ikbar anzjanità fil-grad, u f'każ tal-istess anzjanità fil-grad, l-iktar anzjan fiż-żmien.

2.  Kap tal-Unità li huwa indispost jew li l-kariga tiegħu hija vakanti għandu jiġi delegat mid-Deputat Kap tal-Unità jew minn uffiċjal maħtur mid-Direttur Ġenerali.

Fin-nuqqas ta’ Deputat Kap tal-Unità preżenti jew ta’ uffiċjal maħtur mill-Kummissjoni, id-delega għandha tiġi eżerċitata mis-subordinat preżenti li għandu l-grupp ta' funzjoni l-iktar għoli, li għandu l-grad l-iktar għoli u, f'każ li l-grad ikun indaqs, l-ikbar anzjanità fil-grad, u f'każ tal-istess anzjanità fil-grad, l-iktar anzjan fiż-żmien.

3.  Jekk xi superjur ġerarkiku ieħor ma jkunx jista' jeżerċita l-kompiti tiegħu jew li l-kariga tiegħu hija vakanti, id-Direttur Ġenerali għandu jaħtar uffiċjal bi ftehim mal-Membru tal-Kummissjoni responsabbli. Fin-nuqqas ta’ tali ħatra, id-delega għandha tiġi eżerċitata mis-subordinat preżenti li għandu l-grupp ta' funzjoni l-iktar għoli, li għandu l-grad l-iktar għoli u, f'każ li l-grad ikun indaqs, l-ikbar anzjanità fil-grad, u f'każ tal-istess anzjanità fil-grad, l-iktar anzjan fiż-żmien.



KAPITOLU IV

DISPOŻIZZJONIJIET FINALI

Artikolu 28

Sakemm hemm bżonn, il-Kummissjoni tiddeċiedi dwar ir-regoli ta’ implimentazzjoni ta’ dan ir-Regolament Intern.

Il-Kummissjoni tista' tadotta miżuri supplimentari dwar kif għandha taħdem il-Kummissjoni u s-servizzi tagħha, filwaqt li tikkunsidra l-iżviluppi teknoloġiċi u informatiċi.

Artikolu 29

Din id-Deċiżjoni għandha tidħol fis-seħħ l-għada tal-pubblikazzjoni tagħha f’Il-Ġurnal Uffiċjali tal-Unjoni Ewropea.

▼B




ANNESS

KODIĊI DWAR IMĠIEBA AMMINISTRATTIVA TAJBA GĦALL-PERSUNAL TAL-KUMMISSJONI EWROPEA FIR-RELAZZJONIJIET TAGĦHOM MAL-PUBBLIKU

Servizz ta' kwalità

Il-Kummissjoni u l-persunal tagħha għandu jkollhom l-obbligu li jaqdu l-interess tal-Komunità, u fl-istess ħin, l-interess tal-pubbliku.

Il-pubbliku jistenna, b'mod leġittimu, servizz ta' kwalità u amministrazzjoni li hija trasparenti, aċċessabbli u mmexxija sewwa.

Servizz ta' kwalità jitlob illi l-Kummissjoni u l-persunal tagħha jimxu b'korteżija, b'mod oġġettiv u b'imparzjalità.

Għan

Sabiex il-Kummissjoni tkun tista' tissodisfa l-obbligu tagħha ta' imġieba amministrattiva tajba u b'mod partikolari, fir-relazzjonijiet tagħha mal-pubbliku, il-Kummissjoni tintrabat illi timxi ma' l-istandards ta' imġieba amministrattiva tajba stabbiliti f'dan il-Kodiċi u illi dawn l-istandards ħa jkunu l-gwida tagħha fil-ħidma ta' kuljum tagħha.

Kamp ta' Applikazzjoni

Dan il-Kodiċi jorbot lill-persunal kollu li jaqa' taħt ir-Regolamenti dwar il-Persunal li japplikaw għal Uffiċjali u l-Kondizzjonijiet ta' l-Impieg ta' Impjegati Oħra tal-Komunitajiet Ewropej (hawnhekk iżjed ‘il quddiem imsejjħa “Regolamenti dwar il-Persunal”) u taħt dispożizzjonijiet oħra dwar ir-relazzjonijiet bejn il-Kummissjoni u l-persunal tagħha li japplikaw għal uffiċjali u impjegati oħra tal-Komunitajiet Ewropej. Madankollu, persuni impjegati taħt kuntratt regolat mil-liġi privata, esperti issekondati mis-servizzi ċivili nazzjonali u persuni li għadhom fil-proċess ta' taħriġ, eċċ, li jaħdmu għall-Kummissjoni għandhom ikunu wkoll iggwidati minn dan il-Kodiċi fil-ħidma ta' kuljum tagħhom.

Ir-relazzjonijiet bejn il-Kummissjoni u l-persunal tagħha huma regolati esklussivament mir-Regolamenti dwar il-Persunal.

1.   PRINĊIPJI ĠENERALI

Il-Kummissjoni tirrispetta l-prinċipji ġenerali li ġejjin fir-relazzjonijiet tagħha mal-pubbliku:

Legalità

Il-Kummissjoni taġixxi skond il-liġi u tapplika r-Regoli u l-Proċeduri stabbiliti mil-leġislazzjoni Komunitarja.

L-ebda forma ta' diskriminazzjoni u trattament ugwali

Il-Kummissjoni tirrispetta l-prinċipju li ma ssir l-ebda forma ta' diskriminazzjoni u b'mod partikolari, tiggarantixxi trattament ugwali għall-membri tal-pubbliku, irrispettivament min-nazzjonalità, sess, oriġini razzjali jew etnika, reliġjon jew twemmin, diżabilità, età jew orjentazzjoni sesswali. Għaldaqstant, differenzi fit-trattament ta' każijiet simili għandhom ikunu ġustifikati speċifikament a bażi tal-karratteristiċi rilevanti tal-każ partikolari konċernat.

Proporzjonalità

Il-Kummissjoni tassigura illi l-miżuri li tieħu huma proporzjonali ma' l-iskop li tixtieq tilħaq.

B'mod partikolari, il-Kummissjoni ħa tassigura illi l-applikazzjoni ta' dan il-Kodiċi qatt ma twassal għal imposizzjoni ta' piżijiet amministrattivi jew finanzjarji li ma jkunux proporzjonali għall-vantaġġ mistenni.

Konsistenza

Il-Kummissjoni għandha tkun konsistenti fl-imġieba amministrattiva tagħha u għandha timxi skond il-prattika normali tagħha. Kull eċċezzjoni għal dan il-prinċipju għandha tkun ġustifikata.

2.   LINJI TA' GWIDA GĦAL IMĠIEBA AMMINISTRATTIVA TAJBA

Oġġettività u imparzjalità

Il-persunal għandu dejjem jaġixxi b'mod oġġettiv u imparzjali fl-interess tal-Komunità u tal-pubbliku. Huwa għandu jaġixxi b'mod indipendenti fi ħdan il-qafas politiku stabbilit mill-Kummissjoni u l-imġieba tiegħu ma għandha qatt tkun iggwidata minn interess personali jew nazzjonali jew minn pressjoni politika.

Informazzjoni dwar proċeduri amministrattivi

Meta membru tal-pubbliku jitlob informazzjoni dwar proċedura amministrattiva tal-Kummissjoni, il-persunal għandu jassigura illi din l-informazzjoni tingħata fiż-żmien stabbilit fir-rigward tal-proċedura rilevanti.

3.   INFORMAZZJONI DWAR ID-DRITTIJIET TA' PERSUNI INTERESSATI

Is-smigħ tal-persuni kollha li għandhom interess dirett

Fejn il-liġi Komunitarja tistabbilixxi illi persuni interessati għandhom jingħataw opportunità sabiex issemmgħu l-opinjonijiet tagħhom, il-persunal għandu jassigura li din l-opportunità tingħatalhom.

L-obbligu li d-deċiżjonijiet ikunu iġġustifikati

Deċiżjoni tal-Kummissjoni għandha tiddikjara b'mod ċar ir-raġunijiet għaliex ittieħdet din id-deċiżjoni u għandha tkun ikkomunikata lill-persuni u lill-partijiet konċernati.

Bħala regola ġenerali, għandha tingħata ġustifikazzjoni sħiħa għad-deċiżjonijiet. Madankollu, meta ma jkunx possibbli illi jkunu komunikati r-raġunijiet għaliex ittieħdet deċiżjoni individwali minħabba, per eżempju, in-numru kbir ta' persuni interessati f'deċiżjonijiet simili, jistgħu jingħataw tweġibiet standard. Dawn it-tweġibiet standard għandhom jinkludu r-raġunijiet prinċipali li jiġġustifikaw d-deċiżjoni meħuda. Barra minn hekk, persuna interessata li tagħmel talba espressa għal ġustifikazzjoni dettaljata għandha tingħata din il-ġustifikazzjoni dettaljata kif tkun talbet.

L-obbligu li jkunu dikjarati l-arranġamenti għall-appelli

Jekk il-liġi Komunitarja tipprovdi għad-dritt ta' appell, id-deċiżjonijiet notifikati għandhom jiddikjaraw b'mod ċar illi jista' jsir appell u għandhom jispjegaw kif jista' jsir l-appell, (l-isem u l-indirizz ta' l-uffiċċju tal-persuna jew tad-dipartiment li magħhom jrid isir l-appell u ż-żmien stabbilit sabiex ikun jista' jsir appell).

Fejn ikun approprjat, id-deċiżjonijiet għandhom jirreferu għall-possibbiltà li jinbdew proċeduri ġudizzjarji u/jew li jsir ilment lill-Ombudsman Ewropew skond l-Artikoli 230 jew 195 tat-Trattat li jistabbilixxi l-Komunità Ewropea.

4.   KIF IKUNU TRATTATI INKJESTI

Il-Kummissjoni tintrabat illi twieġeb għal inkjesti bl-aktar mod xieraq u kemm jista' jkun fil-pront.

Talbiet għal dokumenti

Jekk dokument ikun diġa pubblikat, il-persuna li tagħmel l-inkjesta għandha tkun riferuta għand l-aġenti responsabbli mill-bejgħ fl-Uffiċċju tal-Pubblikazzjonijiet Uffiċjali tal-Komunitajiet Ewropej jew għaċ-ċentri ta' dokumentazzjoni jew informazzjoni li jipprovdu aċċess b'xejn għal dokumenti, bħal per eżempju Info-Points, ċentri ta' dokumentazzjoni Ewropea, eċċ. Ħafna mid-dokumenti huma wkoll aċċessibbli faċilment permezz ta' mezzi elettroniċi.

Ir-regoli dwar l-aċċess għal dokumenti huma stabbiliti f'miżura speċifika.

Korrispondenza

Skond l-Artikolu 21 tat-Trattat li jistabbilixxi l-Komunità Ewropea, il-Kummissjoni għandha twieġeb għall-ittri fil-lingwa ta' l-ittra mibgħuta lilha, sakemm din l-ittra inkitbet f'waħda mil-lingwi uffiċjali tal-Komunità.

Risposta għal ittra indirizzata lill-Kummissjoni għandha tintbagħat fi żmien 15-il jum utli mid-data ta' meta d-dipartiment tal-Kummissjoni responsabbli jirċievi l-ittra. Ir-risposta għanda tidentifika l-persuna responsabbli mill-kwistjoni u għandha tispjega kif din il-persuna tista' tkun ikkuntattjata.

Jekk ma tkunx tista' tintbagħat risposta fi żmien 15-il jum utli, u fil-każijiet kollha fejn ir-risposta teħtieg ħidma addizzjonali, bħal konsultazzjoni bejn id-dipartimenti jew traduzzjoni, il-membru tal-persunal responsabbli għandu jibgħat risposta temporanja u fiha għandu jindika data sa' meta min bagħat l-ittra jista' jistenna li jirċievi risposta kompleta. Dan il-membru, meta jagħmel din l-indikazzjoni, għandu jqis il-ħidma addizzjonali meħtieġa u l-urġenza u l-kumplessità tal-kwistjoni.

Jekk ir-risposta ħa tkun ippreparata minn dipartiment li ma jkunx id-dipartiment li jkun irċieva l-korrispondenza inizzjali, il-persuna li tkun għamlet l-inkjesta għandha tkun mgħarrfa dwar l-isem u l-indirizz ta' l-uffiċċju tal-persuna lil min intbagħtet l-ittra.

Dawn ir-regoli ma japplikawx għal korrispondenza li b'mod raġonevoli tista' titqies bħala mhux xierqa, per eżempju minħabba li hija ripetittiva, abbużiva u/jew bla sens. F'dan il-każ il-Kummissjoni tirriserva d-dritt li ma tkomplix tikkorrispondi.

Komunikazzjoni bit-telefon

Meta jwieġeb it-telefon, il-persunal għandu jidentifika lilu nnifsu u d-dipartiment tiegħu. Huwa għandu jirritorna t-telefonati kemm jista' jkun fil-pront.

Il-persunal li jwieġeb għal inkjesti għandu jagħti informazzjoni dwar suġġetti li huma r-responsabbiltà diretta tiegħu. Fejn l-inkjesta tkun dwar suġġett li mhux ir-responsabbiltà diretta tiegħu, huwa għandu jindika lil min ċempel il-persuna xierqa li tista' twieġeb għall-inkjesta. Jekk ikun hemm bżonn, huwa għandu jgħaddi t-telefonati lis-superjur tiegħu jew jikkonsulta miegħu jew magħha qabel jagħti xi informazzjoni.

Meta l-inkjesti jkunu dwar suġġetti li għalihom il-persunal huwa direttament responsabbli, huwa għandu jistabbilixxi l-identità ta' min ikun ċempel u għandu, qabel ma jgħaddi din l-informazzjoni, jara jekk l-informazzjoni miltuba tqegħditx għad-dispożizzjoni tal-pubbliku. Jekk l-informazzjoni tkun għadha ma tqegħditx għad-dispożizzjoni tal-pubbliku, il-membru tal-persunal għandu jqis illi mhux fl-interess tal-Komunità li din l-informazzjoni tkun żvelata. F'dan il-każ, il-membru tal-persunal għandu jispjega, jew għandha tispjega, għaliex ma jistgħux jiżvelaw din l-informazzjoni. F'każijiet xierqa huwa għandu jirreferi għall-obbligu li juża diskrezzjoni kif stabbilit fl-Artikolu 17 tar-Regolamenti dwar il-Persunal.

Jekk ikun xieraq, l-persunal għandu jitlob konferma bil-miktub ta' l-inkjesta magħmula minn fuq it-telefon.

Posta elettronika

Il-persunal għandu jwieġeb għal messaġġi mibgħuta permezz tal-posta elettronika fil-pront u għandu jimxi skond il-linji ta' gwida deskritti fis-sezzjoni dwar il-komunikazzjoni bit-telefon.

Madankollu, meta l-messaġġ mibgħut permezz tal-posta elettronika huwa, min-natura tiegħu, ekwivalenti għal ittra, dan il-messaġġ għandu jkun itrattat skond il-linji ta' gwida deskritti fil-każ ta' korrispondenza normali u għandu jkun suġġett għall-istess termini perentorji.

Talbiet mill-mezzi ta' komunikazzjoni

Is-Servizz ta' l-Istampa u tal-Komunikazzjoni huwa responsabbli mill-kuntatti mal-mezzi ta' komunikazzjoni. Madankollu, meta t-talbiet għal informazzjoni mill-mezzi ta' komunikazzjoni jkunu dwar suġġetti tekniċi li jaqgħu taħt ir-responsabbiltajiet speċifiċi ttiegħu, il-persunal jista' jwieġeb għal dawn it-talbiet.

5.   PROTEZZJONI TA' DATA PERSONALI U INFORMAZZJONI KONFIDENZALI

Il-Kummissjoni u l-persunal tagħha għandhom jirrispettaw, b'mod partikolari:

— 
ir-regoli dwar il-protezzjoni tal-privatezza personali u ta' data personali,
— 
l-obbligi stabbiliti fl-Artikolu 287 tat-Trattat li jistabbilixxi l-Komunità Ewropea u b'mod partikolari dawk l-obbligi dwar is-segretezza professjonali,
— 
ir-regoli dwar segretezza f'investigazzjonijiet kriminali,
— 
il-konfidenzalità ta' kwistjonijiet li jaqgħu taħt il-kompetenza tad-diversi kumitati u organi msemmija fl-Artikolu 9 ta' u fl-Annessi II u III tar-Regolamenti dwar il-Persunal.

6.   ILMENTI

Il-Kummissjoni Ewropea

Jistgħu jsiru lmenti dwar il-possibiltà li l-prinċipji stabbiliti f'dan il-Kodiċi ma kienux rispettati. Dawn l-ilmenti jistgħu isiru direttament lis-Segretarjat Ġenerali ( 9 ) tal-Kummissjoni Ewropea. Is-Segretarjat Ġenerali għandu jibgħat l-ilment lid-dipartiment rilevanti.

Id-Direttur Ġenerali jew il-kap tad-Dipartiment għandu jwieġeb għall-ilment bil-miktub fi żmien xahrejn. Min ikun għamel l-ilment għandu xahar sabiex jibgħat applikazzjoni lis-Segretarju Ġenerali tal-Kummissjoni Ewropea li fiha jitlob illi r-riżultat ta' l-ilment ikun eżaminat mill-ġdid. Is-Segretarju Ġenerali għandu jwieġeb għal din it-talba fi żmien xahar.

L-Ombudsman Ewropew

Ilmenti jistgħu jsiru wkoll lill-Ombudsman Ewropew skond l-Artikolu 195 tat-Trattat li jistabbilixxi l-Komunità Ewropea u skond l-Istatut ta' l-Ombudsman Ewropew.

▼M1

COMMISSION PROVISIONS ON SECURITY

Whereas:

(1)

In order to develop Commission activities in areas which require a degree of confidentiality, it is appropriate to establish a comprehensive security system applicable to the Commission, the other institutions, bodies, offices and agencies established by virtue or on the basis of the EC Treaty or the Treaty on European Union, the Member States, as well as any other recipient of European Union classified information, hereafter referred to as “EU classified information”.

(2)

In order to safeguard the effectiveness of the security system thus established, the Commission will make EU classified information available only to those outside bodies which offer guarantees that they have taken all measures necessary to apply rules strictly equivalent to these provisions.

(3)

These provisions are taken without prejudice to Regulation No 3 of 31 July 1958 implementing Article 24 of the Treaty establishing the European Atomic Energy Community ( 10 ), to Council Regulation (EC) No 1588/90 of 11 June 1990 on the transmission of data subject to statistical confidentiality to the Statistical Office of the European Communities ( 11 ) and to Commission Decision C (95) 1510 final of 23 November 1995 on the protection of informatics systems.

(4)

The Commission's security system is based on the principles put forward in Council Decision 2001/264/EC of 19 March 2001 adopting the Council's security regulations ( 12 ) with a view to ensuring a smooth functioning of the decision-making process of the Union.

(5)

The Commission underlines the importance of associating, where appropriate, the other institutions with the rules and standards of confidentiality which are necessary in order to protect the interests of the Union and its Member States.

(6)

The Commission recognises the need to create its own concept of security, taking into consideration all elements of security and the specific character of the Commission as an institution.

(7)

These provisions are taken without prejudice to Article 255 of the Treaty and to Regulation (EC) No 1049/2001 of the European Parliament and of the Council of 30 May 2001 regarding public access to European Parliament, Council and Commission documents ( 13 ).

▼M3

(8)

These provisions are without prejudice to Article 286 of the Treaty and to Regulation (EC) 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data.

▼M1



Article 1

The Commission's rules on security are set out in the Annex.

Article 2

1.  The Member of the Commission responsible for security matters shall take appropriate measures to ensure that, when handling EU classified information, the rules referred to in Article 1 are respected within the Commission by Commission officials and other servants, by personnel seconded to the Commission, as well as within all Commission premises, including its Representations and Offices in the Union and its Delegations in third countries and by contractors external to the Commission.

▼M4

Meta kuntratt jew ftehim ta' għotja bejn il-Kummissjoni u kuntrattur estern jew benefiċjarju jinvolvi l-ipproċessar ta' informazzjoni kklassifikata ta' l-UE fil-bini tal-kuntrattur jew tal-benefiċjarju, il-miżuri xierqa li għandhom jittieħdu mill-imsemmi kuntrattur estern jew benefiċjarju biex jassigura li r-regoli li hemm referenza għalihom fl-Artikolu 1 huma rrispettati, meta tiġi użata informazzjoni kklassifikata ta' l-UE, għandhom ikunu parti integrali mill-kuntratt jew ftehim ta' għotja.

▼M1

2.  Member States, other institutions, bodies, offices and agencies established by virtue or on the basis of the Treaties shall be allowed to receive EU classified information on the condition that they ensure that, when EU classified information is handled, rules strictly equivalent to those referred to in Article 1 are respected within their services and premises, in particular by:

(a) 

members of Member States' permanent representations to the European Union as well as by members of national delegations attending meetings of the Commission or of its bodies, or participating in other Commission activities,

(b) 

other members of the Member States' national administrations handling EU classified information, whether they serve in the territory of the Member States or abroad,

(c) 

external contractors and seconded personnel, handling EU classified information.

Article 3

Third states, international organisations and other bodies shall be allowed to receive EU classified information on the condition that they ensure that, when such information is handled, rules strictly equivalent to those referred to in Article 1 are respected.

Article 4

In keeping with the basic principles and minimum standards of security contained in Part I of the Annex, the Member of the Commission responsible for security matters may take measures in accordance with Part II of the Annex.

Article 5

As from the date of their application, these provisions shall replace:

(a) 

Commission Decision C (94) 3282 of 30 November 1994 on the security measures applicable to classified information produced or transmitted in connection with activities of the European Union;

(b) 

Commission Decision C (99) 423 of 25 February 1999 relating to the procedures whereby officials and other employees of the European Commission may be allowed access to classified information held by the Commission.

Article 6

As from the date of application of these provisions, all classified information held by the Commission until that date, with the exception of Euratom classified information, shall:

(a) 

if created by the Commission, be considered to be reclassified “ ►C1  RESTREINT UE ◄ ” by default, unless its author decides to give it another classification by 31 January 2002. In such case the author shall inform all addressees of the document concerned;

(b) 

if created by authors outside the Commission, retain its original classification and thus be treated as EU classified information of the equivalent level, unless the author agrees to declassification or downgrading of the information.




ANNEX

RULES ON SECURITY

Contents

PART I:

BASIC PRINCIPLES AND MINIMUM STANDARDS OF SECURITY

1.

INTRODUCTION

2.

GENERAL PRINCIPLES

3.

FOUNDATIONS OF SECURITY

4.

PRINCIPLES OF INFORMATION SECURITY

4.1.

Objectives

4.2.

Definitions

4.3.

Classification

4.4.

Aims of security measures

5.

ORGANISATION OF SECURITY

5.1.

Common minimum standards

5.2.

Organisation

6.

SECURITY OF PERSONNEL

6.1.

Clearance of personnel

6.2.

Records of personnel clearances

6.3.

Security instruction of personnel

6.4.

Management responsibilities

6.5.

Security status of personnel

7.

PHYSICAL SECURITY

7.1.

Need for protection

7.2.

Checking

7.3.

Security of buildings

7.4.

Contingency plans

8.

SECURITY OF INFORMATION

9.

COUNTER-SABOTAGE AND CONTROL OF OTHER FORMS OF MALICIOUS WILFUL DAMAGE

10.

RELEASE OF CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS

PART II:

THE ORGANISATION OF SECURITY IN THE COMMISSION

11.

THE MEMBER OF THE COMMISSION RESPONSIBLE FOR SECURITY MATTERS

12.

THE COMMISSION SECURITY POLICY ADVISORY GROUP

13.

THE COMMISSION SECURITY BOARD

14.

THE ►M3  COMMISSION SECURITY DIRECTORATE ◄

15.

SECURITY INSPECTIONS

16.

CLASSIFICATIONS, SECURITY DESIGNATORS AND MARKINGS

16.1.

Levels of classification

16.2.

Security designators

16.3.

Markings

16.4.

Affixing of classification

16.5.

Affixing of security designators

17.

CLASSIFICATION MANAGEMENT

17.1.

General

17.2.

Application of classifications

17.3.

Downgrading and declassification

18.

PHYSICAL SECURITY

18.1.

General

18.2.

Security requirements

18.3.

Physical security measures

18.3.1.

Security areas

18.3.2.

Administrative area

18.3.3.

Entry and exit controls

18.3.4.

Guard patrols

18.3.5.

Security containers and strong rooms

18.3.6.

Locks

18.3.7.

Control of keys and combinations

18.3.8.

Intrusion detection devices

18.3.9.

Approved equipment

18.3.10.

Physical protection of copying and telefax machines

18.4.

Protection against overlooking and eavesdropping

18.4.1.

Overlooking

18.4.2.

Eavesdropping

18.4.3.

Introduction of electronic and recording equipment

18.5.

Technically secure areas

19.

GENERAL RULES ON THE NEED TO KNOW PRINCIPLE AND EU PERSONAL SECURITY CLEARANCES

19.1.

General

19.2.

Specific rules on access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information

19.3.

Specific rules on access to ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ information

19.4.

Specific rules on access to ►C1  RESTREINT UE ◄ information

19.5.

Transfers

19.6.

Special instructions

20.

SECURITY CLEARANCE PROCEDURE FOR COMMISSION OFFICIALS AND OTHER EMPLOYEES

21.

PREPARATION, DISTRIBUTION, TRANSMISSION, COURRIER PERSONAL SECURITY AND EXTRA COPIES OR TRANSLATIONS AND EXTRACTS OF EU CLASSIFIED DOCUMENTS

21.1.

Preparation

21.2.

Distribution

21.3.

Transmission of EU classified documents

21.3.1.

Packaging, receipts

21.3.2.

Transmission within a building or group of buildings

21.3.3.

Transmission within a country

21.3.4.

Transmission from one State to another

21.3.5.

Transmission of ►C1  RESTREINT UE ◄ documents

21.4.

Courier personnel security

21.5.

Electronic and other means of technical transmission

21.6.

Extra copies and translations of and extracts from EU classified documents

22.

EUCI REGISTRIES, MUSTERS, CHECKS, ARCHIVE STORAGE AND DESTRUCTION OF EUCI

22.1.

Local EUCI Registries

22.2.

The ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry

22.2.1.

General

22.2.2.

The Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry

22.2.3.

►C1  TRES SECRET UE/EU TOP SECRET ◄ sub-registries

22.3.

Inventories, musters and checks of EU classified documents

22.4.

Archive storage of EU classified documents

22.5.

Destruction of EU classified documents

22.6.

Destruction in emergencies

23.

SECURITY MEASURES FOR SPECIFIC MEETINGS HELD OUTSIDE THE COMMISSION PREMISES AND INVOLVING EU CLASSIFIED INFORMATION

23.1.

General

23.2.

Responsibilities

23.2.1.

The ►M3  Commission Security Directorate ◄

23.2.2.

Meeting Security Officer (MSO)

23.3

Security measures

23.3.1.

Security areas

23.3.2.

Passes

23.3.3.

Control of photographic and audio equipment

23.3.4.

Checking of briefcases, portable computers and packages

23.3.5.

Technical security

23.3.6.

Delegations' documents

23.3.7.

Safe custody of documents

23.3.8.

Inspection of offices

23.3.9.

Disposal of EU classified waste

24.

BREACHES OF SECURITY AND COMPROMISE OF EU CLASSIFIED INFORMATION

24.1.

Definitions

24.2.

Reporting breaches of security

24.3.

Legal action

25.

PROTECTION OF EU CLASSIFIED INFORMATION HANDLED IN INFORMATION TECHNOLOGY AND COMMUNICATION SYSTEMS

25.1.

Introduction

25.1.1.

General

25.1.2.

Threats to, and vulnerabilities of systems

25.1.3.

Main purpose of security measures

25.1.4.

System-specific security requirement statement (SSRS)

25.1.5.

Security modes of operation

25.2.

Definitions

25.3.

Security responsibilities

25.3.1.

General

25.3.2.

The Security accreditation authority (SAA)

25.3.3.

The INFOSEC Authority (IA)

25.3.4.

The Technical Systems Owner (TSO)

25.3.5.

The Information Owner (IO)

25.3.6.

Users

25.3.7.

INFOSEC training

25.4.

Non technical security measures

25.4.1.

Personnel security

25.4.2.

Physical security

25.4.3.

Control of access to a system

25.5.

Technical security measures

25.5.1.

Security of information

25.5.2.

Control and accountability of information

25.5.3.

Handling and control of removable computer storage media

25.5.4.

Declassification and destruction of computer storage media

25.5.5.

Communications security

25.5.6.

Installation and radiation security

25.6.

Security during handling

25.6.1.

Security operating procedures (SecOPs)

25.6.2.

Software protection/configuration management

25.6.3.

Checking for the presence of malicious software/computer viruses

25.6.4.

Maintenance

25.7.

Procurement

25.7.1.

General

25.7.2.

Accreditation

25.7.3.

Evaluation and certification

25.7.4.

Routine checking of security features for continued accreditation

25.8.

Temporary or occasional use

25.8.1.

Security of microcomputers/personal computers

25.8.2.

Use of privately-owned IT equipment for official Commission work

25.8.3.

Use of contractor-owned or nationally-supplied IT equipment for official Commission work

26.

RELEASE OF EU CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS

26.1.1.

Principles regulating the release of EU classified information

26.1.2.

Levels

26.1.3.

Security agreements

27.

STANDARDS MINIMI KOMUNI DWAR IS-SIGURTÀ INDUSTRIJALI

APPENDIĊI 1:

Paragun tal-klasssifikazzjoni tas-sigurtà nazzjonali

APPENDIX 2:

Practical classification guide

APPENDIX 3:

Guidelines for the release of EU classified information to third States or international organisations: Level 1 cooperation

APPENDIX 4:

Guidelines for the release of EU classified information to third States or international organisations: Level 2 cooperation

APPENDIX 5:

Guidelines for the release of EU classified information to third States or international organisations: Level 3 cooperation

APPENDIX 6:

List of abbreviations

PART I:   BASIC PRINCIPLES AND MINIMUM STANDARDS OF SECURITY

1.   INTRODUCTION

These provisions lay down the basic principles and minimum standards of security to be respected in an appropriate manner by the Commission in all its places of employment, as well as by all recipients of EUCI, so that security is safeguarded and each may be assured that a common standard of protection is established.

2.   GENERAL PRINCIPLES

The Commission's security policy forms an integral part of its general internal management policy and is thus based on the principles governing its general policy.

These principles include legality, transparency, accountability and subsidiarity (proportionality).

Legality indicates the need to stay strictly within the legal framework in executing security functions and the need to conform to the legal requirements. It also means that responsibilities in the domain of security have to be based on proper legal provisions. The provisions in the Staff Regulations fully apply, notably its Article 17 on the obligation of staff to exercise discretion with regard to Commission information and its Title VI on disciplinary measures. Finally it means that breaches of security within the responsibility of the Commission have to be dealt with in a manner consistent with Commission policy on disciplinary actions and with its policy on cooperation with Member States in the area of criminal justice.

Transparency indicates the need for clarity regarding all security rules and provisions, for balance between the different services and the different domains (physical security versus information protection etc.) and the need for a consistent and structured security awareness policy. It also defines a need for clear written guidelines for implementing security measures.

Accountability means that responsibilities in the domain of security will be clearly defined. Moreover it indicates the need to test regularly whether these responsibilities have been correctly executed.

Subsidiarity, or proportionality, means that security shall be organised on the lowest possible level and as close as possible to the Directorates General and services of the Commission. It also indicates that security activities shall be limited to only those elements that really need it. And finally it means that security measures shall be proportional to the interests to be protected and to the actual or potential threat to these interests, allowing for a defence which causes the least possible disruption.

3.   FOUNDATIONS OF SECURITY

The foundations of sound security are:

(a) 

Within each Member State, a national security organisation responsible for:

1. 

The collection and recording of intelligence on espionage, sabotage, terrorism and other subversive activities, and

2. 

Providing information and advice to its governments, and through it, to the Commission, on the nature of the threats to security and the means of protection against them;

(b) 

Within each Member State, and within the Commission, a technical INFOSEC authority (IA) responsible for working with the security authority concerned to provide information and advice on technical threats to security and the means for protection against them;

(c) 

Regular collaboration among government departments and the appropriate services of the European institutions to order to establish and recommend, as appropriate:

1. 

What persons, information and resources need to be protected, and

2. 

Common standards of protection;

(d) 

Close cooperation between the ►M3  Commission Security Directorate ◄ and the security services of the other European institutions and with the NATO Office of Security (NOS).

4.   PRINCIPLES OF INFORMATION SECURITY

4.1.   Objectives

Information security has the following principal objectives:

(a) 

To safeguard EU classified information (EUCI) from espionage, compromise or unauthorised disclosure;

(b) 

To safeguard EU information handled in communications and information systems and networks, against threats to its confidentiality, integrity and availability;

(c) 

To safeguard Commission premises housing EU information from sabotage and malicious wilful damage;

(d) 

In the event of failure, to assess the damage caused, limit its consequences and adopt the necessary remedial measures.

4.2.   Definitions

Throughout these rules:

(a) 

The term “EU classified information” (EUCI) means any information and material, an unauthorised disclosure of which could cause varying degrees of prejudice to EU interests, or to one or more of its Member States, whether such information originates within the EU or is received from Member States, third States or international organisations.

(b) 

The term “document” means any letter, note, minute, report, memorandum, signal/message, sketch, photograph, slide, film, map, chart, plan, notebook, stencil, carbon, typewriter or printer ribbon, tape, cassette, computer disk, CD-ROM, or other physical medium on which information has been recorded.

(c) 

The term “material” means “document” as defined in b) and also any item of equipment, either manufactured or in the process of manufacture.

(d) 

The term “need to know” means the need of an individual employee to have access to EU classified information in order to be able to perform a function or a task.

(e) 

“Authorisation” means a decision by the ►M3  Director of the Commission Security Directorate ◄ to grant an individual access to EUCI up to a specific level, on the basis of a positive result of a security screening (vetting), carried out by a National Security Authority under national law.

(f) 

The term “classification” means the allocation of an appropriate level of security to information the unauthorised disclosure of which might cause a certain degree of prejudice to Commission or to Member State interests.

(g) 

The term “downgrading” (déclassement) means a reduction in the level of classification.

(h) 

The term “declassification” (déclassification) means the removal of any classification.

(i) 

The term “originator” means the duly authorised author of a classified document. Within the Commission, Heads of departements may authorize their staff to originate EUCI.

(j) 

The term “Commission departments” means Commission departments and services, including the cabinets, in all places of employment, including Joint Research Centre, Representations and Offices in the Union and Delegations in third countries.

4.3.   Classification

(a) 

Where confidentiality is concerned, care and experience are needed in the selection of information and material to be protected and the assessment of the degree of protection it requires. It is fundamental that the degree of protection should correspond to the security criticality of the individual piece of information and material to be protected. In order to ensure the smooth flow of information, steps shall be taken to avoid both overclassification and underclassification.

(b) 

The classification system is the instrument for giving effect to these principles; a similar system of classification shall be followed in planning and organising ways to counter espionage, sabotage, terrorism and other threats so that the greatest measure of protection is given to the most important premises housing classified information and to the most sensitive points within them.

(c) 

Responsibility for classifying information lies solely with the originator of that information.

(d) 

The level of classification may solely be based on the content of that information.

(e) 

Where a number of items of information is grouped together, the classification level to be applied to the whole shall at least be as high as the highest classification. A collection of information may however be given a higher classification than its constituent parts.

(f) 

Classifications shall be assigned only when necessary and for as long as necessary.

4.4.   Aims of security measures

The security measures shall:

(a) 

Extend to all persons having access to classified information, classified information-carrying media, all premises containing such information and important installations.

(b) 

Be designed to detect persons whose position might endanger the security of classified information and important installations housing classified information and provide for their exclusion or removal.

(c) 

Prevent any unauthorised person from having access to classified information or to installations that contain it.

(d) 

Ensure that classified information is disseminated solely on the basis of the need-to-know principle that is fundamental to all aspects of security.

(e) 

Ensure the integrity (i.e. prevention of corruption or unauthorised alteration or unauthorised deletion) and the availability (i.e. access is not denied to those needing and authorised to have access) of all information, either classified or not classified, and especially of such information stored, processed or transmitted in electromagnetic form.

5.   ORGANISATION OF SECURITY

5.1.   Common minimum standards

The Commission shall ensure that common minimum standards of security are observed by all recipients of EUCI, inside the institution and under its competence, e.g. by all departments and contractors, so that EU classified information can be passed in the confidence that it will be handled with equal care. Such minimum standards shall include criteria for the clearance of personnel, and procedures for the protection of EU classified information.

The Commission shall only allow access of EUCI to outside bodies under the condition that they ensure that, when EUCI is handled, provisions at least strictly equivalent to these minimum standards are respected.

▼M4

Standards minimi bħal dawn għandhom jiġu wkoll applikati meta l-Kummissjoni tagħti kuntratt jew ftehim ta' għotja, xogħol li jinvolvi, jinkludi u/jew fih informazzjoni kklassifikata ta' l-UE dwar entitajiet industrijali jew oħrajn: dawn l-istandards minimi komuni jinsabu fit-Taqsima 27 tal-Parti II.

▼M1

5.2.   Organisation

Within the Commission security is organised on two levels:

(a) 

On the level of the Commission as a whole there is a ►M3  Commission Security Directorate ◄ with a Security Accreditation Authority (SAA) also acting as Crypto Authority (CrA) and as TEMPEST Authority, and with an INFOSEC Authority (IA) and one or more Central EUCI Registries, each with one or more Registry Control Officer (RCO).

(b) 

On the level of the Commission departments, security is the responsibility of one or more Local Security Officers (LSO), one or more Central Informatics Security Officers (CISO), Local Informatics Security Officers (LISO) and Local EU Classified Information Registries with one or more Registry Control Officers.

(c) 

The central security bodies will provide operational guidance to the local security bodies.

6.   SECURITY OF PERSONNEL

6.1.   Clearance of personnel

All persons who require access to information classified ►C1  CONFIDENTIEL UE ◄ or above shall be appropriately cleared before such access is authorised. Similar clearance shall be required in the case of persons whose duties involve the technical operation or maintenance of communication and information systems containing classified information. This clearance shall be designed to determine whether such individuals:

(a) 

Are of unquestioned loyalty;

(b) 

Are of such character and discretion as to cast no doubt upon their integrity in the handling of classified information, or

(c) 

May be vulnerable to pressure from foreign or other sources;

Particularly close scrutiny in the clearance procedures shall be given to persons:

(d) 

To be granted access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information;

(e) 

Occupying positions involving regular access to a considerable volume of ►C1  SECRET UE ◄ information;

(f) 

Whose duties give them special access to secure communication or information systems and thus the opportunity to gain unauthorised access to large amounts of EU classified information or to inflict serious damage upon the mission through acts of technical sabotage.

In the circumstances outlined in subparagraphs (d), (e) and (f), the fullest practicable use shall be made of the technique of background investigation.

When persons not having an established “need to know” are to be employed in circumstances in which they may have access to EU classified information (e.g. messengers, security agents, maintenance personnel and cleaners, etc.), they shall first be appropriately security-cleared.

6.2.   Records of personnel clearances

All Commission departments handling EU classified information or housing secure communication or information systems shall maintain a record of the clearances granted to the personnel assigned thereto. Each clearance shall be verified as the occasion demands to ensure that it is adequate for that person's current assignment; it shall be re-examined as a matter of priority whenever new information is received indicating that continued assignment on classified work is no longer consistent with the interests of security. The Local Security Officer of the Commission department shall hold record of the clearances within his or her domain.

6.3.   Security instruction of personnel

All personnel employed in positions where they could have access to classified information shall be thoroughly instructed on taking up assignment and at regular intervals in the need for security and the procedures for accomplishing it. Such personnel are required to certify in writing that they have read and fully understand the present security provisions.

6.4.   Management responsibilities

Managers shall have the duty of knowing those of their staff who are engaged in classified work or who have access to secure communication or information systems and of recording and reporting any incidents or apparent vulnerabilities, likely to have a bearing on security.

6.5.   Security status of personnel

Procedures shall be established to ensure that, when adverse information becomes known concerning an individual, it is determined whether the individual is employed on classified work or has access to secure communication or information systems, and the ►M3  Commission Security Directorate ◄ is informed. If it is established that such an individual constitutes a security risk, he or she shall be barred or removed from assignments where he or she might endanger security.

7.   PHYSICAL SECURITY

7.1.   Need for protection

The degree of physical security measures to be applied to ensure the protection of EU classified information shall be proportional to the classification, volume of and threat to the information and material held. All holders of EU classified information shall follow uniform practices regarding classification of that information and meet common standards of protection regarding custody, transmission and disposal of information and material requiring protection.

7.2.   Checking

Before leaving areas containing EU classified information unattended, persons having custody thereof shall ensure that it is securely stored and that all security devices have been activated (locks, alarms, etc.). Further independent checks shall be carried out after working hours.

7.3.   Security of buildings

Buildings housing EU classified information or secure communication and information systems shall be protected against unauthorised access. The nature of the protection afforded to EU classified information, e.g. barring of windows, locks for doors, guards at entrances, automated access control systems, security checks and patrols, alarm systems, intrusion detection systems and guard dogs, shall depend on:

(a) 

The classification, volume and location within the building of the information and material to be protected;

(b) 

The quality of the security containers for this information and material, and

(c) 

The physical nature and location of the building.

The nature of the protection afforded to communication and information systems shall similarly depend upon an assessment of the value of the assets at stake and of the potential damage if security were compromised, upon the physical nature and location of the building in which the system is housed, and upon the location of the system within the building.

7.4.   Contingency plans

Detailed plans shall be prepared in advance for the protection of classified information during a local or national emergency.

8.   SECURITY OF INFORMATION

Information security (INFOSEC) relates to the identification and application of security measures to protect EU classified information processed, stored or transmitted in communication, information and other electronic systems against loss of confidentiality, integrity or availability, whether accidental or intentional. Adequate countermeasures shall be taken in order to prevent access to EU classified information by unauthorised users, to prevent the denial of access to EU classified information to authorised users, and to prevent corruption or unauthorised modification or deletion of EU classified information.

9.   COUNTER-SABOTAGE AND CONTROL OF OTHER FORMS OF MALICIOUS WILFUL DAMAGE

Physical precautions for the protection of important installations housing classified information are the best protective security safeguards against sabotage and malicious wilful damage, and clearance of personnel alone is not an effective substitute. The competent national body shall be asked to provide intelligence regarding espionage, sabotage, terrorism and other subversive activities.

10.   RELEASE OF CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS

The decision to release EU classified information originating in the Commission to a third State or international organisation shall be taken by the Commission as a college. If the originator of the information for which release is desired is not the Commission, the Commission shall first seek the originator's consent to release. If the originator cannot be established, the Commission will assume the former's responsibility.

If the Commission receives classified information from third States, from international organisations or from other third parties, that information shall be given protection appropriate to its classification and equivalent to the standards established in these provisions for EU classified information, or such higher standards as may be required by the third party releasing the information. Mutual checks may be arranged.

The above principles shall be implemented in accordance with the detailed provisions set out in Part II, Section 26, and Appendixes 3, 4 and 5.

PART II:   THE ORGANISATION OF SECURITY IN THE COMMISSION

11.   THE MEMBER OF THE COMMISSION RESPONSIBLE FOR SECURITY MATTERS

The Member of the Commission responsible for security matters shall:

(a) 

Implement the Commission's security policy;

(b) 

Consider security problems referred to him by the Commission or its competent bodies;

(c) 

Examine questions involving changes in the Commission security policy, in close liaison with the National Security (or other appropriate) Authorities of the Member States (hereinafter “NSA”).

In particular, the Member of the Commission responsible for security matters shall be responsible for:

(a) 

Co-ordinating all matters of security relating to Commission activities;

(b) 

Addressing to the designated authorities of the Member States requests for the NSA to provide security clearances for personnel employed in the Commission in accordance with Section 20;

(c) 

Investigating or ordering an investigation into any leakage of EU classified information that, on prima facie evidence, has occurred in the Commission;

(d) 

Requesting the appropriate security authorities to initiate investigations when a leakage of EU classified information appears to have occurred outside the Commission, and co-ordinating the enquiries when more than one security authority is involved;

(e) 

Carrying out periodic examinations of the security arrangements for the protection of EU classified information;

(f) 

Maintaining close liaison with all security authorities concerned in order to achieve overall co-ordination of security;

(g) 

Keeping the Commission security policy and procedures constantly under review and, as required, preparing appropriate recommendations. In this regard, the Member of the Commission responsible for security matters shall present to the Commission the annual inspection plan prepared by the ►M3  Commission Security Directorate ◄ .

12.   THE COMMISSION SECURITY POLICY ADVISORY GROUP

A Commission Security Policy Advisory Group shall be set up. It shall consist of the Member of the Commission responsible for security matters or his/her delegate, who shall have the chair, and of representatives of the NSA of each Member State. Representatives of other European institutions may also be invited. Representatives of relevant EC and EU decentralised agencies may also be invited to attend when questions concerning them are discussed.

The Commission Security Policy Advisory Group shall meet at the request of its chair or any of its members. The Group shall have the task to examine and assess all relevant security issues, and to present recommendations to the Commission as appropriate.

▼M3

13.   THE COMMISSION SECURITY BOARD

A Commission Security Board shall be set up. It shall consist of the Director-General for Administration and Personnel, who shall have the chair, a Member of the Cabinet of the Commissioner responsible for security matters, a Member of the Cabinet of the President, the Deputy Secretary-General who chairs the Commission crisis management group, the Directors-General of the Legal Service, External Relations, Justice, Freedom and Security, the Joint Research Centre, Informatics and the Internal Audit Service and the Director of the Commission Security Directorate, or their representatives. Other Commission officials may be invited. Its remit is to assess security measures within the Commission and to make recommendations in this domain to the Member of the Commission responsible for security matters.

▼M1

14.   THE ►M3  COMMISSION SECURITY DIRECTORATE ◄

In order to fulfil the responsibilities mentioned in Section 11 the Member of the Commission responsible for security matters shall have the ►M3  Commission Security Directorate ◄ at his or her disposal for co-ordinating, supervising and implementing security measures.

The ►M3  Director of the Commission Security Directorate ◄ shall be the principal adviser to the Member of the Commission responsible for security matters on security matters and shall act as secretary to the Security Policy Advisory Group. In this regard he or she shall direct the updating of the security regulations and co-ordinate security measures with the competent authorities of the Member States and, as appropriate, with international organisations linked to the Commission by security agreements. To that effect, he/she shall act as a liaison officer.

The ►M3  Director of the Commission Security Directorate ◄ shall be responsible for the accreditation of IT systems and networks within the Commission. The ►M3  Director of the Commission Security Directorate ◄ shall decide, in agreement with the relevant NSA, on the accreditation of IT systems and networks involving the Commission on the one hand, and on the other hand any other recipient of EU classified information.

15.   SECURITY INSPECTIONS

Periodic inspections of the security arrangements for the protection of EU classified information shall be carried out by the ►M3  Commission Security Directorate ◄ .

The ►M3  Commission Security Directorate ◄ may be assisted in this task by the security services of other EU institutions holding EUCI or by Member State National Security Authorities ( 14 ).

At the request of a Member State an inspection of EUCI can be conducted by its NSA within the Commission, jointly with the ►M3  Commission Security Directorate ◄ and in mutual agreement.

16.   CLASSIFICATIONS, SECURITY DESIGNATORS AND MARKINGS

16.1.   Levels of classification ( 15 )

Information is classified at the following levels (see also, Appendix 2):

►C1  TRES SECRET UE/EU TOP SECRET ◄ : This classification shall be applied only to information and material the unauthorised disclosure of which could cause exceptionally grave prejudice to the essential interests of the European Union or of one or more of its Member States.
►C1  SECRET UE ◄ : This classification shall be applied only to information and material the unauthorised disclosure of which could seriously harm the essential interests of the European Union or of one or more of its Member States.
►C1  CONFIDENTIEL UE ◄ : This classification shall be applied to information and material the unauthorised disclosure of which could harm the essential interests of the European Union or of one or more of its Member States.
►C1  RESTREINT UE ◄ : This classification shall be applied to information and material the unauthorised disclosure of which could be disadvantageous to the interests of the European Union or of one or more of its Member States.

No other classifications are permitted.

16.2.   Security designators

To set limits to the validity of a classification (for classified information signifying automatic downgrading or declassification) an agreed security designator may be used. This designator shall either be “UNTIL …(time/date)” or “UNTIL …(event)”.

Additional security designators such as CRYPTO or any other EU-recognised security designator, shall apply where there is a need for limited distribution and special handling in addition to that designated by the security classification.

Security designators shall only be used in combination with a classification.

16.3.   Markings

A marking may be used for specifying the field covered by the document or a particular distribution on a need-to-know basis, or (for non-classified information) to signify the end of an embargo.

A marking is not a classification and must not be used in lieu of one.

The ESDP marking shall be applied to documents and copies thereof concerning the security and defence of the Union or of one or more of its Member States, or concerning military or non-military crisis management.

16.4.   Affixing of classification

Classification shall be affixed as follows:

(a) 

On ►C1  RESTREINT UE ◄ documents, by mechanical or electronic means;

(b) 

On ►C1  CONFIDENTIEL UE ◄ documents, by mechanical means or by hand or by printing on pre-stamped, registered paper;

(c) 

On ►C1  SECRET UE ◄ and ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents, by mechanical means or by hand.

16.5.   Affixing of security designators

Security designators shall be affixed directly under the classification, by the same means as those for affixing classifications.

17.   CLASSIFICATION MANAGEMENT

17.1.   General

Information shall be classified only when necessary. The classification shall be clearly and correctly indicated, and shall be maintained only as long as the information requires protection.

The responsibility for classifying information and for any subsequent downgrading or declassification rests solely with the originator.

Officials and other employees of the Commission shall classify, downgrade or declassify information on instruction from or with the agreement of their Head of department.

The detailed procedures for the treatment of classified documents have been so framed as to ensure that they are subject to protection appropriate to the information they contain.

The number of persons authorised to originate ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents shall be kept to a minimum, and their names kept on a list drawn up by the ►M3  Commission Security Directorate ◄ .

17.2.   Application of classifications

The classification of a document shall be determined by the level of sensitivity of its contents in accordance with the definition at Section 16. It is important that classification is correctly and sparingly used. This applies especially to ►C1  TRES SECRET UE/EU TOP SECRET ◄ classification.

The originator of a document that is to be given a classification shall bear in mind the rules set out above and curb any tendency to over- or under-classify.

A practical guide for the classification is contained in Appendix 2.

Individual pages, paragraphs, sections, annexes, appendices, attachments and enclosures of a given document may require different classifications and shall be classified accordingly. The classification of the document as a whole shall be that of its most highly classified part.

The classification of a letter or note covering enclosures shall be as high as the highest classification of its enclosures. The originator should indicate clearly at which level it should be classified when detached from its enclosures.

Public access shall remain governed by Regulation (EC) No 1049/2001.

17.3.   Downgrading and declassification

EU classified documents may be downgraded or declassified only with the permission of the originator, and, if necessary, after discussion with other interested parties. Downgrading or declassification shall be confirmed in writing. The originator shall be responsible for informing its addressees of the change, and they in turn shall be responsible for informing any subsequent addressees, to whom they have sent or copied the document, of the change.

If possible, originators shall specify on classified documents a date, period or event when the contents may be downgraded or declassified. Otherwise, they shall keep the documents under review every five years, at the latest, in order to ensure that the original classification is necessary.

18.   PHYSICAL SECURITY

18.1.   General

The main objectives of physical security measures are to prevent an unauthorised person from gaining access to EU classified information and/or material, to prevent theft and degradation of equipment and other property and to prevent harassment or any other type of aggression of staff, other employees and visitors.

18.2.   Security requirements

All premises, areas, buildings, rooms, communication and information systems, etc. in which EU classified information and material is stored and/or handled shall be protected by appropriate physical security measures.

In deciding what degree of physical security protection is necessary, account shall be taken of all relevant factors such as:

(a) 

The classification of information and/or material;

(b) 

The amount and form (e.g. hard copy, computer storage media) of the information held;

(c) 

The locally assessed threat from intelligence services which target the EU, the Member States, and/or other institutions or third parties holding EU classified information from, namely, sabotage, terrorism and other subversive and/or criminal activities.

The physical security measures applied shall be designed to:

(a) 

Deny surreptitious or forced entry by an intruder;

(b) 

Deter, impede and detect actions by disloyal personnel;

(c) 

Prevent those who do not have a need to know from having access to EU classified information.

18.3.   Physical security measures

18.3.1.   Security areas

Areas where information classified ►C1  CONFIDENTIEL UE ◄ or higher is handled and stored shall be so organised and structured as to correspond to one of the following:

(a) 

Class I Security Area: an area where ►C1  CONFIDENTIEL UE ◄ or above is handled and stored in such a way that entry into the area constitutes, for all practical purposes, access to classified information. Such an area requires:

(i) 

A clearly defined and protected perimeter through which all entry and exit is controlled;

(ii) 

An entry control system, which admits only those duly cleared and specially authorised to enter the area;

(iii) 

Specification of the classification of the information normally held in the area, i.e. the information to which entry gives access.

(b) 

Class II Security Area: an area where ►C1  CONFIDENTIEL UE ◄ or above is handled and stored in such a way that it can be protected from access by unauthorised persons by means of internally established controls, e.g. premises containing Services in which ►C1  CONFIDENTIEL UE ◄ or above is regularly handled and stored. Such an area requires:

(i) 

A clearly defined and protected perimeter through which all entry and exit is controlled;

(ii) 

An entry control system that admits unescorted only those duly cleared and specially authorised to enter the area. For all other persons, provision shall be made for escorts or equivalent controls, to prevent unauthorised access to EU classified information and uncontrolled entry to areas subject to technical security inspections.

Those areas not occupied by duty personnel on a 24-hour basis shall be inspected immediately after normal working hours to ensure that EU classified information is properly secured.

18.3.2.   Administrative area

Around or leading up to Class I or Class II security areas, an administrative area of lesser security may be established. Such an area requires a visibly defined perimeter allowing personnel and vehicles to be checked. Only ►C1  RESTREINT UE ◄ and non-classified information shall be handled and stored in such areas.

18.3.3.   Entry and exit controls

Entry and exit into and from Class I and Class II security areas shall be controlled by a pass or personal recognition system applicable to all staff normally working in these areas. A system of visitor checks designed to deny unauthorised access to EU classified information shall also be established. Pass systems may be supported by automated identification, which shall be regarded as a supplement to, but not a total replacement for, guards. A change in the threat assessment may entail a strengthening of the entry and exit control measures, for example during the visit of prominent persons.

18.3.4.   Guard patrols

Patrols of Class I and Class II security areas are to take place outside normal working hours to protect EU assets against compromise, damage or loss. The frequency of patrols will be determined by local circumstances but, as a guide, are to be conducted once every 2 hours.

18.3.5.   Security containers and strong rooms

Three classes of containers shall be used for the storage of EU classified information:

— 
Class A: containers nationally approved for storage of ►C1  TRES SECRET UE/EU TOP SECRET ◄ information within a Class I or a Class II security area;
— 
Class B: containers nationally approved for storage of ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ information within a Class I or a Class II security area;
— 
Class C: Service furniture suitable for storage of ►C1  RESTREINT UE ◄ information only.

For strong rooms constructed within a Class I or a Class II security area, and for all Class I security areas where information classified ►C1  CONFIDENTIEL UE ◄ and higher is stored on open shelves or displayed on charts, maps, etc., the walls, floors and ceilings, door(s) with lock(s) need to be certified by the SAA as offering equivalent protection to the class of security container approved for the storage of information of the same classification.

18.3.6.   Locks

Locks used with security containers and strong rooms in which EU classified information is stored shall meet the following standards:

— 
Group A: nationally approved for Class A containers;
— 
Group B: nationally approved for Class B containers;
— 
Group C: suitable for Class C Service furniture only.

18.3.7.   Control of keys and combinations

Keys of security containers shall not be taken out of the Commission buildings. Combination settings of security containers shall be committed to memory by persons needing to know them. For use in an emergency, the Local Security Officer of the Commission department concerned shall be responsible for holding spare keys and a written record of each combination setting; the latter shall be held in separate sealed opaque envelopes. Working keys, spare security keys and combination settings shall be kept in separate security containers. These keys and combination settings should be given security protection no less stringent than the material to which they give access.

Knowledge of the combination settings of security containers shall be restricted to as few people as practicable. Combinations shall be reset:

(a) 

On receipt of a new container;

(b) 

Whenever a change of personnel occurs;

(c) 

Whenever a compromise has occurred or is suspected;

(d) 

At intervals of preferably six months, and at least every twelve months.

18.3.8.   Intrusion detection devices

When alarm systems, closed circuit television and other electrical devices are used to protect EU classified information, an emergency electrical supply shall be available to ensure the continuous operation of the system if the main power supply is interrupted. Another basic requirement is that a malfunction in or tampering with such systems shall result in an alarm or other reliable warning to the surveillance personnel.

18.3.9.   Approved equipment

The ►M3  Commission Security Directorate ◄ shall maintain up-to-date lists by type and model of the security equipment that they have approved for the protection of classified information under various specified circumstances and conditions. The ►M3  Commission Security Directorate ◄ shall base these lists, inter alia, on information from NSAs.

18.3.10.   Physical protection of copying and telefax machines

Copying and telefax machines shall be physically protected to the extent necessary to ensure that only authorised persons can use them for processing classified information and that all classified products are subject to proper controls.

18.4.   Protection against overlooking and eavesdropping

18.4.1.   Overlooking

All appropriate measures shall be taken by day and by night to ensure that EU classified information is not seen, even accidentally, by any unauthorised person.

18.4.2.   Eavesdropping

Services or areas in which information classified ►C1  SECRET UE ◄ and above is regularly discussed shall be protected against passive and active eavesdropping attacks where the risk demands it. The assessment of the risk of such attacks shall be the responsibility of the ►M3  Commission Security Directorate ◄ after consultation, as necessary, with NSAs.

18.4.3.   Introduction of electronic and recording equipment

It is not permitted to introduce mobile phones, private computers, recording devices, cameras and other electronic or recording devices into security areas or technically secure areas without prior authorisation from the ►M3  Director of the Commission Security Directorate ◄ .

To determine the protective measures to be taken in premises sensitive to passive eavesdropping (e.g. insulation of walls, doors, floors and ceilings, measurement of compromising emanations) and to active eavesdropping (e.g. search for microphones), the ►M3  Commission Security Directorate ◄ may request assistance from experts from NSAs.

Likewise, when circumstances require, the telecommunications equipment and the electrical or electronic office equipment of any kind used during meetings at ►C1  SECRET UE ◄ level and above may be checked by technical security specialists of NSAs at the request of the ►M3  Director of the Commission Security Directorate ◄ .

18.5.   Technically secure areas

Certain areas may be designated as technically secure areas. A special entry check shall be carried out. Such areas shall be kept locked by an approved method when not occupied and all keys treated as security keys. Such areas shall be subject to regular physical inspections, which will also be undertaken following any unauthorised entry or suspicion of such an entry.

A detailed inventory of equipment and furniture shall be kept in order to monitor their movements. No item of furniture or equipment shall be brought into such an area until it has undergone a careful inspection by specially trained security personnel, designed to detect any listening devices. As a general rule, the installation of communication lines in technically secure areas is not permitted without prior authorisation from the appropriate authority.

19.   GENERAL RULES ON THE NEED TO KNOW PRINCIPLE AND EU PERSONAL SECURITY CLEARANCES

19.1.   General

Access to EU classified information shall be authorised only for persons having a “need-to-know” for carrying out their duties or missions. Access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ , ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ information shall be authorised only for persons in possession of the appropriate security clearance.

The responsibility for determining “need-to-know” shall rest with the department in which the person concerned is to be employed.

Requesting the clearance of personnel shall be the responsibility of each department.

This will result in the issue of a “EU personal security certificate” showing the level of classified information to which the cleared person may have access and the date of expiry.

An EU personal security certificate for a given classification may give the holder access to information with a lower classification.

Persons other than officials or other employees, such as external contractors, experts or consultants, with whom it may be necessary to discuss, or to whom it may be necessary to show, EU classified information, must have a EU personal security clearance as regards EU classified information and be briefed as to their responsibility for security.

Public access shall remain governed by Regulation (EC) No 1049/2001.

19.2.   Specific rules on access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information

All persons who are to have access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information shall first be screened for access to such information.

All persons who are required to have access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information shall be designated by the Member of the Commission responsible for security matters and their names kept in the appropriate ►C1  TRES SECRET UE/EU TOP SECRET ◄ registry. The ►M3  Commission Security Directorate ◄ will create and maintain this registry.

Before having access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information, all persons shall sign a certificate to the effect that they have been briefed on Commission security procedures and that they fully understand their special responsibility for safeguarding ►C1  TRES SECRET UE/EU TOP SECRET ◄ information, and the consequences which the EU rules and national law or administrative rules provide when classified information passes into unauthorised hands, either by intent or through negligence.

In the case of persons having access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information at meetings, etc., the competent Control Officer of the service or body in which that person is employed shall notify the body organising the meeting that the persons concerned have such authorisation.

The names of all persons ceasing to be employed on duties requiring access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information shall be removed from the ►C1  TRES SECRET UE/EU TOP SECRET ◄ list. In addition, the attention of all such persons shall be drawn again to their special responsibility for the safeguarding of ►C1  TRES SECRET UE/EU TOP SECRET ◄ information. They shall also sign a declaration stating that they will neither use nor pass on ►C1  TRES SECRET UE/EU TOP SECRET ◄ information in their possession.

19.3.   Specific rules on access to ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ information

All persons who are to have access to ►C1  SECRET UE ◄ or ►C1  CONFIDENTIEL UE ◄ information shall first be screened to the appropriate grading.

All persons who are to have access to ►C1  SECRET UE ◄ or ►C1  CONFIDENTIEL UE ◄ information shall be acquainted with the appropriate security provisions and shall be aware of the consequences of negligence.

In the case of persons having access to ►C1  SECRET UE ◄ or ►C1  CONFIDENTIEL UE ◄ information at meetings, etc., the Security Officer of the body in which that person is employed shall notify the body organising the meeting that the persons concerned have such authorisation.

19.4.   Specific rules on access to ►C1  RESTREINT UE ◄ information

Persons with access to ►C1  RESTREINT UE ◄ information will be made aware of these security rules and of the consequences of negligence.

19.5.   Transfers

When a member of staff is transferred from a post which involves the handling of EU classified material, the Registry will oversee the proper transfer of that material from the outgoing to the incoming official.

When a member of staff is transferred to another post involving the handling of EU classified material the Local Security Officer will brief him accordingly.

19.6.   Special instructions

Persons who are required to handle EU classified information should, on first taking up their duties and periodically thereafter, be made aware of:

(a) 

The dangers to security arising from indiscreet conversation;

(b) 

Precautions to take in their relations with the press and with representatives of special interest groups;

(c) 

The threat presented by the activities of intelligence services that target the EU and Member States as regards EU classified information and activities;

(d) 

The obligation to report immediately to the appropriate security authorities any approach or manoeuvre giving rise to suspicions of espionage activity or any unusual circumstances relating to security.

All persons normally exposed to frequent contact with representatives of countries whose intelligence services target the EU and Member States as regards EU classified information and activities shall be given a briefing on the techniques known to be employed by various intelligence services.

There are no Commission security provisions concerning private travel to any destination by personnel cleared for access to EU classified information. The ►M3  Commission Security Directorate ◄ shall, however, acquaint the officials and other servants falling within their responsibility with travel regulations to which they may be subjected.

20.   SECURITY CLEARANCE PROCEDURE FOR COMMISSION OFFICIALS AND OTHER EMPLOYEES

(a) 

Only Officials and other employees of the Commission or persons working within the Commission who, by reason of their duties and for the requirements of the service, need to have knowledge of, or to use, classified information held by the Commission, shall have access to such information.

(b) 

In order to have access to information classified as “ ►C1  TRES SECRET UE/EU TOP SECRET ◄ ”, “ ►C1  SECRET UE ◄ ” and “ ►C1  CONFIDENTIEL UE ◄ ”, the persons referred to in paragraph (a) above must have been authorised, in accordance with the procedure referred to in paragraphs (c) and (d) of this Section.

(c) 

Authorisation shall be granted only to persons who have undergone security screening by the competent national authorities of the Member States (NSA) in accordance with the procedure referred to in paragraphs (i) to (n).

(d) 

The ►M3  Director of the Commission Security Directorate ◄ shall be responsible for granting the authorisations referred to in paragraphs (a), (b) and (c).

(e) 

He/she shall grant authorisation after obtaining the opinion of the competent national authorities of the Member States on the basis of security screening carried out in accordance with paragraphs (i) to (n).

(f) 

The ►M3  Commission Security Directorate ◄ shall maintain an up to date list of all sensitive posts, provided by the relevant Commission departments, and of all persons who have been granted a (temporary) authorisation.

(g) 

Authorisation, which shall be valid for a period of five years, may not exceed the duration of the tasks on the basis of which it was granted. It may be renewed in accordance with the procedure referred to in paragraph (e).

(h) 

Authorisation shall be withdrawn by the ►M3  Director of the Commission Security Directorate ◄ where he/she considers there are justifiable grounds for doing so. Any decision to withdraw authorisation shall be notified to the person concerned, who may ask to be heard by the ►M3  Director of the Commission Security Directorate ◄ , and to the competent national authority.

(i) 

Security screening shall be carried out with the assistance of the person concerned and at the request of the ►M3  Director of the Commission Security Directorate ◄ . The competent national authority for screening is the one of the Member State of which the person subject to authorisation is a national. Where the person concerned is not a national of an EU Member State, the ►M3  Director of the Commission Security Directorate ◄ will request a security screening from the EU Member State in which the person is domiciled or usually resident.

(j) 

As part of the screening procedure, the person concerned shall be required to complete a personal information form.

(k) 

The ►M3  Director of the Commission Security Directorate ◄ shall specify in its request the type and level of classified information to be made available to the person concerned, so that the competent national authorities can carry out the screening process and give their opinion as to the level of authorisation it would be appropriate to grant to that person.

(l) 

The whole security-screening process together with the results obtained shall be subject to the relevant rules and regulations in force in the Member State concerned, including those concerning appeals.

(m) 

Where the competent national authorities of the Member State give a positive opinion, the ►M3  Director of the Commission Security Directorate ◄ may grant the person concerned authorisation.

(n) 

A negative opinion by the competent national authorities shall be notified to the person concerned, who may ask to be heard by the ►M3  Director of the Commission Security Directorate ◄ . Should he consider it necessary, the ►M3  Director of the Commission Security Directorate ◄ may ask the competent national authorities for any further clarification they can provide. If the negative opinion is confirmed, authorisation shall not be granted.

(o) 

All persons granted authorisation within the meaning of paragraphs (d) and (e) shall, at the time the authorisation is granted and at regular intervals thereafter, receive any necessary instructions concerning the protection of classified information and the means of ensuring such protection. Such persons shall sign a declaration acknowledging receipt of the instructions and give an undertaking to obey them.

(p) 

The ►M3  Director of the Commission Security Directorate ◄ shall take any measure necessary in order to implement this section, in particular as regards the rules governing access to the list of authorised persons.

(q) 

Exceptionally, if required by the service, the ►M3  Director of the Commission Security Directorate ◄ may, after giving the national competent authorities notification and provided there is no reaction from them within a month, grant temporary authorisation for a period not exceeding six months, pending the outcome of the screening referred to in paragraph (i).

(r) 

The provisional and temporary authorisations thus granted shall not give access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information; such access shall be limited to officials who have effectively undergone a screening with positive results, in accordance with paragraph (i). Pending the outcome of the screening, the officials requested to be cleared at ►C1  TRES SECRET UE/EU TOP SECRET ◄ level may be authorised, temporarily and provisionally, to access information classified up to, and including, ►C1  SECRET UE ◄ .

21.   PREPARATION, DISTRIBUTION, TRANSMISSION, COURRIER PERSONAL SECURITY AND EXTRA COPIES OF TRANSLATIONS AND EXTRACTS OF EU CLASSIFIED DOCUMENTS

21.1.   Preparation

1. The EU classifications shall be applied as established in Section 16 and for ►C1  CONFIDENTIEL UE ◄ and above appear at the top and bottom centre of each page, and each page shall be numbered. Each EU classified document shall bear a reference number and a date. In the case of ►C1  TRES SECRET UE/EU TOP SECRET ◄ and ►C1  SECRET UE ◄ documents, this reference number shall appear on each page. If they are to be distributed in several copies, each one shall bear a copy number, which will appear on the first page, together with the total number of pages. All annexes and enclosures shall be listed on the first page of a document classified ►C1  CONFIDENTIEL UE ◄ and above.

2. Documents classified ►C1  CONFIDENTIEL UE ◄ and above shall be typed, translated, stored, photocopied, reproduced magnetically or microfilmed only by persons who have been cleared for access to EU classified information up to at least the appropriate security classification of the document in question.

3. The provisions regulating the computerised production of classified documents are set out in Section 25.

21.2.   Distribution

1. EU classified information shall be distributed only to persons with a need to know and having the appropriate security clearance. The originator shall specify the initial distribution.

2.  ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents shall be circulated through ►C1  TRES SECRET UE/EU TOP SECRET ◄ registries (see Section 22.2). In the case of ►C1  TRES SECRET UE/EU TOP SECRET ◄ messages, the competent registry may authorise the head of the communications centre to produce the number of copies specified in the list of addressees.

3. Documents classified ►C1  SECRET UE ◄ and below may be redistributed by the original addressee to other addressees based on a need to know. The originating authorities shall, however, clearly state any caveats they wish to impose. Whenever such caveats are imposed, the addressees may redistribute the documents only with the originating authorities' authorisation.

4. Every document classified ►C1  CONFIDENTIEL UE ◄ and above shall, on arriving at or leaving a DG or service, be recorded by the departments' Local EUCI Registry. The particulars to be entered (references, date and where applicable the copy number) shall be such as to identify the documents and be entered into a logbook or in special protected computer media (see Section 22.1).

21.3.   Transmission of EU classified documents

21.3.1.   Packaging, receipts

1. Documents classified ►C1  CONFIDENTIEL UE ◄ and above shall be transmitted in heavy duty, opaque double envelopes. The inner envelope shall be marked with the appropriate EU security classification as well as, if possible, full particulars of the recipient's job title and address.

2. Only a Registry Control Officer (see Section 22.1), or his substitute, may open the inner envelope and acknowledge receipt of the documents enclosed, unless that envelope is addressed to an individual. In such a case, the appropriate Registry (see Section 22.1) shall log the arrival of the envelope, and only the individual to whom it is addressed may open the inner envelope and acknowledge receipt of the documents it contains.

3. A receipt form shall be placed in the inner envelope. The receipt, which will not be classified, should quote the reference number, date and copy number of the document, but never its subject.

4. The inner envelope shall be enclosed in an outer envelope bearing a package number for receipting purposes. Under no circumstances shall the security classification appear on the outer envelope.

5. For documents classified ►C1  CONFIDENTIEL UE ◄ and above, couriers and messengers shall obtain receipts against the package numbers.

21.3.2.   Transmission within a building or group of buildings

Within a given building or group of buildings, classified documents may be carried in a sealed envelope bearing only the addressee's name, on condition that it is carried by a person cleared to the level of classification of the documents.

21.3.3.   Transmission within a country

1. Within a country, ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents should be sent only by means of official messenger service or by persons authorised to have access to ►C1  TRES SECRET UE/EU TOP SECRET ◄ information.

2. Whenever a messenger service is used for the transmission of a ►C1  TRES SECRET UE/EU TOP SECRET ◄ document outside the confines of a building or group of buildings, the packaging and receipting provisions contained in this Chapter shall be complied with. Delivery services shall be so staffed as to ensure that packages containing ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents remain under the direct supervision of a responsible official at all times.

3. Exceptionally, ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents may be taken by officials, other than messengers, outside the confines of a building or group of buildings for local use at meetings and discussions, provided that:

(a) 

The bearer is authorised to have access to those ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents;

(b) 

The mode of transportation complies with rules governing the transmission of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents;

(c) 

Under no circumstances does the official leave the ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents unattended;

(d) 

Arrangements are made for the list of documents so carried to be held in the ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry holding the documents and recorded in a log, and checked against this record on their return.

4. Within a given country, ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ documents may be sent either by post, if such transmission is permitted under national regulations and is in accordance with the provisions of those regulations, or by messenger service or by persons cleared for access to EU classified information.

5. The ►M3  Commission Security Directorate ◄ will prepare instructions on the personal carrying of EU classified documents based on these rules. The bearer shall be required to read and sign these instructions. In particular, the instructions shall make it clear that, under no circumstances, may documents:

(a) 

Leave the bearer's possession unless they are in safe custody in accordance with the provisions contained in Section 18;

(b) 

Be left unattended in public transport or private vehicles, or in places such as restaurants or hotels. They may not be stored in hotel safes or left unattended in hotel rooms;

(c) 

Be read in public places such as aircraft or trains.

21.3.4.   Transmission from one State to another

1. Material classified ►C1  CONFIDENTIEL UE ◄ and above shall be conveyed by EU diplomatic or military courier services.

2. However, the personal carriage of material classified ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ may be permitted if provisions for the carriage are such as to ensure that they cannot fall into any unauthorised person's hands.

3. The Member of the Commission responsible for security matters may authorise personal carriage when diplomatic and military couriers are not available or the use of such couriers would result in a delay that would be detrimental to EU operations and the material is urgently required by the intended recipient. The ►M3  Commission Security Directorate ◄ will prepare instructions covering the personal carriage of material classified up to and including ►C1  SECRET UE ◄ internationally by persons other than diplomatic and military couriers. The instructions shall require that:

(a) 

The bearer has the appropriate security clearance;

(b) 

A record is held in the appropriate department or registry of all material so carried;

(c) 

Packages or bags containing EU material bear an official seal to prevent or discourage inspection by customs, and labels with identification and instructions to the finder;

(d) 

The bearer carries a courier certificate and/or mission order recognised by all EU Member States authorising him to carry the package as identified;

(e) 

No EU non-member State or its frontier is crossed when travelling overland unless the shipping State has a specific guarantee from that State;

(f) 

The bearer's travel arrangements with regard to destinations, routes to be taken and means of transportation to be used will be in accordance with EU rules or — if national regulations with respect to such matters are more stringent — in accordance with such regulations;

(g) 

The material must not leave the possession of the bearer unless it is housed in accordance with the provisions for safe custody contained in Section 18;

(h) 

The material must not be left unattended in public or private vehicles, or in places such as restaurants or hotels. It must not be stored in hotel safes or left unattended in hotel rooms;

(i) 

If the material being carried contains documents, these must not be read in public places (e.g. in aircraft, trains, etc.).

4. The person designated to carry the classified material must read and sign a security briefing that contains, as a minimum, the instructions listed above and procedures to be followed in an emergency or in case the package containing the classified material is challenged by customs or airport security officials.

21.3.5.   Transmission of ►C1  RESTREINT UE ◄ documents

No special provisions are laid down for the conveyance of ►C1  RESTREINT UE ◄ documents, except that they should be such as to ensure that they can not fall into any unauthorised person's hands.

21.4.   Courier personnel security

All couriers and messengers employed to carry ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ documents shall be appropriately security cleared.

21.5.   Electronic and other means of technical transmission

1. Communications security measures are designed to ensure the secure transmission of EU classified information. The detailed rules applicable to the transmission of such EU classified information are dealt with in Section 25.

2. Only accredited communications centres and networks and/or terminals and systems may transmit information classified ►C1  CONFIDENTIEL UE ◄ and ►C1  SECRET UE ◄ .

21.6.   Extra copies and translations of and extracts from EU classified documents

1. Only the originator may authorise the copy or translation of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents.

2. If persons without ►C1  TRES SECRET UE/EU TOP SECRET ◄ clearance require information which, although contained in a ►C1  TRES SECRET UE/EU TOP SECRET ◄ document, does not have that classification, the Head of the ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry (see Section 22.2) may be authorised to produce the necessary number of extracts from that document. He/she shall, at the same time, take the necessary steps to ensure that these extracts are given the appropriate security classification.

3. Documents classified ►C1  SECRET UE ◄ and lower may be reproduced and translated by the addressee, within the framework of these security provisions and on condition that it complies strictly with the need-to-know principle. The security measures applicable to the original document shall also be applicable to reproductions and/or translations thereof.

22.   EUCI REGISTRIES, MUSTERS, CHECKS, ARCHIVE STORAGE AND DESTRUCTION OF EUCI

22.1.   Local EUCI Registries

1. Within the Commission, in each department, as required, one or more Local EUCI Registries shall be responsible for the registration, reproduction, dispatch, archiving and destruction of documents classified ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ .

2. When a department does not have a Local EUCI Registry, the Local EUCI Registry of Secretariat General will act as its EUCI Registry.

3. Local EUCI Registries shall report to the Head of department from whom they receive their instructions. The Head of these registries shall be Registry Control Officer (RCO).

4. They shall be subject to the supervision of the Local Security Officer as far as the application of the provisions regarding the handling of EUCI documents and compliance with the corresponding security measures is concerned.

5. Officials assigned to the Local EUCI Registries shall be authorised to have access to EUCI in accordance with Section 20.

6. Under the authority of the relevant Head of department the Local EUCI Registries shall:

(a) 

Manage operations relating to the registration, reproduction, translation, transmission, dispatch and destruction of such information;

(b) 

Update the list of particulars on classified information;

(c) 

Periodically question issues on the need to maintain the classification of information.

7. The Local EUCI Registries shall keep a register of the following particulars:

(a) 

The date of preparation of the classified information;

(b) 

The level of classification;

(c) 

The expiry date of the classification;

(d) 

The name and department of the issuer;

(e) 

The recipient or recipients, with serial number;

(f) 

The subject;

(g) 

The number;

(h) 

The number of copies circulated;

(i) 

The preparation of inventories of the classified information submitted to the department;

(j) 

The register of declassification and downgrading of classified information.

8. The general rules provided for in Section 21 shall apply to the Local EUCI Registries of the Commission, unless modified by the specific rules laid down in this Section.

22.2.   The ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry

22.2.1.   General

1. A Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry ensures the recording, handling and distribution of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents in accordance with these security provisions. The head of the ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry will be the ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry Control Officer.

2. The Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry will act as the main receiving and despatching authority in the Commission, with other EU institutions, Member States, international organisations and third States with which the Commission has agreements on security procedures for the exchange of classified information.

3. When necessary, sub-registries shall be established, to be responsible for the internal management of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents; they shall keep up-to-date records of the circulation of each document held on the Sub-Registry's charge.

4.  ►C1  TRES SECRET UE/EU TOP SECRET ◄ sub-registries shall be set up as specified in Section 22.2.3 in response to long term needs and shall be attached to a central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry. If there is a need to consult ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents only temporarily and occasionally, these documents may be released without setting up a ►C1  TRES SECRET UE/EU TOP SECRET ◄ sub-registry, provided rules are laid down to ensure that they remain under the control of the appropriate ►C1  TRES SECRET UE/EU TOP SECRET ◄ registry and that all physical and personnel security measures are observed.

5. Sub-registries may not transmit ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents directly to other sub-registries of the same Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry without express approval by the latter.

6. All exchanges of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents between sub-registries not attached to the same central registry shall be routed through the Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registries.

22.2.2.   The Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry

As the Control Officer, the head of the Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry shall be responsible for:

(a) 

The transmission of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents in accordance with the provisions defined in Section 21.3;

(b) 

Maintaining a list of all its dependent ►C1  TRES SECRET UE/EU TOP SECRET ◄ sub-registries together with names and signatures of the appointed Control Officers and their authorised deputies;

(c) 

Holding receipts from registries for all ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents distributed by the Central Registry;

(d) 

Maintaining a record of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents held and distributed;

(e) 

Maintaining an up-to-date list of all Central ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registries with which he/she normally corresponds, together with the names and signatures of their appointed Control Officers and their authorised deputies;

(f) 

The physical safeguarding of all ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents held within the registry in accordance with regulations contained in Section 18.

22.2.3.    ►C1  TRES SECRET UE/EU TOP SECRET ◄ sub-registries

As the Control Officer, the head of an ►C1  TRES SECRET UE/EU TOP SECRET ◄ sub-registry shall be responsible for:

(a) 

The transmission of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents in accordance with provisions contained in Section 21.3;

(b) 

Maintaining an up-to-date list of all persons authorised to have access to the ►C1  TRES SECRET UE/EU TOP SECRET ◄ information under his control;

(c) 

The distribution of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents in accordance with the instructions of the originator or on a need-to-know basis, having first checked that the addressee has the requisite security clearance;

(d) 

Maintaining an up-to-date record of all ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents held or circulating under his control or which have been passed to other ►C1  TRES SECRET UE/EU TOP SECRET ◄ registries and holding all corresponding receipts;

(e) 

Maintaining an up-to-date list of ►C1  TRES SECRET UE/EU TOP SECRET ◄ registries with whom he is authorised to exchange ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents, together with the names and signatures of their Control Officers and authorised deputies;

(f) 

The physical safeguarding of all ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents held within the sub-registry in accordance with the rules laid down in Section 18.

22.3.   Inventories, musters and checks of EU classified documents

1. Every year, each ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry as referred to in this Section shall carry out an itemised inventory of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents. A document is deemed to have been accounted for if the registry physically musters the document, or holds a receipt from the ►C1  TRES SECRET UE/EU TOP SECRET ◄ registry to which the document has been transferred, a destruction certificate for the document or an instruction to downgrade or declassify that document. They shall forward the findings of the annual inventories to the Member of the Commission responsible for security matters, by 1 April each year at the latest.

2.  ►C1  TRES SECRET UE/EU TOP SECRET ◄ Sub-registries shall forward the findings of their annual inventory to the Central Registry to which they are answerable, on a date specified by the latter.

3. EU classified documents below the level of ►C1  TRES SECRET UE/EU TOP SECRET ◄ shall be subject to internal checks according to instructions from the Member of the Commission responsible for security matters.

4. These operations shall afford the opportunity to secure holders' views as to:

(a) 

The possibility of downgrading or declassifying certain documents;

(b) 

Documents to be destroyed.

22.4.   Archive storage of EU classified information

1. EUCI shall be stored under conditions that comply with all relevant requirements listed in Section 18.

2. To minimise storage problems, the Control Officers of all registries shall be authorised to have ►C1  TRES SECRET UE/EU TOP SECRET ◄ , ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ documents microfilmed or otherwise stored in magnetic or optical media for archive purposes, providing that:

(a) 

The microfilming/storage process is undertaken by personnel with current clearance for the corresponding appropriate classification level;

(b) 

The microfilm/storage medium is afforded the same security as the original documents;

(c) 

The microfilming/storing of any ►C1  TRES SECRET UE/EU TOP SECRET ◄ document is reported to the originator;

(d) 

Rolls of film, or other type of support, contain only documents of the same ►C1  TRES SECRET UE/EU TOP SECRET ◄ , ►C1  SECRET UE ◄ or ►C1  CONFIDENTIEL UE ◄ classification;

(e) 

The microfilming/storing of an ►C1  TRES SECRET UE/EU TOP SECRET ◄ or ►C1  SECRET UE ◄ document is clearly indicated in the record used for the annual inventory;

(f) 

Original documents that have been microfilmed or otherwise stored are destroyed, in accordance with the rules set out in Section 22.5.

3. These rules also apply to any other form of authorised storage, such as electromagnetic media and optical disk.

22.5.   Destruction of EU classified documents

1. To prevent the unnecessary accumulation of EU classified documents, those regarded by the head of the establishment holding them as out of date and surplus in number shall be destroyed as soon as practicable, in the following manner:

(a) 

►C1  TRES SECRET UE/EU TOP SECRET ◄ documents shall be destroyed only by the Central Registry responsible for them. Each document destroyed shall be listed in a destruction certificate, signed by the ►C1  TRES SECRET UE/EU TOP SECRET ◄ Control Officer and by the Officer witnessing the destruction, who shall be ►C1  TRES SECRET UE/EU TOP SECRET ◄ cleared. A note to this effect shall be made in the logbook;

(b) 

The registry shall keep the destruction certificates, together with the distribution sheets, for a period of ten years. Copies shall be forwarded to the originator or to the appropriate central registry only when explicitly requested;

(c) 

►C1  TRES SECRET UE/EU TOP SECRET ◄ documents, including all classified waste resulting from the preparation of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents such as spoiled copies, working drafts, typed notes, floppy disks, shall be destroyed, under the supervision of a ►C1  TRES SECRET UE/EU TOP SECRET ◄ Registry Control Officer, by burning, pulping, shredding or otherwise reducing into an unrecognisable and non-reconstitutable form.

2.  ►C1  SECRET UE ◄ documents shall be destroyed by the registry responsible for those documents, under the supervision of a security cleared person, using one of the processes indicated in paragraph 1 (c). ►C1  SECRET UE ◄ documents that are destroyed shall be listed on signed destruction certificates to be retained by the Registry, together with the distribution forms, for at least three years.

3.  ►C1  CONFIDENTIEL UE ◄ documents shall be destroyed by the registry responsible for those documents, under the supervision of a security cleared person, by one of the processes indicated in paragraph 1 (c). Their destruction shall be recorded according to instructions from the Member of the Commission responsible for security matters.

4.  ►C1  RESTREINT UE ◄ documents shall be destroyed by the registry responsible for those documents or by the user, in accordance with instructions from the Member of the Commission responsible for security matters.

22.6.   Destruction in emergencies

1. The Commission departments shall prepare plans based on local conditions for the safeguarding of EU classified material in a crisis including if necessary emergency destruction and evacuation plans. It shall promulgate instructions deemed necessary to prevent EU classified information from falling into unauthorised hands.

2. The arrangements for the safeguarding and/or destruction of ►C1  SECRET UE ◄ and ►C1  CONFIDENTIEL UE ◄ material in a crisis shall under no circumstances adversely affect the safeguarding or destruction of ►C1  TRES SECRET UE/EU TOP SECRET ◄ material, including the enciphering equipment, whose treatment shall take priority over all other tasks.

3. The measures to be adopted for the safeguarding and destruction of enciphering equipment in an emergency shall be covered by specific instructions.

4. Instructions need to be available on the spot in a sealed envelope. Means/tools for destruction must be available.

23.   SECURITY MEASURES FOR SPECIFIC MEETINGS HELD OUTSIDE THE COMMISSION PREMISES AND INVOLVING EU CLASSIFIED INFORMATION

23.1.   General

When Commission or other important meetings are held outside the Commission premises and where justified by the particular security requirements relating to the high sensitivity of the issues or information dealt with, the security measures described below shall be taken. These measures concern only the protection of EU classified information; other security measures may have to be planned.

23.2.   Responsibilities

23.2.1.   The ►M3  Commission Security Directorate ◄

The ►M3  Commission Security Directorate ◄ shall cooperate with the competent authorities of the Member State on whose territory the meeting is being held (the host Member State), in order to ensure the security of the Commission's or other important meetings and for the security of the delegates and their staff. As regards the protection of security, it should specifically ensure that:

(a) 

Plans are drawn up to deal with security threats and security-related incidents, the measures in question covering in particular the safe custody of EU classified documents in offices;

(b) 

Measures are taken to provide possible access to Commission's communications system for the receipt and transmission of EU classified messages. The host Member State will be requested to provide access if required to secure telephone systems.

The ►M3  Commission Security Directorate ◄ shall act as an adviser on security for the preparation of the meeting; it should be represented there to help and advise the Meeting Security Officer (MSO) and delegations as necessary.

Each delegation to a meeting shall be asked to designate a Security Officer, who will be responsible for dealing with security matters within his/her delegation and for maintaining liaison with the Meeting Security Officer, as well as with the ►M3  Commission Security Directorate ◄ representative as required.

23.2.2.   Meeting Security Officer (MSO)

A Meeting Security Officer shall be appointed and be responsible for the general preparation and control of general internal security measures and for coordination with the other security authorities concerned. The measures taken by the MSO shall in general relate to:

(a) 

Protective measures at the meeting place to ensure that the meeting is conducted without any incident that might compromise the security of any EU classified information that may be used there;

(b) 

Checking the personnel whose access to the place of the meeting, delegations' areas and conference rooms is permitted, and checking any equipment;

(c) 

Constant coordination with the competent authorities of the host Member State and with the ►M3  Commission Security Directorate ◄ ;

(d) 

The inclusion of security instructions in the meeting dossier with due regard for the requirements set out in these security rules and any other security instructions considered necessary.

23.3.   Security measures

23.3.1.   Security areas

The following security areas shall be established:

(a) 

A Class II security area, consisting of a drafting room, the Commission offices and reprographic equipment, as well as delegations' offices as appropriate;

(b) 

A Class I security area, consisting of the conference room and interpreters' and sound engineers' booths;

(c) 

Administrative areas, consisting of the press area and those parts of the meeting place that are used for administration, catering and accommodation, as well as the area immediately adjacent to the Press Centre and the meeting place.

23.3.2.   Passes

The MSO shall issue appropriate badges as requested by the delegations, according to their needs. Where required, a distinction may be made as regards access to different security areas.

The security instructions for the meeting shall require all persons concerned to wear and display their badges prominently at all times within the place of the meeting, so that they can be checked as needed by security personnel.

Apart from badge-holding participants, as few people as possible shall be admitted to the meeting place. The MSO shall only allow national delegations to receive visitors during the meeting upon their request. Visitors should be given a visitor's badge. A visitor's pass form bearing his/her name and the name of the person being visited shall be filled in. Visitors shall be accompanied at all times by a security guard or by the person being visited. The visitor's pass form shall be carried by the accompanying person, who shall return it, together with the visitor's badge, to the security personnel when the visitor leaves the meeting place.

23.3.3.   Control of photographic and audio equipment

No camera or recording equipment may be brought into a Class I security area, with the exception of equipment brought by photographers and by sound engineers duly authorised by the MSO.

23.3.4.   Checking of briefcases, portable computers and packages

Pass-holders allowed access to a security area may normally bring in their briefcases and portable computers (with own power supply only) without a check being made. In the case of packages for delegations, delegations may take delivery of the packages, which will either be inspected by the delegation Security Officer, screened by special equipment or opened by security personnel for inspection. If the MSO considers it necessary, more stringent measures for the inspection of briefcases and packages may be laid down.

23.3.5.   Technical security

The meeting room may be made technically secure by a technical security team, which may also conduct electronic surveillance during the meeting.

23.3.6.   Delegations' documents

Delegations shall be made responsible for taking EU classified documents to and from meetings. They shall also be responsible for the verification and security of those documents during their use in the premises assigned to them. The host Member States' help may be requested for the transportation of classified documents to and from the place of the meeting.

23.3.7.   Safe custody of documents

If the Commission or delegations are unable to store their classified documents in accordance with approved standards, they may lodge those documents in a sealed envelope with the Meeting Security Officer, against receipt, so that the latter can store the documents in accordance with approved standards.

23.3.8.   Inspection of offices

The Meeting Security Officer shall arrange for the Commission and delegations' offices to be inspected at the end of each working day to ensure that all EU classified documents are being kept in a safe place. If not, he/she shall take the appropriate measures.

23.3.9.   Disposal of EU classified waste

All waste shall be treated as EU classified, and waste-paper baskets or bags should be given to the Commission and delegations for its disposal. Before leaving the premises they have been assigned, the Commission and delegations shall take their waste to the Meeting Security Officer, who shall arrange for its destruction according to the rules.

At the end of the meeting, all documents held but no longer wanted by the Commission or delegations shall be treated as waste. A thorough search of Commission and delegations' premises shall be made before the security measures adopted for the meeting are lifted. Documents for which a receipt was signed shall, as far as applicable, be destroyed as prescribed in Section 22.5.

24.   BREACHES OF SECURITY AND COMPROMISE OF EU CLASSIFIED INFORMATION

24.1.   Definitions

A breach of security occurs as the result of an act or omission contrary to a Commission security provision that might endanger or compromise EU classified information.

Compromise of EU classified information occurs when it has wholly or in part fallen into the hands of unauthorised persons, i.e. who do not have either the appropriate security clearance or the necessary need-to-know or if there is the likelihood of such an event having occurred.

EU classified information may be compromised as a result of carelessness, negligence or indiscretion as well as by the activities of services which target the EU or its Member States, as regards EU classified information and activities, or by subversive organisations.

24.2.   Reporting breaches of security

All persons who are required to handle EU classified information shall be thoroughly briefed on their responsibilities in this domain. They shall report at once any breach of security that may come to their notice.

When a Local Security Officer or Meeting Security Officer discovers or is informed of a breach of security relating to EU classified information or of the loss or disappearance of EU classified material, he or she shall take timely action in order to:

(a) 

Safeguard evidence;

(b) 

Establish the facts;

(c) 

Assess and minimise the damage done;

(d) 

Prevent a recurrence;

(e) 

Notify the appropriate authorities of the effects of the breach of security.

In this context, the following information shall be provided:

(i) 

A description of the information involved, including its classification, reference and copy number, date, originator, subject and scope;

(ii) 

A brief description of the circumstances of the breach of security, including the date and the period during which the information was exposed to compromise;

(iii) 

A statement of whether the originator has been informed.

It shall be the duty of each security authority, as soon as it is notified that such a breach of security may have occurred, to report the fact immediately to the ►M3  Commission Security Directorate ◄ .

Cases involving ►C1  RESTREINT UE ◄ information need to be reported only when they present unusual features.

On being informed that a breach of security has occurred, the Member of the Commission responsible for security matters shall:

(a) 

Notify the authority that originated the classified information in question;

(b) 

Ask the appropriate security authorities to initiate investigations;

(c) 

Coordinate enquiries where more than one security authority is affected;

(d) 

Obtain a report on the circumstances of the breach, the date or period during which it may have occurred and was discovered, with a detailed description of the content and classification of the material involved. Damage done to the interests of the EU or of one or more of its Member States and action taken to prevent a recurrence shall also be reported.

The originating authority shall inform the addressees and shall give appropriate instructions.

24.3.   Legal action

Any individual who is responsible for compromising EU classified information shall be liable to disciplinary action according to the relevant rules and regulations, particularly title VI of the Staff Regulations. Such action shall be without prejudice to any further legal action.

In appropriate cases, on the basis of the report mentioned in Section 24.2, the Member of the Commission responsible for security matters shall take all necessary steps in order to allow the competent national authorities to start criminal law procedures.

25.   PROTECTION OF EU CLASSIFIED INFORMATION HANDLED IN INFORMATION TECHNOLOGY AND COMMUNICATIONS SYSTEMS

25.1.   Introduction

25.1.1.   General

The security policy and requirements shall apply to all communications and information systems and networks (hereinafter systems) handling information classified ►C1  CONFIDENTIEL UE ◄ and above. They shall be applied as a supplement to Commission Decision C (95) 1510 final of 23 November 1995 on the protection of informatics systems.

Systems handling ►C1  RESTREINT UE ◄ information also require security measures to protect the confidentiality of that information. All systems require security measures to protect the integrity and availability of those systems and of the information they contain.

The IT security policy applied by the Commission has the following elements:

— 
It forms an integral part of security in general, and complements all elements of information security, personnel security and physical security;
— 
Division of responsibilities between technical system owners, owners of EUCI stored or handled in technical systems, IT security specialists and users;
— 
Description of security principles and requirements of each IT system;
— 
Approval of these principles and requirements by a designated authority;
— 
Taking into account the specific threats and vulnerabilities in the IT area.

25.1.2.   Threats to, and vulnerabilities of systems

A threat can be defined as a potential for the accidental or deliberate compromise of security. In the case of systems, such a compromise involves loss of one or more of the properties of confidentiality, of integrity and of availability. A vulnerability can be defined as a weakness or lack of controls that would facilitate or allow a threat actuation against a specific asset or target.

EU classified and unclassified information handled in systems in a concentrated form designed for rapid retrieval, communication and use is vulnerable to many threats. These include access to the information by unauthorised users or, conversely, denial of access to authorised users. There are also the risks of the unauthorised disclosure, corruption, modification or deletion of the information. Furthermore, the complex and sometimes fragile equipment is expensive and often difficult to repair or replace rapidly.

25.1.3.   Main purpose of security measures

The main purpose of the security measures stated in this section is to provide protection against unauthorised disclosure of EU classified information (the loss of confidentiality) and against the loss of integrity and availability of information. To achieve adequate security protection of a system handling EU classified information, the appropriate standards of conventional security shall be specified by the ►M3  Commission Security Directorate ◄ , along with appropriate special security procedures and techniques particularly designed for each system.

25.1.4.   System-specific security requirement statement (SSRS)

For all systems handling information classified ►C1  CONFIDENTIEL UE ◄ and above, a System-specific security requirement statement (SSRS) shall be required to be produced by its Technical System Owner (TSO, see Section 25.3.4) and the Information Owner (see Section 25.3.5) in cooperation with input and assistance as required from the project staff and from the ►M3  Commission Security Directorate ◄ (as INFOSEC Authority -IA, see Section 25.3.3) and approved by the Security Accreditation Authority (SAA, see Section 25.3.2).

An SSRS shall also be required where the availability and integrity of the ►C1  RESTREINT UE ◄ or unclassified information is deemed critical by the Security Accreditation Authority (SAA).

The SSRS shall be formulated at the earliest stage of a project's inception and shall be developed and enhanced as the project develops, fulfilling different roles at different stages in the project and system's life cycle.

25.1.5.   Security modes of operation

All systems handling information classified ►C1  CONFIDENTIEL UE ◄ and above shall be accredited to operate in one, or where warranted by requirements during different time periods, more than one, of the following security modes of operation, or their national equivalent:

(a) 

Dedicated.

(b) 

System high, and

(c) 

Multi-level.

25.2.   Definitions

“Accreditation” shall mean: the authorisation and approval granted to a system to process EU classified information in its operational environment.

Note:

Such accreditation should be made after all appropriate security procedures have been implemented and a sufficient level of protection of the system resources has been achieved. Accreditation should normally be made on the basis of the SSRS, including the following:

(a) 

A statement of the objective of accreditation for the system; in particular, what classification level(s) of information are to be handled and what system or network security mode(s) of operation is being proposed;

(b) 

Production of a risk management review to identify the threats and vulnerabilities and measures to counter them;

(c) 

The Security Operating Procedures (SecOPs) with a detailed description of the proposed operations (e.g., modes, services, to be provided) and including a description of the system security features which shall form the basis of accreditation;

(d) 

The plan for the implementation and maintenance of the security features;

(e) 

The plan for initial and follow-on system security or network security test, evaluation and certification, and

(f) 

Certification, where required, together with other elements of accreditation.

“Central Information Security Officer” (CISO) shall mean the official in a central IT service who coordinates and supervises security measures for centrally organised systems.

“Certification” shall mean: the issue of a formal statement, supported by an independent review of the conduct and results of an evaluation, of the extent to which a system meets the security requirement, or a computer security product meets pre-defined security claims.

“Communications Security” (COMSEC) shall mean: The application of security measures to telecommunications in order to deny unauthorised persons information of value which might be derived from the possession and study of such telecommunications or to ensure the authenticity of such telecommunications.

Note:

Such measures include cryptographic, transmission and emission security; and also include procedural, physical, personnel, document and computer security.

“Computer Security” (COMPUSEC) shall mean: The application of hardware, firmware and software security features to a computer system in order to protect against, or prevent, the unauthorised disclosure, manipulation, modification/deletion of information or denial of service.

“Computer Security Product” shall mean: A generic computer security item which is intended for incorporation into an IT system for use in enhancing, or providing for, confidentiality, integrity or availability of information handled.

“Dedicated Security Mode of Operation” shall mean: A mode of operation in which ALL individuals with access to the system are cleared to the highest classification level of information handled within the system, and with a common need-to-know for ALL of the information handled within the system.

Notes:

(1) The common need-to-know indicates there is no mandatory requirement for computer security features to provide separation of information within the system.

(2) Other security features (for example, physical, personnel and procedural) shall conform to the requirements for the highest classification level and all category designations of the information handled within the system.

“Evaluation” shall mean: the detailed technical examination, by an appropriate authority, of the security aspects of a system or of a cryptographic or a computer security product.

Notes:

(1) The evaluation investigates the presence of required security functionality and the absence of compromising side effects from such functionality and assesses the incorruptibility of such functionality.

(2) The evaluation determines the extent to which the security requirements of a system, or the security claims of a computer security product, are satisfied and establishes the assurance level of the system or of the cryptographic, or the computer security product's trusted function.

“Information Owner” (IO) shall mean the authority (Head of department) that has the responsibility for creating, processing and the use of information, including for deciding who shall be allowed to access this information.

“Information Security” (INFOSEC) shall mean: The application of security measures to protect information processed, stored or transmitted in communication, information and other electronic systems against loss of confidentiality, integrity or availability, whether accidental or intentional, and to prevent loss of integrity and availability of the systems themselves.

“INFOSEC Measures” include those of computer, transmission, emission and cryptographic security, and the detection, documentation and countering of threats to information and to the systems.

“IT Area” shall mean: an area that contains one or more computers, their local peripheral and storage units, control units and dedicated network and communications equipment.

Note:

This does not include a separate area in which remote peripheral devices or terminals/workstations are located even though those devices are connected to equipment in the IT area.

“IT Network” shall mean: organisation, geographically disseminated, of IT systems interconnected to exchange data, and comprising the components of the interconnected IT systems and their interface with the supporting data or communications networks.

Notes:

(1) An IT network can use the services of one or several communications networks interconnected to exchange data; several IT networks can use the services of a common communications network.

(2) An IT network is called “local” if it links several computers together in the same site.

“IT Network Security Features” include the IT system security features of individual IT systems comprising the network together with those additional components and features associated with the network as such (for example, network communications, security identification and labelling mechanisms and procedures, access controls, programs and audit trails) needed to provide an acceptable level of protection for classified information.

“IT System” shall mean: Assembly of equipment, methods and procedures, and if necessary, personnel, organised to accomplish information processing functions.

Notes:

(1) This is taken to mean an assembly of facilities, configured for handling information within the system;

(2) Such systems may be in support of consultation, command, control, communications, scientific or administrative applications including word processing;

(3) The boundaries of a system will generally be determined as being the elements under the control of a single TSO;

(4) An IT system may contain subsystems some of which are themselves IT systems.

“IT System Security Features” comprise all hardware/firmware/software functions, characteristics, and features; operating procedures, accountability procedures, and access controls, the IT area, remote terminal/workstation area, and the management constraints, physical structure and devices, personnel and communications controls needed to provide an acceptable level of protection for classified information to be handled in an IT system.

“Local Informatics Security Officer” (LISO) shall mean the official in a Commission department who is responsible for coordinating and supervising security measures within his domain.

“Multi-level Security Mode of Operation” shall mean: A mode of operation in which NOT ALL individuals with access to the system are cleared to the highest classification level of information handled within the system, and NOT ALL individuals with access to the system have a common need-to-know for the information handled within the system.

Notes:

(1) This mode of operation permits, currently, the handling of information of different classification levels and of mixed information category designations.

(2) The fact that not all individuals are cleared to the highest levels, associated with a lack of common need-to-know, indicates that there is a requirement for computer security features to provide elective access to, and separation of, information within the system.

“Remote Terminal/workstation Area” shall mean: an area containing some computer equipment, its local peripheral devices or terminals/workstations and any associated communications equipment, separate from an IT area.

“Security Operating Procedures” shall mean the procedures produced by the Technical Systems Owner defining the principles to be adopted on security matters, the operating procedures to be followed and personnel responsibilities.

“SYSTEM-HIGH Security Mode of Operation” shall mean: A mode of operation in which ALL individuals with access to the system are cleared to the highest classification level of information handled within the system, but NOT ALL individuals with access to the system have a common need-to-know for the information handled within the system.

Notes:

(1) The lack of common need-to-know indicates that there is a requirement for computer security features to provide selective access to, and separation of, information within the system.

(2) Other security features (for example, physical, personnel and procedural) shall conform to the requirements for the highest classification level and all category designations of the information handled within the system.

(3) All information handled or being available to a system under this mode of operation, together with output generated, shall be protected as potentially of the information category designation and of the highest classification level being handled until determined otherwise, unless there is an acceptable level of trust that can be placed in any labelling functionality present.

“A System Specific Security Requirement Statement” (SSRS) is a complete and explicit statement of the security principles to be observed and of the detailed security requirements to be met. It is based on Commission security policy and risk assessment, or imposed by parameters covering the operational environment, the lowest level of personnel security clearance, the highest classification of information handled, the security mode of operation or user requirements. The SSRS is an integral part of project documentation submitted to the appropriate authorities for technical, budgetary and security approval purposes. In its final form, the SSRS constitutes a complete statement of what it means for the system to be secure.

“Technical Systems Owner” (TSO) shall mean the authority responsible for the creation, maintenance, operation and closing down of a system.

“Tempest” countermeasures: security measures intended to protect equipment and communication infrastructures against the compromise of classified information through unintentional electromagnetic emissions and through conductivity.

25.3.   Security responsibilities

25.3.1.   General

The advisory responsibilities of the Commission Security Policy Advisory Group, defined in Section 12, include INFOSEC issues. This Group shall organise its activities in such a way that it can provide expert advice on the above issues.

The ►M3  Commission Security Directorate ◄ shall be responsible for issuing detailed INFOSEC provisions, based on the provisions in this chapter.

In case of problems regarding security (incidents, breaches, etc.), immediate action shall be taken by the ►M3  Commission Security Directorate ◄ .

The ►M3  Commission Security Directorate ◄ shall have an INFOSEC Unit.

25.3.2.   The Security accreditation authority (SAA)

The ►M3  Director of the Commission Security Directorate ◄ shall be the Security Accreditation Authority (SAA) for the Commission. The SAA is responsible in the general area of security and in the specialised areas of INFOSEC, Communication security, Crypto security and Tempest security.

The SAA shall be responsible for ensuring the compliance of systems with the Commission's security policy. One of its tasks shall be to grant the approval of a system to handle EU classified information to a defined level of classification in its operational environment.

The jurisdiction of the Commission SAA shall cover all systems in operation within the premises of the Commission. When different components of a system come under the jurisdiction of the Commission SAA and other SAAs, all parties concerned may appoint a joint accreditation board under the coordination of the Commission SAA.

25.3.3.   The INFOSEC Authority (IA)

The ►M3  Director of the Commission Security Directorate ◄ INFOSEC Unit is the INFOSEC Authority for the Commission. The INFOSEC Authority is responsible for:

— 
Providing technical advice and assistance to the SAA;
— 
Assisting in the development of the SSRS;
— 
Reviewing the SSRS to ensure consistency with these security rules and the INFOSEC policies and architecture documents;
— 
Participating in the accreditation panels/boards as required and providing INFOSEC recommendation on accreditation to the SAA;
— 
Providing support to the INFOSEC training and education activities;
— 
Providing technical advice in investigation of INFOSEC related incidents;
— 
Establishing technical policy guidance to ensure that only authorised software is used.

25.3.4.   The Technical Systems Owner (TSO)

The responsibility for the implementation and operation of controls and special security features of a system lies with the owner of that system, the Technical Systems Owner (TSO). For centrally owned systems a Central Informatics Security Officer (CISO) shall be nominated. Each department shall, as appropriate, nominate a Local Informatics Security Officer (LISO). The responsibility of a TSO includes the creation of the Security Operating Procedures (SecOPs) and extends throughout the life cycle of a system from the project concept stage to final disposal.

The TSO shall specify the security standards and practices to be met by the supplier of the system.

The TSO may delegate a part of its responsibilities where appropriate to a Local Informatics Security Officer. A single person may perform the various INFOSEC functions.

25.3.5.   The Information Owner (IO)

The Information Owner (IO) shall be responsible for EUCI (and other information) that is to be introduced, processed and produced in technical systems. He shall define the requirements for access to this information in systems. He may delegate this responsibility to an Information Manager or to a Database Manager within his domain.

25.3.6.   Users

All users shall be responsible for ensuring that their actions do not adversely affect the security of the system that they are using.

25.3.7.   INFOSEC training

INFOSEC education and training shall be available to all staff needing it.

25.4.   Non technical security measures

25.4.1.   Personnel security

Users of the system shall be cleared and have a need-to-know, as appropriate for the classification and content of the information handled within their particular system. Access to certain equipment or information specific to security of systems will call for special clearance issued according to Commission procedures.

The SAA shall designate all sensitive positions and specify the level of clearance and supervision required by all personnel occupying them.

Systems shall be specified and designed in a way that facilitates the allocation of duties and responsibilities to personnel so as to prevent one person having complete knowledge or control of the system security keys points.

IT and remote terminal/workstation areas in which the security of the system can be modified shall not be occupied by only one authorised official or other employee.

The security settings of a system shall only be changed by at least two authorised personnel working in conjunction.

25.4.2.   Physical security

IT and remote terminal/workstation areas (as defined in Section 25.2) in which information classified ►C1  CONFIDENTIEL UE ◄ and above is handled by IT means, or where potential access to such information is possible, shall be established as EU Class I or Class II security areas, as appropriate.

25.4.3.   Control of access to a system

All information and material which allow access control to a system shall be protected under arrangements commensurate with the highest classification and the category designation of the information to which it may give access.

When no longer used for this purpose, the access control information and material shall be destroyed pursuant to the provisions in Section 25.5.4.

25.5.   Technical security measures

25.5.1.   Security of information

It shall be incumbent upon the originator of the information to identify and classify all information-bearing documents, whether they are in the form of hard-copy output or computer storage media. Each page of hard-copy output shall be marked, at the top and bottom, with the classification. Output, whether it is the form of hard-copy or computer storage media shall have the same classification as the highest classification of the information used for its production. The way in which a system is operated may also impact on the classification of outputs of that system.

It shall be incumbent upon the Commission departments and their information holders to consider the problems of aggregation of individual elements of information, and the inferences that can be gained from the related elements, and determine whether or not a higher classification is appropriate to the totality of the information.

The fact that the information may be a brevity code, transmission code or in any form of binary representation does not provide any security protection and should not, therefore, influence the classification of the information.

When information is transferred from one system to another the information shall be protected during transfer and in the receiving system in the manner commensurate with the original classification and category of the information.

All computer storage media shall be handled in a manner commensurate with the highest classification of the stored information or the media label, and at all times shall be appropriately protected.

Re-usable computer storage media used for recording EU classified information shall retain the highest classification for which they have ever been used until that information has been properly downgraded or declassified and the media reclassified accordingly, or the media declassified or destroyed in accordance with a procedure approved by the SAA (see 25.5.4).

25.5.2.   Control and accountability of information

Automatic (audit trails) or manual logs shall be kept as a record of access to information classified ►C1  SECRET UE ◄ and above. These records shall be retained in accordance with these security rules.

EU classified outputs held within the IT area may be handled as one classified item and need not be registered, provided the material is identified, marked with its classification and controlled in an appropriate manner.

Where output is generated from a system handling EU classified information, and transmitted to a remote terminal/workstation area from an IT area, procedures, agreed by the SAA shall be established for controlling and logging the output. For ►C1  SECRET UE ◄ and above, such procedures shall include specific instructions for accountability of the information.

25.5.3.   Handling and control of removable computer storage media

All removable computer storage media classified ►C1  CONFIDENTIEL UE ◄ and above shall be handled as material and general rules will apply. Appropriate identification and classification markings need to be adapted to the specific physical appearances of the media, to enable it to be clearly recognised.

Users shall take the responsibility for ensuring that EU classified information is stored on media with the appropriate classification marking and protection. Procedures shall be established to ensure that, for all levels of EU information, the storage of information on computer storage media is being carried out in accordance with these security rules.

25.5.4.   Declassification and destruction of computer storage media

Computer storage media used for recording EU classified information may be downgraded or declassified in accordance with a procedure to be approved by the SAA.

Computer storage media that have held ►C1  TRES SECRET UE/EU TOP SECRET ◄ or special category information shall not be declassified and reused.

If computer storage media cannot be declassified or is not reusable, it shall be destroyed in accordance with the above mentioned procedure.

25.5.5.   Communications security

The ►M3  Director of the Commission Security Directorate ◄ is the Crypto Authority.

When EU classified information is transmitted electro-magnetically, special measures shall be implemented to protect the confidentiality, integrity and availability of such transmissions. The SAA shall determine the requirements for protecting transmissions from detection and interception. The information being transmitted in a communication system shall be protected based upon the requirements for confidentiality, integrity and availability.

When cryptographic methods are required to provide confidentiality, integrity and availability such methods and its associated products shall be specifically approved for the purpose by the SAA as Crypto Authority.

During transmission, the confidentiality of information classified ►C1  SECRET UE ◄ and above shall be protected by cryptographic methods or products approved by the Member of the Commission responsible for security matters after having consulted the Commission Security Policy Advisory Group. During transmission, the confidentiality of information classified ►C1  CONFIDENTIEL UE ◄ or ►C1  RESTREINT UE ◄ shall be protected by cryptographic methods or products approved by the Commission Crypto Authority after having consulted the Commission Security Policy Advisory Group.

Detailed rules applicable to the transmission of EU classified information shall be set out in specific security instructions approved by the ►M3  Commission Security Directorate ◄ after having consulted the Commission Security Policy Advisory Group.

Under exceptional operational circumstances, information classified ►C1  RESTREINT UE ◄ , ►C1  CONFIDENTIEL UE ◄ and ►C1  SECRET UE ◄ may be transmitted in clear text provided each occasion is explicitly authorised and duly registered by the Information Owner. Such exceptional circumstances are as follows:

(a) 

During impending or actual crisis, conflict, or war situations, and

(b) 

When speed of delivery is of paramount importance, and means of encryption are not available, and it is assessed that the transmitted information cannot be exploited in time to adversely influence operations.

A system shall have the capability of positively denying access to EU classified information at any or all of its remote workstations or terminals, when required either by physical disconnection or by special software features approved by the SAA.

25.5.6.   Installation and radiation security

Initial installation of systems and any major change thereto shall be so specified that installation is carried out by security cleared installers under constant supervision by technically qualified personnel who are cleared for access to EU classified information to the level equivalent to the highest classification which the system is expected to store and handle.

Systems handling information classified ►C1  CONFIDENTIEL UE ◄ and above shall be protected in such a way that their security cannot be threatened by compromising emanations and or conductivity, the study and control of which is referred to as “Tempest”.

Tempest countermeasures shall be reviewed and approved by the Tempest authority (see 25.3.2).

25.6.   Security during handling

25.6.1.   Security operating procedures (SecOPs)

Security Operating Procedures (SecOPs) define the principles to be adopted on security matters, the operating procedures to be followed, and personnel responsibilities. The SecOPs shall be prepared under the responsibility of the Technical Systems Owner (TSO).

25.6.2.   Software protection/configuration management

Security protection of applications programs shall be determined on the basis of an assessment of the security classification of the program itself rather than of the classification of the information it is to process. The software versions in use shall be verified at regular intervals to ensure their integrity and correct functioning.

New or modified versions of software shall not be used for the handling of EU classified information until verified by the TSO.

25.6.3.   Checking for the presence of malicious software/computer viruses

Checking for the presence of malicious software/computer viruses shall be periodically carried out in accordance with the requirements of the SAA.

All computer storage media arriving in the Commission shall be checked for the presence of any malicious software or computer viruses, before being introduced into any system.

25.6.4.   Maintenance

Contracts and procedures for scheduled and on-call maintenance of systems for which a SSRS has been produced shall specify requirements and arrangements for maintenance personnel and their associated equipment entering an IT area.

The requirements shall be clearly stated in the SSRS and the procedures shall be clearly stated in the SecOPs. Contractor maintenance requiring remote access diagnostic procedures shall be permitted only in exceptional circumstances, under stringent security control, and only with the approval of the SAA.

25.7.   Procurement

25.7.1.   General

Any security product to be used with the system to be procured shall either have been evaluated and certified, or currently be under evaluation and certification by an appropriate Evaluation or Certification body of one of the EU Member States against internationally acknowledged criteria (such as the Common Criteria for Information Technology Security Evaluation, re ISO 15408). Specific procedures are required to obtain ACPC approval.

In deciding whether equipment, particularly computer storage media, should be leased rather than purchased, it shall be borne in mind that such equipment, once used for handling EU classified information, cannot be released outside an appropriately secure environment without first being declassified to the approval of the SAA and that such approval may not always be possible.

25.7.2.   Accreditation

All systems for which a SSRS has to be produced, prior to handling EU classified information, shall be accredited by the SAA, based upon information provided in the SSRS, SecOPs and any other relevant documentation. Sub-systems and remote terminals/workstations shall be accredited as part of all the systems to which they are connected. Where a system supports both Commission and other organisations, the Commission and relevant Security Authorities shall mutually agree on the accreditation.

The accreditation process may be carried out in accordance with an accreditation strategy appropriate to the particular system and defined by the SAA.

25.7.3.   Evaluation and certification

Prior to accreditation, in certain instances, the hardware, firmware and software security features of a system shall be evaluated and certified as being capable of safeguarding information at the intended level of classification.

The requirements for evaluation and certification shall be included in system planning, and clearly stated in the SSRS.

The evaluation and certification processes shall be carried out in accordance with approved guidelines and by technically qualified and appropriately cleared personnel acting on behalf of the TSO.

The teams may be provided from a nominated Member State's evaluation or certification authority or its nominated representatives, for example a competent and cleared contractor.

The degree of evaluation and certification processes involved may be lessened (for example, only involving integration aspects) where systems are based on existing nationally evaluated and certified computer security products.

25.7.4.   Routine checking of security features for continued accreditation

The TSO shall establish routine control procedures that shall ensure that all security features of the system are still valid.

The types of change that would give rise to re-accreditation, or requiring the prior approval of the SAA, shall be clearly identified and stated in the SSRS. After any modification, repair or failure that could have affected the security features of the system, the TSO shall ensure that a check is made to ensure the correct operation of the security features. Continued accreditation of the system shall normally depend on the satisfactory completion of the checks.

All systems where security features have been implemented shall be inspected or reviewed on a periodic basis by the SAA. In respect of systems handling ►C1  TRES SECRET UE/EU TOP SECRET ◄ the inspections shall be carried out not less than once annually.

25.8.   Temporary or occasional use

25.8.1.   Security of microcomputers/personal computers

Microcomputers/Personal Computers (PCs) with fixed disks (or other non-volatile storage media), operating either in stand-alone mode or as networked configurations, and portable computing devices (for example, portable PCs and electronic “notebooks”) with fixed hard disks, shall be considered as information storage media in the same sense as floppy diskettes or other removable computer storage media.

This equipment shall be afforded the level of protection, in terms of access, handling, storage and transportation, commensurate with the highest classification level of information ever stored or processed (until downgraded or declassified in accordance with approved procedures).

25.8.2.   Use of privately-owned IT equipment for official Commission work

The use of privately-owned removable computer storage media, software and IT hardware (for example, PCs and portable computing devices) with storage capability shall be prohibited for handling EU classified information.

Privately owned hardware, software and media shall not be brought into any Class I or Class II area where EU classified information is handled without the written authorisation of the ►M3  Director of the Commission Security Directorate ◄ . This authorisation can only be provided for technical reasons in exceptional cases.

25.8.3.   Use of contractor-owned or nationally-supplied IT equipment for official Commission work

The use of contractor-owned IT equipment and software in organisations in support of official Commission work may be permitted by the ►M3  Director of the Commission Security Directorate ◄ . The use of nationally-provided IT equipment and software may also be permitted; in this case, the IT equipment shall be brought under the control of the appropriate Commission inventory. In either case, if the IT equipment is to be used for handling EU classified information, then the SAA shall be consulted in order that the elements of INFOSEC that are applicable to the use of that equipment are properly considered and implemented.

26.   RELEASE OF EU CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS

26.1.1.   Principles regulating the release of EU classified information

The Commission as a college shall decide on release of EU classified information to third States or international organisations on the basis of:

— 
The nature and content of such information;
— 
The recipients' need to know;
— 
The measure of advantages to EU.

The originator of the EU classified information to be released will be asked for its agreement.

These decisions will be taken on a case-by-case basis, depending on:

— 
The desired degree of cooperation with the third States or international organisations concerned;
— 
The confidence that may be placed in them — which ensues from the level of security that would be applied to the EU classified information entrusted to those States or organisations and from the consistency between the security rules applicable there and those applied in EU. The Commission Security Policy Advisory Group will give the Commission its technical opinion on this point.

The acceptance of EU classified information by third States or international organisations will imply an assurance that the information will be used for no purposes other than those motivating the release or exchange of information, and that they will provide the protection required by the Commission.

26.1.2.   Levels

Once the Commission has decided that classified information may be released to or exchanged with a given State or international organisation, it will decide on the level of cooperation that is possible. This will depend in particular on the security policy and regulations applied by that State or organisation.

There are three levels of cooperation:

Level 1

Cooperation with third States or with international organisations whose security policy and regulations are very close to EU's.

Level 2

Cooperation with third States or with international organisations whose security policy and regulations are markedly different from EU's.

Level 3

Occasional cooperation with third States or with international organisations whose policy and security regulations cannot be assessed.

Each level of cooperation shall determine the procedures and security provisions, detailed in Appendices 3, 4, and 5.

26.1.3.   Security agreements

Once the Commission has decided that there is a permanent or long-term need for the exchange of classified information between the Commission and third States or other international organisations, it will draw up “agreements on security procedures for the exchange of classified information” with them, defining the purpose of cooperation and the reciprocal rules on the protection of the information exchanged.

In the case of level 3 occasional cooperation, which by definition is limited in time and purpose, a simple memorandum of understanding defining the nature of the classified information to be exchanged and the reciprocal obligations regarding that information may take the place of the “agreement on procedures for the exchange of classified information” on condition that it is classified no higher than ►C1  RESTREINT UE ◄ .

Draft agreements on security procedures or memoranda of understanding, shall be discussed by the Commission Security Policy Advisory Group before they are presented to the Commission for a decision.

The Member of the Commission responsible for security matters shall request all necessary assistance from Member State NSA's to ensure that the information to be released is used and protected in accordance with the provisions of the agreements on security procedures or memoranda of understanding.

▼M4

27.   STANDARDS MINIMI KOMUNI DWAR IS-SIGURTÀ INDUSTRIJALI

(a)   Introduzzjoni

Din it-Taqsima għandha x'taqsam ma' aspetti ta' sigurtà ta' attivitajiet industrijali li huma uniċi fin-negozjar u l-għoti ta' kuntratti jew ftehimiet ta' għotja li jassenjaw xogħlijiet li jinvolvu, jinkludu u/jew fihom informazzjoni klassifikata ta' l-UE u fil-prestazzjoni tagħhom minn entitajiet industrijali u oħrajn, inkluż ir-rilaxx ta', jew aċċess għal, informazzjoni kklassifikata ta' l-UE waqt il-proċeduri ta' kuntratt jew sejħa għall-proposti (perjodu ta' offerti u negozjati qabel il-kuntratt).

(b)   Definizzjonijiet

Għall-għan ta' dawn l-istandards minimi komuni, għandhom japplikaw id-definizzjonijiet li ġejjin:

(a) 

“Kuntratt ikklassifikat”: kull kuntratt jew ftehim ta' għotja għall-forniment ta' prodotti, l-eżekuzzjoni ta' xogħlijiet, it-trasformazzjoni ta' bini biex isir abitabbli jew għall-għoti ta' servizzi, li l-prestazzjoni tiegħu teħtieġ jew tinvolvi aċċess għal jew il-ħolqien ta' informazzjoni kklasifikata ta' l-UE;

(b) 

“Sottokuntratt ikklassifikat”: kuntratt li jidħol għalih kuntrattur jew benefiċjarju ta' għotja ma' kuntrattur ieħor (jiġifieri s-sottokuntrattur) biex iforni prodotti, jeżegwixxi x-xogħlijiet, jagħti bini jew servizzi, li l-prestazzjoni tiegħu teħtieġ jew tinvolvi aċċess għal jew il-ġenerazzjoni ta' informazzjoni kklassfikata ta' l-UE;

(ċ) 

“Kuntrattur”: operatur ekonomiku jew entità ġuridika li għandu kapaċità legali biex jidħol għal kuntratti jew ikun il-benefiċjarju ta' għotja;

(d) 

“Designated Security Authority (DSA)”: awtorità responsabbli għall-Awtorità Nazzjonali tas-Sigurtà (NSA) ta' Stat Membru ta' l-UE li hija responsabbli biex tikkomunika lill-industrija jew entitajiet oħra l-politika nazzjonali fil-materji kollha ta' sigurtà industrijali u biex tipprovdi direzzjoni u għajnuna fl-implimentazzjoni tagħha. Il-funzjoni tad-DSA tista' tiġi eżegwita mill-NSA;

(e) 

Facility Security Clearance (FSC)”: determinazzjoni amministrattiva minn NSA/DSA li, mill-perspettiva ta' sigurtà, faċilità tista' tagħti protezzjoni ta' sigurtà adegwata lill-informazzjoni kklassifikata ta' l-UE lil-livell ta' klassifikazzjoni speċifiku ta' sigurtà u li lill-membri ta' l-istaff tagħha li għandhom bżonn aċċess għall-informazzjoni kklassifikata ta' l-UE jingħatalhom il-permess u jiġu spjegati lilhom ir-rekwiżiti neċessarji ta' sigurtà biex ikollhom aċċess għal u jipproteġu informazzjoni kklassfikata ta' l-UE;

(f) 

“Entità industrijali jew oħra”: kuntrattur jew sottokuntrattur involut fil-forniment tal-prodotti, l-eżekuzzjoni tax-xogħlijiet jew il-provvista tas-servizzi; dan jista' jinvolvi entitajiet industrijali, ta' servizz kummerċjali, xjentifiċi, ta' riċerka, edukattivi jew ta' żvilupp;

(g) 

“Sigurtà industrijali”: l-applikazzjoni ta' miżuri protettivi u proċeduri biex jimpedixxu, jidentifikaw u jirkupraw fil-każ li tintilef jew tiġi kompromessa informazzjoni kklassifikata ta' l-UE użata minn kuntrattur jew sottokuntrattur fin-negozjati tal-(ta' qabel il-)kuntratt u kuntratti kklassifikati;

(h) 

“National Security Authority (NSA)”: L-Awtorità Governattiva ta' Stat Membru ta' l-UE bir-reponsabbiltà aħħarija għall-protezzjoni ta' informazzjoni kklassifikata ta' l-UE fi ħdan Stat Membru;

(i) 

“Livell globali ta' klassifikazzjoni ta' sigurtà ta' kuntratt”: id-determinazzjoni tal-klassifikazzjoni ta' sigurtà tal-kuntratt kollu jew ta' ftehim ta' għotja, ibbażata fuq il-klassifikazzjoni ta' l-informazzjoni u/jew l-materjal li irid ikun, jew jista' jkun, ġenerat, rilaxxat jew ikun hemm aċċess għalih taħt kull element ta' kuntratt globali jew ftehim ta' għotja. Il-livell globali ta' klassifikazzjoni ta' sigurtà ta' kuntratt m'għandux ikun inferjuri mill-ogħla klassifikazzjoni ta' kull wieħed mill-elementi tiegħu, imma jista' jkun ogħla minħabba l-effett ta' l-aggregat;

(j) 

“Security Aspects Letter (SAL)”: sensiela ta' kundizzjonijiet kuntrattwali speċjali, maħruġa mill-awtorità kontraenti, li tifforma parti integrali minn kuntratt ikklassifikat li jinvolvi aċċess għal jew il-ġenerazzjoni ta' informazzjoni kklassifikata ta' l-UE, u li tidentifika r-rekwiżiti ta' sigurtà jew dawk l-elementi tal-kuntratt ikklassifikat li jeħtieġ protezzjoni ta' sigurtà;

(k) 

“Security Classification Guide (SCG)”: dokument li jiddeskrivi l-elementi ta' programm, kuntratt jew ftehim ta' għotja li huma kklassifikati, li jispeċifika l-livelli ta' klassifikazzjoni ta' sigurtà applikabbli. Il-GKS jista' jiġi estiż tul iż-żmien kollu tal-programm, kuntratt jew ftehim ta'għotja, u l-elementi ta' informazzjoni jistgħu jiġu klassifikati mill-ġdid jew jitbaxxew għall-livell inferjuri. L-SCG għandha tagħmel parti mis-SAL.

(ċ)   Organizzazzjoni

(l) Il-Kummissjoni tista' tassenja permezz ta' kuntratt ikklassifikat xogħlijiet li jinvolvu, jinkludu u/jew li fihom informazzjoni kklassifikata ta' l-UE fuq entitajiet industrijali jew oħrajn rreġistrati fi Stat Membru;

(m) Meta tagħti kuntratti kklassifikati l-Kummissjoni għandha tassigura li jiġu mħarsa r-rekwiżiti kollha li joħorġu minn dawn l-istandards minimi;

(n) Il-Kummissjoni għandha tinvolvi l-NSA jew NSAs relevanti biex tapplika dawn l-istandards minimi dwar is-sigurtà industrijali. L-NSAs jistgħu jirreferu dawn ix-xogħlijiet lil waħda jew iktar mid-DSAs;

(o) Ir-responsabbilità aħħarija għall-protezzjoni ta' informazzjoni kklassifikata ta' l-UE fi ħdan entitajiet industrijali jew oħrajn hija tat-tmexxija ta' dawn l-entitajiet;

(p) Kull meta jingħata kuntratt jew sottokuntratt ikklassifikat fi ħdan l-ambitu ta' dawn l-istandards minimi, il-Kummissjoni u/jew l-NSA/DSA, kif xieraq, tinnotifika immedjatament lill-NSA/DSA ta' l-Istat Membru li fih il-kuntrattur jew sottokuntrattur huwa reġistrat.

(d)   Kuntratti kklassifikati u deċiżjonijiet ta' għotjiet

(q) Il-klassifikazzjoni ta' sigurtà tal-kuntratti jew ftehim ta' għotja għandha tqis il-prinċipji li ġejjin:

— 
Il-Kummissjoni tqis, kif xieraq, dawk l-aspetti tal-kuntratt ikklassifikat li jeħtieġu protezzjoni u l-klassifikazzjoni konsegwenti ta' sigurtà; hija u tagħmel dan, għandha tqis il-klassifikazzjoni oriġinali ta' sigurtà assenjata mill-oriġinatur dwar l-informazzjoni ġenerata qabel ma jingħata l-kuntratt ikklassifikat;
— 
Il-livell globali tal-klassifikazzjoni tal-kuntratt ma jistax ikun inferjuri mill-ogħla klassifikazzjoni ta' xi wieħed mill-elementi tiegħu;
— 
Informazzjoni kklassifikata ta' l-UE iġġenerata taħt attivitajiet kuntrattwali hija klassifikata bi ftehim mal-Gwida Klassifikata ta' Sigurtà (SCG);
— 
Fejn xieraq, il-Kummissjoni hija responsabbli għat-tibdil fil-livell globali ta' klassifikazzjoni tal-kuntratt, jew klassifikazzjoni ta' sigurtà ta' xi wieħed mill-elementi tiegħu, b'konsultazzjoni ma' l-oriġinatur tiegħu, u biex tinforma l-partijiet kollha interessati;
— 
L-informazzjoni kklassifikata rilaxxata lill-kuntrattur jew sottokuntrattur jew ġenerata taħt attività kuntrattwali għandha tintuża biss għall-għanijiet definiti mill-kuntratt ikklassifikat u m'għandhiex tiġi mgħarrfa lill-partijiet terzi mingħajr il-kunsens li jingħata minn qabel bil-miktub ta' l-oriġinatur.

(r) Il-Kummissjoni u l-NSAs/DSAs ta' l-Istati Membri relevanti huma responsabbli li jassiguraw li l-kuntratturi u s-sottokuntratturi li ngħataw kuntratti kklassifikati li jinvolvu informazzjoni kklassifikata bhala CONFIDENTIEL UE jew fuq kollox jieħdu l-miżuri xierqa biex iħarsu informazzjoni kklassifikata ta' l-UE bħal din rilaxxata lil jew iġġenerata minnhom fil-prestazzjoni tal-kuntratt ikklassifikat skond il-liġijiet u r-regolamenti nazzjonali. Jekk ir-rekwiżiti ta' sigurtà ma jiġux rispettati dan jista' jwassal biex il-kuntratt ikklassifikat jiġi tterminat.

(s) L-entititajiet kollha industrijali u oħrajn li jipparteċipaw f'kuntratti kklassifikati li jinvolvu aċċess għall-informazzjoni kklassifikata CONFIDENTIEL UE jew bħal hawn fuq għandu jkollhom FSC nazzjonali. L-FSC jingħata minn NSA/DSA ta' Stat Membru biex jikkonferma li l-faċilità jista' jkollha u tiggarantixxi protezzjoni adegwata ta' sigurtà ta' l-informazzjoni kklassifikata ta' l-UE fil-livell ta' klassifikazzjoni xieraq.

(t) Meta jingħata kuntratt ikklassifikat, Uffiċjal tas-Sigurtà tal-Faċilità (FSO), maħtur mill-amministrazzjoni tal-kuntrattur jew sottokuntrattur, għandu jkun responsabbli biex jitlob Ħruġ ta' Sigurtà tal-Persunal (PSC) għall-persuni kollha impjegati f'entitajiet industrijali u oħrajn reġistrati fi Stat Membru ta' l-UE li għandhom id-dmir li jkollhom aċċess għall-informazzjoni kklassifikata CONFIDENTIEL UE jew bħal hawn fuq suġġetta għall-kuntratt ikklassifikat, li jingħata minn NSA/DSA ta' dak l-Istat Membru skond ir-regolamenti nazzjonali tiegħu.

(u) Kuntratti kklassifikati għandhom jinkludu SAL kif definit fi 27.2.(j). Is-SAL għandha tinkludi l-SCG.

(v) Qabel jinbeda proċediment innegozjat għall-kuntratt ikklassifikat il-Kummissjoni tagħmel kuntatt ma NSA/DSA ta' Stat Membru fejn huma rreġistrati l-entitjtaiet industrijali jew oħrajn ikkonċernati biex tikseb konferma li għandhom FSC validu xieraq fil-livell ta' klassifikazzjoni ta' sigurtà tal-Kuntratt.

(w) L-awtorità kontraenti m'għandhiex tassenja kuntratt ikklassifikat lil operatur ekonomiku preferut qabel ma tirċievi ċ-ċertifikat FSC validu.

(x) Sakemm ma jintalabx mil-liġijiet u regolamenti nazzjonali ta' Stat Membru, l-FSC mhuwiex meħtieġ għall-kuntratti li jinvolvu informazzjoni kklassifikata RESTREINT UE.

(y) Sejħiet għall-offerti fir-rigward ta' kuntratti kklassifikati għandhom jinkludu provvediment li jobbliga operatur ekonomiku li ma jissottomettix offerta jew li ma ntgħażilx biex irodd lura d-dokumenti kollha f'perjodu speċifiku ta' żmien.

(z) Jista' jkun meħtieġ li kuntratturi jinnegozjaw sottokuntratti kklassifikati ma sottokuntratturi f'livelli diversi. Il-kuntrattur huwa responsabbli li jassigura li jidħol għall-attivitajiet kollha ta' sottokuntrattar skond l-istandards minimi komuni inklużi f'din it-Taqsima. Madankollu, il-kuntrattur ma jistax jittrażmetti informazzjoni jew materjal ikklassifikat ta' l-UE lil sottokuntrattur mingħajr il-kunsens minn qabel bil-miktub ta' l-oriġinatur.

(aa) Il-kundizzjonijiet li taħthom kuntrattur jista' jagħti sottokuntratt għandhom jiġu definiti fl-offerta jew fis-sejħa ta' proposti fil-kuntratt ikklassifikat. L-ebda sottokuntratt m'għandu jingħata lill-entitajiet reġistrati f'pajjiż li mhux Stat Membru ta' l-UE mingħajr l-awtorizzazzjoni espliċita bil-miktub tal-Kummissjoni.

(bb) Matul il-perjodu kollu ta' żmien tal-kuntratt ikklassifikat, l-osservanza tad-dispożizzjonijiet kollha tiegħu ta' sigurtà jiġu monitorjati mill-Kummissjoni flimkien ma' l-NSA/DSA relevanti. Kull inċident ta' sigurtà għandu jiġi rrapurtat, skond id-dispożizzjonijiet imfissra f'Parti II, Taqsima 24 tar-Regoli dwar is-Sigurtà. Kull tibdil jew irtirar ta' kull FSC għandu jiġi mmedjatament ikkomuminkat lill-Kummissjoni jew xi NSA/DSA oħra li lilha ġiet notifikata.

(cc) Meta kuntratt jew sottokuntratt ikklassifikat jiġi terminat, il-Kummissjoni u/jew l-NSA/DSA, kif xieraq, tinnotifika immedjatament lill-NSA/DSA ta' l-Istat Membru li fih il-kuntrattur jew sottokuntrattur huwa reġistrat.

(dd) L-istandards minimi komuni f'din it-Taqsima, għandhom ikomplu jiġu osservati, u l-kunfidenzjalità ta' l-informazzjoni kklassifikata għandha tinżamm mill-kuntratturi u sottokuntratturi, wara t-terminazzjoni jew il-konklużjoni tal-kuntratt jew sottokuntratt ikklassifikat.

(ee) Dispożizzjonijiet speċifiċi dwar kif l-informazzjoni kklassifikata tinqered fi tmiem il-kuntratt ikklassifikat jiġi mfisser fl-SAC jew f'xi dispożizzjonijiet relevanti oħra li jidentifikaw rekwiżiti ta' sigurtà.

(ff) L-obbligi u l-kundizzjonijiet li saret referenza għalihom f'din it-Taqsima, japplikaw mutatis mutandis għall-provvedimenti li fihom jingħataw l-għotjiet b'deċiżjoni u b'mod partikolari lill-benefiċjarji ta' għotjiet bħal dawn. Id-deċizjoni ta' l-għotja għandha tiffissa l-obbligi kollha tal-benefiċjarji.

(e)   Żjarat

Għandhom jiġu organizzati, ma' l-NSA/DSA relevanti, żjarat minn staff tal-Kummissjoni fil-kuntest ta' kuntratti kklassifikati lill-entitajiet industrijali jew oħrajn fl-Istati Membri li jwettqu l-kuntratti kklassifikati ta' l-UE. Għandhom jiġu organizzati, bejn l-NSAs/DSAs ikkonċernati, żjarat minn impjegati ta' entitajiet industrijali jew oħrajn fi ħdan il-qafas ta' kuntratt ikklassifikat ta' l-UE. Madankollu, l-NSAs/DSAs involuti f'kuntratt ikklassifikat ta' l-UE jistgħu jiftehmu fuq proċedura li permezz tagħha żjarat minn impjegati f'entitajiet industrijali jew oħrajn jistgħu jiġu miftehma direttament.

(f)   Trażmissjoni u trasport ta' informazzjoni kklassfikata ta' l-UE

(gg) Fir-rigward tat-trażmissjoni ta' informazzjoni kklassfikata ta' l-UE, għandhom japplikaw id-dispożizzjonijiet tal-Parti II, Taqsima 21 tar-Regoli dwar Sigurtà. Biex ikun hemm appoġġ għal dawn id-dispożizzjonijiet, għandha tapplika kull proċedura eżistenti li hemm fis-seħħ fost l-Istati Membri.

(hh) It-trasport internazzjonali ta' materjal ikklassifikat ta' l-UE dwar kuntratti kklassifikati għandu jsir skond il-proċeduri nazzjonali ta' l-Istati Membri. Il-prinċipji li ġejjin għandhom japplikaw meta jiġu eżaminati arranġamenti ta' sigurtà għat-trasport internazzjonali.

— 
Is-sigurtà hija assigurata fl-istadji kollha matul it-trasport u taħt kull ċirkostanza, mill-punt ta' oriġini sad-destinazzjoni finali.
— 
Il-grad ta' protezzjoni mogħti lill-kunsinna jiġi determinat permezz ta' l-ogħla klassifikazzjoni tal-materjal li fiha.
— 
Jingħata FSC, fejn xieraq, lill-kumpaniji li jipprovdu t-trasport. F'każijiet bħal dawn, l-istaff li jimmaniġġja l-kunsinna għandu jkollu l-permess ta' sigurtà skond l-istandards minimi komuni inklużi f'din it-Taqsima.
— 
Il-vjaġġi jsiru minn punt għall-ieħor sa fejn hu possibbli u jintemmu b'ammont ta' ħeffa kif jippermettu ċ-ċirkostanzi.
— 
Fejn hu possibbli, ir-rotot jitħaddmu biss bejn l-Istati Membri ta' l-UE. Ir-rotot li jgħaddu minn pajjiżi mhux Stati Membri ta' l-UE għandhom jithaddmu biss meta awtorizzati mill-NSA/DSA ta' l-Istati ta' dak li bagħat il-kunsinna kif ukoll dak li rċeviha.
— 
Qabel kull moviment ta' materjal ikklassifikat ta' l-UE, għandha titħejja Mappa tat-Trasport minn min bagħat il-kunsinna li tkun approvata mill-NSAs/DSAs ikkonċernati.

▼C1




Appendiċi 1



PARAGUN TAL-KLASSSIFIKAZZJONI TAS-SIGURTÀ NAZZJONALI

Klassifikazzjoni tal-UE

TRES SECRET UE/EU TOP SECRET

SECRET UE

CONFIDENTIEL UE

RESTREINT UE

Klassifikazzjoni tal-WUE

L-OGĦLA SEGRETEZZA FOKALI

WUE SIGRIET

WUE KUNFIDENZJALI

WUE RISTRETT

Klassifikazzjoni tal-Euratom

EURA L-OGĦLA SEGRETEZZA

EURA SIGRIET

EURA KUNFIDENZJALI

EURA RISTRETT

Klassifikazzjoni tan-NATO

COSMIC L-OGĦLA SEGRETEZZA

NATO SIGRIET

NATO KUNFIDENZJALI

NATO RISTRETT

L-Awstrija

Streng Geheim

Geheim

Vertraulich

Eingeschränkt

Il-Belġju

Très Secret

Secret

Confidentiel

Diffusion restreinte

Zeer Geheim

Geheim

Vertrouwelijk

Beperkte Verspreiding

Ċipru

Άκρως Απόρρητο

Απόρρητο

Εμπιστευτικό

Περιορισμένης Χρήσης

Ir-Repubblika Ċeka

Přísn tajné

Tajné

Důvěrné

Vyhrazené

Id-Danimarka

Yderst hemmeligt

Hemmeligt

Fortroligt

Til tjenestebrug

L-Estonja

Täiesti salajane

Salajane

Konfidentsiaalne

Piiratud

Il-Ġermanja

Streng geheim

Geheim

VS (1) — Vertraulich

VS — Nur für den Dienstgebrauch

Il-Greċja

Άκρως Απόρρητο

Απόρρητο

Εμπιστευτικό

Περιορισμένης Χρήσης

Abr: ΑΑΠ

Abr: (ΑΠ)

Αbr: (ΕΜ)

Abr: (ΠΧ)

Il-Finlandja

Erittäin salainen

Erittäin salainen

Salainen

Luottamuksellinen

Franza

Très Secret Défense (2)

Secret Défense

Confidentiel Défense

 

L-Irlanda

Top Secret

Secret

Confidential

Restricted

L-Italja

Segretissimo

Segreto

Riservatissimo

Riservato

Il-Latvja

Sevišķi slepeni

Slepeni

Konfidenciāli

Dienesta vajadzībām

Il-Litwanja

Visiškai slaptai

Slaptai

Konfidencialiai

Riboto naudojimo

Il-Lussemburgu

Très Secret

Secret

Confidentiel

Diffusion restreinte

L-Ungerija

Szigorúan titkos!

Titkos!

Bizalmas!

Korlátozott terjesztésű!

Malta

L-Ghola Segretezza

Sigriet

Kunfidenzjali

Ristrett

L-Olanda

Stg (3). Zeer Geheim

Stg. Geheim

Stg. Confidentieel

Departementaalvertrouwelijk

Il-Polonja

Ściśle Tajne

Tajne

Poufne

Zastrzeżone

Il-Portugall

Muito Secreto

Secreto

Confidencial

Reservado

Is-Slovenja

Strogo tajno

Tajno

Zaupno

SVN Interno

Is-Slovakkja

Prísne tajné

Tajné

Dôverné

Vyhradené

Spanja

Secreto

Reservado

Confidencial

Difusión Limitada

L-Iżvezja

Kvalificerat hemlig

Hemlig

Hemlig

Hemlig

Ir-Renju Unit

Top Secret

Secret

Confidential

Restricted

(1)   VS = Verschlusssache.

(2)   Il-klassifikazzjoni Très Secret Défense, li tkopri l-kwistjonijiet ta’ prijorità governattiva, tista’ tinbidel biss bl-awtorizzazzjoni tal-Prim Ministru.

(3)   Stg. = staatsgeheim.

▼M1




Appendix 2

PRACTICAL CLASSIFICATION GUIDE

This guide is indicative and may not be construed as modifying the substantial provisions laid down in Sections 16, 17, 20 and 21.



Classification

When

Who

Affixing

Downgrading/declassification/destruction

Who

When

►C1  TRES SECRET UE/EU TOP SECRET ◄ :

This classification shall be applied only to infomation and material the unauthorised disclosure of which could cause exceptionally grave prejudice to the essential interests of the European Union or of one or more of its Member States [16.1].

The compromise of assets classified ►C1  TRES SECRET UE/EU TOP SECRET ◄ would be likely to:

— Threaten directly the internal stability of the EU or one of its Member States or one of its Member States or friendly countries

— Cause exceptionally grave damage to relations with friendly governments

— Lead directly to widespread loss of life

— Cause exceptionally grave damage to the operational effectiveness or security of Member States or other contributors' forces, or to the continuing effectiveness of extremely valuable security or intelligence operations

— Cause severe long-term damage to the EU or Member States economy.

Duly authorised persons (originators), Directors General, Heads of Service [17.1]

Originators shall specify a date, period or event when the contents may be downgraded or declassified. [16.2]

Otherwise they shall keep the documents under review every five years at the latest, in order to ensure that the original classification is necessary [17.3].

The classification ►C1  TRES SECRET UE/EU TOP SECRET ◄ shall be affixed to ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents, and where applicable a security designator, and/or the defence marking — ESDP, by mechanical means and by hand [16.4, 16.5, 16.3].

The EU classifications and security designators shall appear at the top and bottom centre of each page, and each page shall be numbered. Each document shall bear a reference number and a date; this reference number shall appear on each page.

If they are to be distributed in several copies, each one shall bear a copy number, which will appear on the first page, together with the total number of pages. All annexes and enclosures shall be listed on the first page [21.1].

Declassification or downgrading rests solely with the originator, who shall inform of the change any subsequent addressees to whom he has sent or copied the document [17.3].

►C1  TRES SECRET UE/EU TOP SECRET ◄ documents shall be destroyed by the Central Registry or sub-registry responsible for them. Each document destroyed shall be listed in a destruction certificate, signed by the ►C1  TRES SECRET UE/EU TOP SECRET ◄ Control Officer and by the Officer witnessing the destruction, who shall be ►C1  TRES SECRET UE/EU TOP SECRET ◄ cleared. A note to this effect shall be made in the logbook. The registry shall keep the destruction certificates, together with the distributions sheet, for a period of ten years [22.5].

Surplus copies and documents no longer needed must be destroyed [22.5].

►C1  TRES SECRET UE/EU TOP SECRET ◄ documents, including all classified waste resulting from the preparation of ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents such as spoiled copies, working drafts, typed notes and carbon paper, shall be destroyed, under the supervision of a ►C1  TRES SECRET UE/EU TOP SECRET ◄ Control Officer, by burning, pulping, shredding or otherwise reducing into an unrecognisable and non-reconstitutable form [22.5].

►C1  SECRET UE ◄ :

This classification shall be applied only to information and material the unauthorised disclosure of which could seriously harm the essential interests of the European Union or of one or more of its Member States [16.1].

The compromise of assets classified ►C1  SECRET UE ◄ would be liked to:

— Raise international tensions

— Seriously damage relations with friendly governments

— Threaten life directly or seriously prejudice public order or individual security or liberty

— Cause serious damage to the operational effectiveness or security of Member States or other contributors' forces, or to the continuing effectiveness of highly valuable security or intelligence operations

— Cause substantial material damage to EU or one of its Member States financial, monetary, economic and commercial interests.

Authorised persons (originators), Directors General, Heads of Service [17.1].

Originators shall specify a date period when the contents may be downgraded or declassified. [16.2]

Otherwise they shall keep the documents under review every five years at the latest, in order to ensure that the original classification is necessary [17.3].

The classification ►C1  SECRET UE ◄ shall be affixed to ►C1  SECRET UE ◄ documents, and where applicable a security designator and/or the defence marking — ESDP, by mechanical means and by hand [16.4, 16.5, 16.3].

The EU classifications and security designators shall appear at the top and bottom centre of each page, and each page shall be numbered. Each document shall bear a reference number and a date; this reference number shall appear on each page.

If they are to be distributed in several copies, each one shall bear a copy number, which will appear on the first page, together with the total number of pages. All annexes and enclosures shall be listed on the first page [21.1].

Declassification and downgrading rests soley with the originator, who shall inform of the change any subsequent addressees to whom he has sent or copied the document [17.3].

►C1  SECRET UE ◄ documents shall be destroyed by the registry responsible for those documents, under the supervision of a security cleared person. ►C1  SECRET UE ◄ documents that are destroyed shall be listed on signed destruction certificates to be retained by the Registry, together with the destruction forms, for at least three years [22.5].

Surplus copies and documents no longer needed must be destroyed [22.5].

►C1  SECRET UE ◄ documents, including all classified waste resulting from the preparation of ►C1  SECRET UE ◄ documents such as spoiled copies, working drafts, typed notes and carbon paper, shall be destroyed by burning, pulping, shredding or otherwise reducing into an unrecognisable and non-reconstitutable form [22.5].

►C1  CONFIDENTIEL UE ◄ :

This classification shall be applied to information and material the unauthorised disclosure of which would harm the essential interests of the European Union or of one or more of its Member States [16.1].

The compromise of assets classified ►C1  CONFIDENTIEL UE ◄ would be likely to:

— Materially damage diplomatic relations, that is, cause formal protest or other sanctions;

— Prejudice individual security or liberty;

— Cause damage to the operational effectiveness or security of Member States or other contributors' forces, or to the effectiveness of valuable security or intelligence operations;

— Substantially undermine the financial viability of major organisations;

— Impede the investigation or facilitate the commission of serious crime;

— Work substantially against EU or Member States financial, monetary, economic and commercial interests;

— Seriously impede the development or operation of major EU policies;

— Shut down or otherwise substantially disrupt significant EU activities.

Authorised persons (originators), Directors General and Heads of Service [17.1].

Originators shall specify a date or period when the contents may be downgraded or declassified. Otherwise they shall keep the documents under review every five years at the latest, in order to ensure that the original classification is necessary [17.3].

The classification ►C1  CONFIDENTIEL UE ◄ shall be affixed to ►C1  CONFIDENTIEL UE ◄ documents, and where applicable a security designator and/or the defence-marking — ESDP introduced, by mechanical means and by hand or by printing on pre-stamped, registered paper [16.4, 16.5, 16.3].

The EU classifications shall appear at the top and bottom centre on each page, and each page shall be numbered. Each document shall bear a reference number and a date.

All annexes and enclosures shall be listed on the first page [21.1].

Declassification and downgrading rests solely with the originator, who shall inform of the change any subsequent addressees to whom he has sent or copied the document [17.3].

►C1  CONFIDENTIEL UE ◄ documents shall be destroyed by the registry responsible for those documents, under the supervision of a cleared person. Their destruction shall be recorded in accordance with national regulations and, in the case of Commission or EU decentralised agencies, according to instructions from the ►M3  Member of the Commission responsible for security matters ◄ [22.5].

Surplus copies and documents no longer needed must be destroyed [22.5].

►C1  CONFIDENTIEL UE ◄ documents, including all classified waste resulting from the preparation of ►C1  CONFIDENTIEL UE ◄ documents such as spoiled copies, working drafts, typed notes and carbon paper, shall be destroyed by burning, pulping, shredding or otherwise reducing into an unrecognisable and non-reconstitutable form [22.5].

►C1  RESTREINT UE ◄ :

This classification shall be applied to information and material the unauthorised disclosure of which could be disadvantageous to the interests of the EU or of one or more of its Member States [16.1].

The compromise of assets classified ►C1  RESTREINT UE ◄ would be likely to:

— Adversely affect diplomatic relations

— Cause substantial distress to individuals

— Make it more difficult to maintain the operational effectiveness or security of Member States or other contributors' forces

— Cause financial loss or facilitate improper gain or advantage for individuals or companies

— Breach proper undertakings to maintain the confidence of information provided by third parties

— Breach statutory restrictions on disclosure of information

— Prejudice the investigation or facilitate the commission of crime

— Disadvantage EU or Member States in commercial or policy negotiations with others

— Impede the effective development or operation of EU policies

— Undermine the proper management of the EU and its operations.

Authorised persons (originators), Directors General, Heads of Service [17.1].

Originators shall specify a date, period or event when the contents may be downgraded or declassified [16.2]. Otherwise they shall keep the documents under review every five years at the latest, in order to ensure that the original classification is necessary [17.3].

The classification ►C1  RESTREINT UE ◄ shall be affixed to ►C1  RESTREINT UE ◄ documents, and where applicable a security designator and/or the defence marking — ESDP, by mechanical or electronic means [16.4, 16.5, 16.3].

The EU classification and security designators shall appear at the top of the first page, and each page shall be numbered. Each document shall bear a reference number and a date [21.1].

Declassification rests solely with the originator, who shall inform of the change any subsequent addressees to whom they have sent or copied the document [17.3].

►C1  RESTREINT UE ◄ documents shall be destroyed by the registry responsible for the document or by the user, according to instructions from the ►M3  Member of the Commission responsible for security matters ◄ [22.5].

Surplus copies and documents no longer needed must be destroyed [22.5].




Appendix 3

Guidelines for the release of EU classified information to third States or international organisations: Level 1 cooperation

PROCEDURES

1. The authority to release EU classified information to countries that are not members of the European Union or to other international organisations, whose security policy and regulations are comparable to EU's, lies with the Commission as a college.

2. Pending the conclusion of a security agreement, the Member of the Commission responsible for security matters is competent to examine requests for the release of EU classified information.

3. In doing so he/she:

— 
Shall seek the opinions of the originators of the EUCI to be released;
— 
Shall establish the necessary contacts with the security bodies of the beneficiary countries or international organisations to verify whether their security policy and provisions are such as to guarantee that the classified information released will be protected in accordance with these security provisions;
— 
Shall seek the opinion of the Commission Security Policy Advisory Group as to the confidence that can be placed in the beneficiary States or international bodies.

4. The Member of the Commission responsible for security matters shall forward the request and the Commission Security Policy Advisory Group's opinion to the Commission for a decision.

SECURITY PROVISIONS TO BE APPLIED BY BENEFICIARIES

5. The Member of the Commission responsible for security matters shall notify the beneficiary States or international organisations of the Commission's decision to authorise the release of EU classified information.

6. The decision to release shall come into force only when the beneficiaries have given a written assurance that they will:

— 
Use the information for no other than the agreed purposes;
— 
Protect the information in accordance with these security provisions and in particular the special rules set out below.

7.   Personnel

(a) 

The number of officials having access to the EU classified information shall be strictly limited, based on the need-to-know principle, to those persons whose duties require such access.

(b) 

All officials or nationals authorised to have access to information classified ►C1  CONFIDENTIEL UE ◄ or above shall hold either a security certificate at the appropriate level or the equivalent security clearance, either one being issued by their own State's government.

8.   Transmission of documents

(a) 

The practical procedures for the transmission of documents shall be decided by agreement. Pending the conclusion of such an agreement the provisions of Section 21 apply. The agreement shall in particular specify the registries to which EU classified information is to be forwarded.

(b) 

If the classified information whose release is authorised by the Commission includes ►C1  TRES SECRET UE/EU TOP SECRET ◄ , the beneficiary State or international organisation shall set up a central EU registry and, if necessary, EU sub-registries. These registries shall apply strictly equivalent provisions as those of Section 22 of these security provisions.

9.   Registration

As soon as a registry receives a EU document classified ►C1  CONFIDENTIEL UE ◄ or above, it shall list the document in a special register held by the organisation, with columns for the date received, particulars of the document (date, reference and copy number), its classification, title, the recipient's name or title, the date of return of the receipt and the date the document is returned to the EU originator or is destroyed.

10.   Destruction

(a) 

EU classified documents shall be destroyed in accordance with the instructions set out in Section 22 of these security provisions. Copies of the destruction certificates for ►C1  SECRET UE ◄ and ►C1  TRES SECRET UE/EU TOP SECRET ◄ documents shall be sent to the EU registry that has forwarded the documents.

(b) 

EU classified documents shall be included in emergency destruction plans for the beneficiary bodies' own classified documents.

11.   Protection of documents

Every step shall be taken to prevent unauthorised persons from having access to EU classified information.

12.   Copies, translations and extracts

No photocopies or translation shall be made of a document classified ►C1  CONFIDENTIEL UE ◄ or ►C1  SECRET UE ◄ , or extracts taken, without the authorisation of the head of the security organisation concerned, who shall register and check those copies, translations or extracts and stamp them as necessary.

The reproduction or translation of a ►C1  TRES SECRET UE/EU TOP SECRET ◄ document shall be authorised only by the originating authority, which shall specify the number of copies authorised; if the originating authority cannot be determined, the request shall be referred to the ►M3  Commission Security Directorate ◄ .

13.   Breaches of security

When a breach of security involving a EU classified document has taken place or is suspected, the following action shall be taken immediately, subject to the conclusion of a security agreement:

(a) 

Carry out an investigation to establish the circumstances of the breach of security;

(b) 

Notify the ►M3  Commission Security Directorate ◄ , the relevant National Security Authority and the originating authority, or clearly state that the latter has not been notified if this has not been done;

(c) 

Take action to minimise the effects of the breach of security;

(d) 

Reconsider and implement measures to prevent any recurrence;

(e) 

Implement any measures recommended by the ►M3  Commission Security Directorate ◄ to prevent a recurrence.

14.   Inspections

The ►M3  Commission Security Directorate ◄ shall be permitted, by agreement with the States or international organisations concerned, to carry out an assessment of the effectiveness of measures for the protection of the EU classified information released.

15.   Reporting

Subject to the conclusion of a security agreement, as long as the State or international organisation holds EU classified information, it shall submit a yearly report, by a date specified when the authorisation to release the information is given, confirming that these security provisions have been complied with.




Appendix 4

Guidelines for the release of EU classified information to third States or international organisations: Level 2 cooperation

PROCEDURES

1. The authority to release EU classified information to third States or international organisations whose security policy and regulations are markedly different from EU's lies with the originator. The authority to release EUCI created within the Commission lies with the Commission as a college.

2. In principle, it is restricted to information classified up to and including ►C1  SECRET UE ◄ ; it excludes classified information protected by special security designators or markings.

3. Pending the conclusion of a security agreement, the Member of the Commission responsible for security matters is competent to examine requests for the release of EU classified information.

4. In doing so he/she:

— 
Shall seek the opinions of the originators of the EUCI to be released;
— 
Shall establish the necessary contacts with the security bodies of the beneficiary States or international organisations to find out information on their security policy and provisions, and in particular to draw up a table comparing the classifications applicable in the EU and in the State or organisation concerned;
— 
Shall arrange for a meeting of the Commission Security Policy Advisory Group or, under a silent procedure if necessary, enquire from the member States' National Security Authorities with a view to obtaining the Commission Security Policy Advisory Group's opinion.

5. The Commission Security Policy Advisory Group's opinion shall be on the following:

— 
The confidence that can be placed in the beneficiary States or international organisations with a view to assessing the security risks incurred by the EU or its Member States;
— 
An assessment of the beneficiaries' ability to protect classified information released by EU;
— 
Proposals as to practical procedures for the handling of the EU classified information (providing expurgated versions of a text, for example) and documents transmitted (retaining or deleting EU classification headings, specific markings, etc.);
— 
Downgrading or declassification before the information is released to the beneficiary countries or international organisations.

6. The Member of the Commission responsible for security matters shall forward the request and the Commission Security Policy Advisory Group's opinion to the Commission for a decision.

SECURITY RULES TO BE APPLIED BY BENEFICIARIES

7. The Member of the Commission responsible for security matters shall notify the beneficiary States or international organisations of the Commission's decision to authorise the release of EU classified information and of its restrictions.

8. The decision to release shall come into force only when the beneficiaries have given a written assurance that they will:

— 
Use the information for no other than the agreed purposes;
— 
Protect the information in accordance with the provisions laid down by the Commission.

9. The following rules of protection shall apply unless the Commission, having obtained the Commission Security Policy Advisory Group's technical opinion, decides on a particular procedure for the handling of EU classified documents (deleting mention of the EU classification, specific marking, etc.).

10.   Personnel

(a) 

The number of officials having access to EU classified information shall be strictly limited, based on the need-to-know principle, to those persons whose duties require such access;

(b) 

All officials or nationals authorised to have access to the classified information released by the Commission shall have a national security clearance or authorisation for access, to an appropriate level equivalent to that of the EU, as defined in the comparative table;

(c) 

These national security clearances or authorisations shall be forwarded to the ►M3  Director of the Commission Security Directorate ◄ for information.

11.   Transmission of documents

The practical procedures for the transmission of documents shall be decided by agreement. Pending the conclusion of such an agreement the provisions of Section 21 shall apply. The agreement shall in particular specify the registries to which EU classified information is to be forwarded and the precise addresses to which the documents shall be forwarded as well as the courier or mail services used for the transmission of the EU classified information.

12.   Registration on arrival

The addressee State's NSA or its equivalent in the State receiving on behalf of its government the classified information forwarded by the Commission, or the security bureau of the recipient international organisation, shall open a special register to record EU classified information on its receipt. The Register shall contain columns indicating the date received, particulars of the document (date, reference and copy number), its classification, title, the addressee's name or title, the date of return of the receipt and the date of return of the document to EU or its destruction.

13.   Return of documents

When the recipient returns a classified document to the Commission, it shall proceed as indicated in the paragraph “Transmission of documents” above.

14.   Protection

(a) 

When the documents are not in use, they shall be stored in a security container that is approved for the storage of nationally-classified material of the same classification. The container shall bear no indication of its contents, which shall be accessible only to persons authorised to handle EU classified information. Where combination locks are used, the combination shall be known only to those officials in the State or organisation having authorised access to the EU classified information stored in the container and shall be changed every six months, or sooner on the transfer of an official, on withdrawal of the security clearance of one of the officials knowing the combination or if there is a risk of compromise.

(b) 

EU classified documents shall be removed from the security container only by those officials cleared for access to the EU classified documents and having need-to-know. They shall remain responsible for the safe custody of those documents as long as they are in their possession and, in particular, for ensuring that no unauthorised person has access to the documents. They shall also ensure that the documents are stored in a security container when they have finished consulting them and outside working hours.

(c) 

No photocopies shall be made of a document classified ►C1  CONFIDENTIEL UE ◄ or above, nor extracts taken, without the authorisation of the ►M3  Commission Security Directorate ◄ .

(d) 

The procedure for the rapid and total destruction of the documents in an emergency shall be defined and confirmed with the ►M3  Commission Security Directorate ◄ .

15.   Physical security

(a) 

When not in use, security containers used for storage of EU classified documents shall be kept locked at all times;

(b) 

When it is necessary for maintenance or cleaning staff to enter or work in a room which houses such security containers, they shall be escorted at all times by a member of the State's or organisation's security service or by the official more specifically responsible for supervising the security of the room;

(c) 

Outside normal working hours (at night, at weekends and on public holidays) the security containers containing EU classified documents shall be protected either by a guard or by an automatic alarm system.

16.   Breaches of security

When a breach of security involving a EU classified document has taken place or is suspected, the following action shall be taken immediately:

(a) 

Forward a report immediately to the ►M3  Commission Security Directorate ◄ or the NSA of the Member State that has taken the initiative in forwarding documents (with a copy to the ►M3  Commission Security Directorate ◄ );

(b) 

Conduct an enquiry, on completion of which a full report shall be submitted to the security body (see (a) above). The requisite measures to remedy the situation shall then be adopted.

17.   Inspections

The ►M3  Commission Security Directorate ◄ shall be permitted, by agreement with the States or international organisations concerned, to carry out an assessment of the effectiveness of measures for the protection of the EU classified information released.

18.   Reporting

Subject to the conclusion of a security agreement, as long as the State or international organisation holds EU classified information, it shall submit a yearly report, by a date specified when the authorisation to release the information is given, confirming that these security provisions have been complied with.




Appendix 5

Guidelines for the release of EU classified information to third States or international organisations: Level 3 cooperation

PROCEDURES

1. From time to time, the Commission may wish to cooperate in certain special circumstances with States or organisations that cannot give the assurances required by these security rules, but that cooperation may call for the release of EU classified information.

2. The authority to release EU classified information to third States or international organisations whose security policy and regulations are markedly different from EU's lies with the originator. The authority to release EUCI created within the Commission lies with the Commission as a college.

In principle, it is restricted to information classified up to and including ►C1  SECRET UE ◄ ; it excludes classified information protected by special security designators or markings.

3. The Commission shall consider the wisdom of releasing classified information, assess the beneficiaries' need to know and decide on the nature of the classified information that may be communicated.

4. If the Commission is in favour, the Member of the Commission responsible for security matters

— 
Shall seek the opinions of the originators of the EUCI to be released;
— 
Shall arrange for a meeting of the Commission Security Policy Advisory Group or, under a silent procedure if necessary, enquire from the Member States' National Security Authorities with a view to obtaining the Commission Security Policy Advisory Group's opinion.

5. The Commission Security Policy Advisory Group's opinion shall be on the following:

(a) 

An evaluation of the security risks incurred by EU or its Member States;

(b) 

The level of classification of the information that may be released;

(c) 

Downgrading or declassification before the information is released;

(d) 

Procedures for handling the documents to be released (see paragraph below);

(e) 

The possible methods of transmission (use of public postal services, public or secure telecommunications systems, diplomatic bag, cleared couriers, etc.).

6. The documents released to the States or organisations covered in this Appendix shall, in principle, be prepared without reference to the source or an EU classification. The Commission Security Policy Advisory Group may recommend:

— 
The use of a specific marking or codename;
— 
The use of a specific system of classification linking the sensitivity of the information to the control measures required of the beneficiary methods of transmission of the documents.

7. The ►M3  Member of the Commission responsible for security matters ◄ shall forward the Commission Security Policy Advisory Group's opinion to the Commission for a decision.

8. Once the Commission has approved the release of EU classified information and the practical implementing procedures, the ►M3  Commission Security Directorate ◄ shall establish the necessary contact with the security body of the State or organisation concerned to facilitate the application of the security measures envisaged.

9. The Member of the Commission responsible for security matters shall inform the Member States about the nature and classification of the information, listing the organisations and countries to which it may be released, as decided by the Commission.

10. The ►M3  Commission Security Directorate ◄ shall take all the necessary measures to facilitate any consequent damage assessment and review of procedures.

Whenever the conditions of cooperation change, the Commission shall reconsider the issue.

SECURITY PROVISIONS TO BE APPLIED BY BENEFICIARIES

11. The Member of the Commission responsible for security matters shall notify the beneficiary States or international organisations of the Commission's decision to authorise the release of EU classified information, together with the detailed rules of protection proposed by the Commission Security Policy Advisory Group and approved by the Commission.

12. The decision shall come into force only when the beneficiaries have given a written assurance that they will:

— 
Use the information for no other purpose than the cooperation decided by the Commission;
— 
Offer the information the protection required by the Commission.

13.   Transmission of documents

(a) 

The practical procedures for the transmission of documents shall be agreed between the ►M3  Commission Security Directorate ◄ and the security bodies of the recipient States or international organisations. They shall in particular specify the precise addresses to which the documents must be forwarded.

(b) 

Documents classified ►C1  CONFIDENTIEL UE ◄ and higher shall be transmitted under double cover. The inner envelope shall bear the specific stamp or codename decided upon and a mention of the special classification approved for the document. A receipt form shall be enclosed for each classified document. The receipt form, which shall not itself be classified, shall quote only the particulars of the document (its reference, date, copy number) and its language, not the title.

(c) 

The inner envelope shall then be placed in the outer envelope, which shall carry a package number for receipting purposes. The outer envelope shall not bear a security classification.

(d) 

A receipt showing the package number shall always be given to the couriers.

14.   Registration on arrival

The addressee State's NSA or its equivalent in the State receiving the classified information forwarded by the Commission on behalf of its government, or the security bureau of the recipient international organisation, shall open a special register to record EU classified information on its receipt. The Register shall contain columns indicating the date received, particulars of the document (date, reference and copy number), its classification, title, the addressee's name or title, the date of return of the receipt and the date of return of the receipt to EU and the date of destruction of the document.

15.   Use and protection of the classified information exchanged

(a) 

Information at the level of ►C1  SECRET UE ◄ shall be handled by specifically designated officials, authorised to have access to information with this classification. It shall be stored in good quality security cabinets that can be opened only by the persons authorised to have access to the information they contain. The areas in which those cabinets are located shall be permanently guarded and a system of verification shall be set up to ensure that only duly authorised persons are allowed to enter. ►C1  SECRET UE ◄ -level information shall be forwarded by diplomatic bag, secure mail services or by secure telecommunications. An ►C1  SECRET UE ◄ document shall be copied only with the originating authority's written agreement. All copies shall be registered and monitored. Receipts shall be issued for all operations relating to ►C1  SECRET UE ◄ documents;

(b) 

►C1  CONFIDENTIEL UE ◄ shall be handled by duly designated officials authorised to be informed on the subject. Documents shall be stored in locked security cabinets in controlled areas;

►C1  CONFIDENTIEL UE ◄ information shall be forwarded by diplomatic bag, military mail services and secure telecommunications. Copies may be made by the recipient body, their number and distribution being recorded in special registers;

(c) 

►C1  RESTREINT UE ◄ information shall be handled in premises that are not accessible to unauthorised personnel and stored in locked containers. Documents may be forwarded by public postal services as registered mail in a double envelope and, in emergency situations during operations, by the unprotected public telecommunications systems. The recipients may make copies;

(d) 

Unclassified information shall not call for special protection measures and may be forwarded by mail and public telecommunications systems. The addressees may make copies.

16.   Destruction

Documents no longer needed shall be destroyed. In the case of ►C1  RESTREINT UE ◄ and ►C1  CONFIDENTIEL UE ◄ documents, an appropriate note shall be entered in the special registers. In the case of ►C1  SECRET UE ◄ documents, destruction certificates shall be issued and signed by two persons witnessing their destruction.

17.   Breaches of security

If ►C1  CONFIDENTIEL UE ◄ or ►C1  SECRET UE ◄ information is compromised or there is a suspicion of compromise, the NSA of the State or the head of security in the organisation shall conduct an enquiry into the circumstances of the compromise. The ►M3  Commission Security Directorate ◄ shall be notified of its results. The necessary steps shall be taken to remedy inadequate procedures or storage methods if they have given rise to the compromise.




Appendix 6



LIST OF ABBREVIATIONS

ACPC

Advisory Committee on Procurement and Contracts

CrA

Crypto Authority

CISO

Central Informatics Security Officer

COMPUSEC

Computer Security

COMSEC

Communication Security

CSD

►M3  Commission Security Directorate ◄

▼M4

DSA

Designated Security Authority

▼M1

ESDP

European Security and Defence Policy

EUCI

EU classified information

▼M4

FSC

Facility Security Clearance

FSO

Facility Security Officer

▼M1

IA

INFOSEC Authority

INFOSEC

Information Security

IO

Information Owner

ISO

International Organisation for Standardisation

IT

Information Technology

LISO

Local Informatics Security Officer

LSO

Local Security Officer

MSO

Meeting Security Officer

NSA

National Security Authority

PC

Personal Computer

▼M4

PSC

Personnel Security Clearance

▼M1

RCO

Registry Control Officer

SAA

Security Accreditation Authority

▼M4

SAL

Security Aspects Letter

SCG

Security Classification Guide

▼M1

SecOPS

Security Operating Procedures

SSRS

Specific Security Requirement Statement

TA

Tempest Authority

TSO

Technical Systems Owner

▼M5




Regoli dettaljati għall-applikazzjoni tar-Regolament (KE) Nru 1049/2001 tal-Parlament Ewropew u tal-Kunsill li jirrigwardaw l-aċċess pubbliku għad-dokumenti tal-Parlament Ewropew, tal-Kunsill u tal-Kummissjoni

Billi:

(1)

Skond l-Artikolu 255(2) tat-Trattat UE, il-Parlament Ewropew u l-Kunsill adottaw ir-Regolament (KE) Nru 1049/2001 fir-rigward ta' aċċess pubbliku għad-dokumenti tal-Parlament Ewropew, tal-Kunsill u tal-Kummissjoni. ( 16 )

(2)

Skond l-Artikolu 255(3) tat-Trattat, l-Artikolu 18 tar-Regolament, li jippreskrivi l-prinċipji ġenerali u l-limiti għall-eżerċizzju tad-dritt ta' aċċess għad-dokumenti, jipprovdi li kull istituzzjoni għandha tadatta r-Regoli tagħha ta' Proċedura għad-dispożizzjonijiet tar-Regolament,



Artikolu 1

Benefiċjarji

Iċ-ċittadin ta' l-Unjoni u persuni naturali jew ġuridiċi li joqgħodu jew li għandhom l-uffiċċju reġistrat tagħhom fi Stat Membru għandhom jeżerċitaw id-dritt tagħhom ta' aċċess għad-dokumenti tal-Kummissjoni taħt l-Artikolu 255(1) tat-Trattat u l-Artikolu 2(1) tar-Regolament (KE) Nru 1049/2001 skond dawn ir-regoli dettaljati. Dan id-dritt ta' aċċess jikkonċerna dokumenti miżmuma mill-Kummissjoni, jiġifieri, dokumenti mħejjija jew riċevuti minnha u fil-pussess tagħha.

Skond l-Artikolu 2(2) tar-Regolament (KE) Nru 1049/2001, iċ-ċittadini ta' pajjiżi terzi li ma joqgħodux fi Stat Membru u persuni legali li m'humiex reġistrati f'xi wieħed mill-Istati Membri għandhom igawdu d-dritt ta' l-aċċess għad-dokumenti tal-Kummissjoni fuq l-istess termini bħall-benefiċjarji msemmija fl-Artikolu 255(1) tat-Trattat.

Madankollu, skond l-Artikolu 195(1) tat-Trattat, m'għandux ikollhom l-għażla li jagħmlu lment quddiem l-Ombudsman Ewropew. Iżda jekk il-Kummissjoni tirrifjutalhom għal kollox jew f'parti aċċess għal dokument wara applikazzjoni konfermatorja, huma jisgħtu jġibu azzjoni quddiem il-Qorti tal-Prim Istanza tal-Komunitajiet Ewropej skond ir-raba' paragrafu ta' l-Artikolu 230 tat-Trattat.

Artikolu 2

Applikazzjonijiet għall-aċċess

L-applikazzjonijiet kollha għal aċċess għal dokument għandhom jintbagħtu bil-posta, fax jew posta elettronika lis-Segretarjat Ġenerali tal-Kummissjoni jew lid-Direttorat Ġenerali jew dipartiment. L-indirizzi li fihom għandhom jintbagħtu l-applikazzjonijiet għandhom jiġu ppublikati fil-gwida prattika msemmija fl-Artikolu 8 ta' dawn ir-Regoli.

Il-Kummissjoni għandha twieġeb applikazzjonijiet iniżjali u konfermatorji għall-aċċess fi żmien ħmistax-il jum tax-xogħol mid-data tar-reġistrazzjoni ta' l-applikazzjoni. Fil-każ ta' applikazzjonijiet komplessi jew goffi, il-limitu ta' żmien jista' jiġi mtwawwal bi ħmistax-il jum tax-xogħol. Għandhom jingħataw raġunijiet għal kull estensjoni tal-limitu ta' żmien u dan għandu jiġi notifikat minn qabel lill-applikant.

Jekk applikazzjoni tkun impreċiża, kif imsemmi fl-Artikolu 6(2) tar-Regolament (KE) Nru 1049/2001, il-Kummissjoni għandha tistieden lill-applikant biex jipprovdi informazzjoni addizzjonali li tagħmilha possibbli li jiġu identifikati d-dokumenti mitluba; il-limitu taż-żmien għat-tweġiba għandu jibda jgħodd biss miż-żmien meta l-Kummissjoni jkollha din l-informazzjoni.

Kull deċiżjoni wkoll jekk tkun parzjalment negattiva għandha tiddikjara r-raġuni għar-rifjut ibbażat fuq waħda mill-eċċezzjonijiet elenkati fl-Artikolu 4 tar-Regolament (KE) Nru 1049/2001 u għandha tinforma lill-applikant bir-rimedji disponibbli għalih.

Artikolu 3

Trattament ta' applikazzjonijiet inizjali

Mingħajr preġudizzju għall-Artikolu 9 ta' dawn ir-Regoli, malli l-applikazzjoni tiġi reġistrata, għandha tintbagħat konferma lill-applikant li l-applikazzjoni tkun ġiet riċevuta, sakemm ma tkunx tista' tintbagħat tweġiba mill-ewwel.

Il-konferma li tkun ġiet riċevuta u t-tweġiba għandhom jintbagħtu bil-miktub, fejn xieraq, b'mezzi elettroniċi.

L-applikant għandu jiġi nfurmat bit-tweġiba għall-applikazzjoni tiegħu jew mid-Direttorat Ġenerali jew mill-kap tad-dipartiment konċernat, jew minn Direttur inkarigat għal dan il-għan mis-Segretarjat Ġenerali jew minn Direttur inkarigat fl-OLAF fejn l-applikazzjoni tikkonċerna dokumenti li jikkonċernaw attivitajiet ta' l-OLAF imsemmija fl-Artikolu 2(1) u (2) tad-Deċiżjoni tal-Kummissjoni 1999/352/KE, ECSC, Euratom ( 17 ) li jistabbilixxi l-OLAF, jew minn membru ta' l-uffiċċju li jkunu nkarigaw għal dan il-għan.

Kull tweġiba wkoll jekk tkun parzjalment negattiva għandha tinforma lill-applikant bid-drittijiet tiegħu li jibgħat, fi żmien ħmistax-il jum tax-xogħol minn mindu jirċievi t-tweġiba, applikazzjoni konfermatorja lis-Segretarjat Ġenerali tal-Kummissjoni jew lid-Direttur ta' l-OLAF fejn l-applikazzjoni konfermatorja tikkonċerna dokumenti li jikkonċernaw attivitajiet ta' l-OLAF imsemmija fl-Artikolu 2(1) u (2) tad-Deċiżjoni 1999/352/EC, ECSC, Euratom.

Artikolu 4

Trattament ta' applikazzjonijiet konfermatorji

Skond l-Artikolu 14 tar-Regoli ta' Proċedura tal-Kummissjoni, is-setgħa li jittieħdu deċiżjonijiet dwar applikazzjonijiet konfermatorji hija delegata lis-Segretarjat Ġenerali. Madankollu, fejn l-applikazzjoni konfermatorja tikkonċerna dokumenti li jikkonċernaw attivitajiet ta' l-OLAF imsemmija fl-Artikolu 2(1) u (2) tad-Deċiżjoni 1999/352/EC, ECSC, Euratom, is-setgħa tat-teħid tad-deċiżjonijiet hija delegata lid-Direttur ta' l-OLAF.

Id-Direttorat Ġenerali jew dipartiment għandu jassisti lis-Segretarjat Ġenerali fil-preparazzjoni tad-deċiżjoni.

Id-deċiżjoni għandha tittieħed mis-Segretarjat Ġenerali jew mid-Direttur ta' l-OLAF wara ftehim mas-Servizz Legali.

Id-deċiżjoni għandha tiġi notifikata lill-applikant bil-miktub, fejn xieraq b'mezzi elettroniċi, u tinfurmah bid-dritt tiegħu li jiftaħ kawża duddiem il-Qorti ta' Prim' Istanza jew li jiddeposita lment ma' l-Ombudsman Ewropew.

Artikolu 5

Konsultazzjonijiet

1.  Fejn il-Kummissjoni tirċievi applikazzjoni għal aċċess għal dokument fil-pussess tagħha iżda li joriġina minn parti terza, id-Direttorat Ġenerali jew dipartiment li jkollu fil-pussess tiegħu d-dokument għandu jivverifika jekk tapplikax xi waħda mill-eċċezzjonijiet li għalihom jipprovdi l-Artikolu 4 tar-Regolament (KE) Nru 1049/2001. Jekk id-dokument mitlub huwa kalssifikat taħt ir-reolita ta' sigurtà tal-Kummissjoni, l-Artikolu 6 ta' dawn ir-Regoli għandu japplika.

2.  Jekk, wara dak l-eżami, id-Direttorat Ġenerali jew dipartiment li jkollu fil-pussess tiegħu id-dokument iqies li l-aċċess għalih għandu jiġi rifjutat taħt xi waħda mill-eċċezzjonijiet li għalihom jipprovdi l-Artikolu 4 tar-Regolament (KE) Nru 1049/2001, it-tweġiba negattiva għandha tintbagħat lill-applikant mingħajr konsultazzjoni ma' l-awtur parti terza.

3.  Id-Direttorat Ġenerali jew dipartiment li jkollu fil-pussess tiegħu id-dokument għandu jikkonċedi l-applikazzjoni mingħajr ma jikkonsulta l-awtur parti terza fejn:

(a) 

id-dokumenti mitlub ikun diġà ġie żvelat jew mill-awtur tiegħu jew taħt ir-Regolament jew dispożizzjonijiet;

(b) 

l-iżvelat jew svelar parzjali, tal-kontenut tiegħu ma jkunx ovvjament sejjer jaffettwa xi wieħed mill-interessi msemmija fl-Artikolu 4 tar-Regolament (KE) Nru 1049/2001.

4.  Fil-każi l-oħra kollha, l-awtur parti terza għandu jkun ikkonsultat. B'mod partikolari, jekk l-applikazzjoni għall-aċċess tikkonċerna dokument li joriġina minn Stat Membru, id-Direttorat Ġenerali jew dipartiment li jkollu fil-pussess tiegħu id-dokument għandu jikkonsulta ma' l-awtorità ta' l-oriġini fejn:

(a) 

id-dokument kien intbagħat lill-Kummissjoni qabel id-data li fiha kien japplika r-Regolament (KE) Nru 1049/2001;

(b) 

l-Istat Membru kien talab lill-Kummissjoni biex ma tiżvelax id-dokument mingħajr il-qbil tiegħu minn qabel, skond l-Artikolu 4(5) tar-Regolament (KE) Nru 1049/2001.

5.  L-awtur parti terza konsultat għandu jkollu limitu ta' żmien biex iwieġeb li m'għandux ikun iqsar minn ħamest ijiem tax-xogħol iżda huwa għandu jippermetti lill-Kummissjoni li timxi mal-limiti ta' żmien tagħha għat-tweġiba. Fin-nuqqas ta' tweġiba fil-perjodu ta' żmien preskritt, jew jekk il-parti terza ma tkunx tista' tinstab jew tiġi identifikata, il-Kummissjoni għandha tiddeċiedi skond ir-regoli dwar eċċezzjonijiet fl-Artikolu 4 tar-Regolament (KE) Nru 1049/2001, waqt li tagħt kont ta' l-interessi leġittimi tal-parti terza fuq il-bażi ta' l-informazzjoni għad-dispożizzjoni tagħha.

6.  Jekk il-Kummissjoni jkollha l-ħsieb li tagħti aċċess għal dokument kontra l-opinjoni espliċita ta' l-awtur, hija għandha tinforma lill-awtur bl-intenzjoni tagħha li tiżvela d-dokument wara perjodu ta' għaxart ijiem tax-xogħol u għandha tiġbed l-attenzjoni tiegħu għar-rimedji disponibbli għalih biex jopponi l-iżvelar'.

7.  Fejn Stat Membru jirċievi applikazzjoni għal aċċess għal dokument li joriġina mill-Kummissjoni, huwa jista', għal għanijiet ta' konsultazzjoni, jikkuntattja lis-Segretarjat Ġenerali li għandu jkun responsabbli biex jistabbilixxi d-Direttorat Ġenerali jew dipartiment responsabbli għad-dokument ġewwa l-Kummissjoni. Id-Direttorat Ġenerali jew dipartiment tal-ħruġ tad-dokument għandu jwieġeb għall-applikazzjoni wara li jikkonsulta mas-Segretarjat Ġenerali.

Artikolu 6

Trattament ta' applikazzjonijiet għal aċċess għal dokumenti klassifikati

Fejn applikazzjoni għall-aċċess tikkonċerna dokument sensittiv kif imsemmi fl-Artikolu 9(1) tar-Regolament (KE) Nru 1049/2001, jew xi dokument ieħor klassifikat taħt ir-regoli ta' sigurtà tal-Kummissjoni, hija għandha tkun ittrattata mill-uffiċjali li għandhom is-setgħa li jkunu jafu x'fih id-dokument.

Għandhom jingħataw raġunijiet fuq il-bażi ta' l-eċċezzjonijiet elenkati fl-Artikolu 4 tar-Regolament (KE) Nru 1049/2001 għal kull deċiżjoni li tirrifjuta aċċess għal parti ta' dokument klassifikat jew kollu kemm hu. Jekk jiġi ppruvat li l-aċċess għad-dokument mitlub ma jistgħax jiġi rifjutat fuq il-bażi ta' dawn l-eċċezzjonijiet, l-uffiċjal li jkun qiegħed jittratta l-applikazzjoni għandu jiżgura li d-dokument jiġi diklassifikat qabel ma jibgħatu lill-applikant.

Il-qbil ta' l-awtorità li toriġina għandu jkun meħtieġ jekk l-aċċess għandu jingħata għal dokument sensittiv.

Artikolu 7

Eżerċizzju tad-dritt ta' aċċess

Id-dokumenti għandhom jintbagħtu bil-posta, fax jew, fejn disponibbli bil-posta elettronika, skond l-applikazzjoni. Jekk id-dokumenti jkunu voluminużi jew diffiċli biex ikunu mmaniġġati, l-applikant jista' jiġi mistieden biex jikkonsulta d-dokumenti fuq il-post. Din il-konsultazzjoni għandha tkun mingħajr ħlas.

Jekk id-dokument ikun ġie ppublikat, it-tweġiba għandha tikkonsisti fir-referenzi tal-pubblikazzjoni u/jew il-post fejn id-dokument huwa disponibbli u fejn xieraq l-indirizz web tiegħu fuq is-sit EUROPA.

Jekk il-volum tad-dokumenti mitluba jeċċedi għoxrin faċċata, l-applikant jista' jiġi mitlub jagħmel ħlas ta' Ewro 0,10 għal kull faċċata miżjud bil-prezz tal-ġarr. Il-ħlasijiet għal media oħra għandhom jiġu deċiżi każ b'każ iżda m'għandhomx jeċċedu ammont raġonevoli.

Artikolu 8

Miżuri li jiffaċilitaw l-aċċess għad-dokumenti

1.  Il-kopertura tar-reġistru kif hemm provdut fl-Artikolu 11 tar-Regolament (KE) Nru 1049/2001 għandha tiġi mtawwla gradwalment. Hija għandha tkun imħabbra fuq il-homepage EUROPA.

Ir-reġistru għandu jkun fih it-titolu tad-dokumenti (fl-lingwi li fihom ikun disponibbli), in-numru tagħhom tas-serje u referenzi oħra disponibbli, indikazzjoni ta' l-awtur tiegħu u d-data tal-ħolqien jew l-adozzjoni tiegħu.

Faċċata ta' għajnuna (fil-lingwi uffiċjali kollha) għandha tinforma lill-pubbliku dwar kif ikun jsta' jinkiseb id-dokument. Jekk id-dokument huwa pubblikat, għandu jkun hemm rabta għat-test sħiħ.

2.  Il-Kummissjoni għandha tħejji gwida prattika biex tinforma lill-pubbliku dwar id-drittijiet tiegħu taħt ir-Regolament (KE) Nru 1049/2001. Ilgwida għandha titqassam fil-lingwi uffiċjali kollha fuq is-sit EWROPA u f'forma ta' ktejjeb.

Artikolu 9

Dokumenti direttament aċċessibbli għall-pubbliku

1.  Dan l-Artikolu japplika biss għal dokumenti mħejjija jew riċevuti wara d-data li fiha japplika r-Regolament (KE) Nru 1049/2001.

2.  Id-dokumenti li ġejjin għandhom ikunu awtomatikament provduti fuq talba u, sa fejn hu possibbli, magħmula direttament aċċessibbli permezz ta' posta elettronika:

(a) 

l-aġendi għal-laqgħat tal-Kummissjoni;

(b) 

minuti ordinarji tal-laqgħat tal-Kummissjoni, wara l-approvazzjoni;

(ċ) 

dokumenti adottati mill-Kummissjoni għall-pubblikazzjoni fil-Ġurnal Uffiċjali tal-Komunitajiet Ewropej;

(d) 

dokumenti li joriġinaw minn partijiet terzi li jkunu diġà ġew żvelati mill-awtur tagħhom jew bil-kunsens tiegħu;

(e) 

dokumenti diġà żvelati wara applikazzjoni preċedenti.

3.  Jekk ikun jidher ċar li ebda waħda mill-eċċezzjonijiet li għalihom jipprovdi l-Artikolu 4 tar-Regolament (KE) Nru 1049/2001 ma tkun applikabbli għalihom, id-dokumenti li ġejjin jistgħu jintgħamlu disponibbli, sa fejn hu possibbli permezz ta' posta elettronika, sakemm ma jkunux jirriflettu opinjonijiet jew posiszzjonijiet individwali:

(a) 

wara l-adozzjoni ta' proposta għal att tal-Kunsill jew Parlament Ewropew u tal-Kunsill, id-dokumenti preparatorji għal dik il-proposta li jkunu ntbagħtu lill-Kuleġġ matul il-proċess ta' l-adozzjoni;

(b) 

wara l-adozzjoni ta' att mill-Kummissjoni taħt is-setgħat ta' implimentazzjoni konferiti fuqha, id-dokumenti preparatorji għal dak l-att mibgħuta mill-Kulleġġ matul il-proċess ta' l-adozzjoni;

(ċ) 

wara l-adozzjoni mill-Kummissjoni ta' att taħt is-setgħat proprji tiegħu, jew ta' komunikazzjoni, rapport jew dokument tax-xogħol,id-dokumenti preparatorji għal dak id-dokument mibgħuta lill-Kulleġġ matul il-proċess ta' l-adozzjoni.

Artikolu 10

Organizzazzjoni interna

Id-Direttorat Ġenerali u l-kapijiet ta' dipartiment għandhom ikollhom is-setgħa li jiddeċiedu dwar l-azzjoni li għandha tittieħed fuq applikazzjonijiet inizjali. Għal dan il-għan, huma għandhom jinnominaw uffiċjal biex jikkonsidra applikazzjonijiet għall-aċċess u jikkoordina t-tweġiba lid-Direttorat Ġenerali tiegħu jew dipartiment.

It-tweġibiet għall-applikazzjonijiet inizjali għandhom jintbagħtu lis-Segertarjat Ġenerali bħala informazzjoni.

L-applikazzjonijiet konfermatorji għandhom jibtbagħtu għall-informazzjoni lid-Direttorat Ġenerali jew dipartiment li jkun wieġeb l-applikazzjoni inizjali.

Is-Segretarjat Ġenerali għandu jassigira l-koordinazzjoni u l-implimentazzjoni uniformi ta' dawn ir-regoli mid-Direttorati Ġenerali u dipartimenti tal-Kummissjoni. Għal dan il-għan, huwa għandu jipprovdi l-pariri kollha meħtieġa u l-linji gwida.

▼M6




DISPOSIZZJONIJIET DWAR L-AMMINISTRAZZJONI TAD-DOKUMENTI

Billi:

(1)

L-attivitajiet u deċiżjonijiet kollha tal-Kummissjoni fl-oqsma politiċi, leġislattivi, tekniċi, finanzjarji u amministrattiva eventwalment iwasslu għall-produzzjoni ta' dokumenti.

(2)

Dawk id-dokumenti għandhom ikunu amministrati fuq il-bażi ta' regoli applikabbli għad-Direttorati Ġenerali kollha u dipartimenti ekwivalenti, peress li jiffurmaw rabta diretta ma' attivitajiet li jkunu qed isiru u jirriflettu wkoll l-attivitajiet passati tal-Kummissjoni fil-kapaċità doppja tagħha bħala istituzzjoni Ewropea u amminstrazzjoni pubblika Ewropea.

(3)

Dawk ir-regoli standard għandhom jassiguraw li l-Kummissjoni tkun tista' f'kull żmien, tipprovdi informazzjoni dwar il-kwistjonijiet li tagħhom hija responsabbli. Id-dokumenti u l-fajls miżmuma minn Direttorat Ġenerali jew dipartiment ekwivalenti għandhom għalhekk jippriservaw il-memorja ta'l-istituzzjoni, jiffaċilitaw l-iskambju ta' informazzjoni, u jipprovdu xhieda ta' l-operati mwettqa u jħarsu l-obbligi legali tad-dipartiment.

(4)

L-implimentazzjoni tar-regoli msemmija hawn fuq teħtieġ l-istabbiliment ta' struttura ta' organizzazzjoni soda u ta' min jorbot fuqha fi ħdan kull Direttorat Ġenerali jew dipartiment ekwivalenti, fil-livell interdipartimentali u fil-livell tal-Kummissjoni.

(5)

L-istabbiliment u l-implimentazzjoni ta' pjan ta' fajling assoċjat ma' nomenklatura komuni għad-dipartimenti kollha tal-Kummissjoni, li jifforma parti mill-amministrazzjoni bbażata fuq l-attività ta' l-istituzzjoni, jagħmluha possibbli li l-fajls jiġu organizzati u li jittejbu t-trasparenza u l-aċċess għd-dokumenti.

(6)

L-amministrazzjoni effiċjenti tad-dokumenti hija prirekwiżit essenzjali għall-politika effettiva ta' aċċess pubbliku għad-dokumenti tal-Kummissjoni. L-istabbiliment ta' reġistri li jkun fihom ir-referenzi għad-dokumenti mħejjija jew riċevuti mill-Kummissjoni għandhom jgħinu liċ-ċittadini biex jeżerċitaw id-dritt tagħhom ta' aċċess,



Artikolu 1

Tifsir

Għall-finijiet ta' dawn id-disposizzjonijiet:

— 
dokument għandha tfisser kull kontenut imħejji jew riċevut mill-Kummissjoni li jikkonċerna kwistjoni li tirrelata mal-politika, attivitajiet u deċiżjonijiet li jaqgħu taħt il-kompetenza ta' l-istituzzjoni u fil-qafas tal-kompiti uffiċjali tagħha, ikun x'ikun il-mezz (miktub fuq il-karta jew maħżun f'forma elettronika jew bħala ħoss, viżwali jew awdjo-viżwali rrekordjat),
— 
fajl għandu jfisser il-qalba li madwaru jiġu organizzati d-dokumenti skond l-attivitajiet ta' l-istituzzjoni, għal raġunijiet ta' prova, ġustifikazzjoni jew informazzjoni u biex jiggarantixxi l-effiċjenza fix-xogħol.

Artikolu 2

Għan

Dawn id-disposizzjonijiet jistabbilixxu l-prinċipji għall-amministrazzjoni tad-dokumenti.

L-amministrazzjoni tad-dokumenti għandha tassigura:

— 
il-ħolqien, riċeviment u ħażna tad-dokumenti b'mod debitu,
— 
l-identifikazzjoni ta' kull dokument permezz ta' sinjali adattati li jippermettulu li jiġi ffaljat, imfittex u li faċilment issir referenza għalih,
— 
il-priservazzjoni tal-memorja ta'l-istituzzjoni, iż-żamma tal-prova ta' l-attivitajiet imwettqa u t-twettieq ta' l-obbligi legali tad-dipartiment,
— 
skambju faċli ta' informazzjoni,
— 
konformità ma' l-obbligi tal-Kummissjoni fir-rigward tat-trasparenza.

Artikolu 3

Regoli standard

Id-dokumenti għandhom jgħaddu mill-operazzjonijiet li ġejjin:

— 
reġistrazzjoni,
— 
fajling,
— 
ħażna,
— 
trasferiment tal-fajls għall-Arkivji Storiċi.

Dawn l-operazzjonijiet għandhom jitwettqu skond sett ta' regoli standard, li għandhom jgħoddu b'mod uniformi għad-Direttorati Ġenerali kollha u dipartimenti ekwivalenti tal-Kummissjoni.

Artikolu 4

Reġistrazzjoni

Malli dokument jiġi riċevut jew formalment imħejji f'dipartiment, tkun xi tkun il-forma tiegħu, huwa għandu jiġi analizzat bil-ħsieb li jiġi stabbilit x'għandu jsir minnu u b'hekk jekk għandux jiġi reġistrat jew le.

Dokument imħejji jew riċevut minn dipartiment tal-Kummissjoni għandu jiġi reġistrat jekk ikun fih informazzjoni importanti li ma tkunx ta' ħajja qasira u/jew li jista' jinvolvi azzjoni jew insegwiment mill-Kummissjoni jew minn xi wieħed mid-dipartimenti tagħha. Jekk dokument jitħejja fi ħdan il-Kummissjoni, huwa għandu jiġi reġistrat mid-dipartiment ta' oriġini fis-sistema proprja tiegħu. Jekk id-dokument jiġi riċevut mill-Kummissjoni, huwa għandu jiġi reġistrat mid-dipartiment li jirċevieh. Kull proċessar sussegwenti ta' dokumenti reġistrati b'dan il-mod għandu jirreferi għar-reġistrazzjoni oriġinali tagħhom.

Ir-reġistrazzjoni għandha tagħmel possibbli b'mod ċar u definittiv l-identifikazzjoni tad-dokumenti mħejjija jew riċevuti mill-Kummissjoni jew minn wieħed mid-dipartimenti tagħha sabiex ikunu jistgħu jiġu ntraċċati matul iċ-ċiklu tal-ħajja tagħhom.

Għandhom jinżammu reġistri li jkun fihom ir-referenzi tad-dokumenti.

Artikolu 5

Fajling

Id-Direttorati Ġenerali u d-dipartimenti ekwivalenti għandhom iħejju pjan ta' fajling adattat għall-ħtiġiet speċifiċi tagħhom.

Dan il-pjan ta' fajling għandu jkun aċċessibbli bil-kompjuter, għandu jkun assoċjat b'nomenklatura komuni definita mis-Segretarjat Ġenerali għad-dipartimenti kollha tal-Kummissjoni. Din in-nomenklatura għandha tifforma parti mill-amministrazzjoni bbażata fuq l-attività tal-Kummissjoni.

Id-dokumenti reġistrati għandhom ikunu organizzati f'fajls. Għal kull kwistjoni li taqa' fil-kompetenza tad-Direttorat Ġenerali jew dipartiment ekwivalenti, għandu jiġi kostitwit fajl waħdieni uffiċjali. Kull fajl uffiċjali għandu jkun komplet u għandu jikkorrispondi ma' l-attivitajiet tad-dipartiment dwar il-materja in kwistjoni.

Il-ħolqien ta' fajl u ż-żieda tiegħu mal-pjan ta' fajling tad-Direttorat Ġenerali jew dipartiment ekwivalenti għandha tkun ir-responsabbiltà tad-dipartiment responsabbli għall-attività koperta bil-fajl skond arranġamenti prattiċi li għandhom jiġu stipulati f'kull Direttorat Ġenerali jew dipartiment ekwivalenti.

Artikolu 6

Ħażna

Kull Direttorat Ġenerali jew dipartiment ekwivalenti għandu jassigura l-protezzjoni fiżika u l-aċċessibilità f'perjodu qasir u medju ta' żmien għad-dokumenti li għalihom ikun responsabbli, u għandu jkun f'posizzjoni li jipproduċi jew jibni mill-ġdid il-fajls li dawn jappartjenu għalihom.

Ir-regoli amministrattivi u l-obbligi legali għandhom jiddeterminaw il-perjodu minimu li għalih għandu jinżamm dokument.

Kull Direttorat Ġenerali jew dipartiment ekwivalenti għandu jistabilixxi l-istruttura tiegħu nterna ta' organizzazzjoni għall-ħażna tal-fajls tiegħu. Il-perjodu minimu ta' ħażna fi ħdan id-dipartimenti tagħha għandu jieħu kont ta' lista komuni, imħejjija skond ir-regoli ta' implimentazzjoni msemmija fl-Artikolu 12, għall-Kummissjoni kollha.

Artikolu 7

Apprezzament u stima ta' l-Arkivji Storiċi

Mingħajr preġudizzju għall-perjodi minimi ta'ħażna msemmija fl-Artikolu 6, iċ-ċentru/i ta' l-amministrazzjoni tad-dokumenti msemmija fl-Artikolu 9 għandhom iwettqu, f'intervalli regolari, b'koperazzjoni mad-dipartmenti responsabbli għall-fajls, apprezzament tad-dokumenti u l-fajls li jistgħu jiġu trasferiti għall-Arkivji Storiċi tal-Kummissjoni. Wara li jiġu evalwati l-proposti, l-Arkivji Storiċi jistgħu jirrifjutaw it-trasferiment tad-dokumenti jew fajls. Għandhom jingħataw ir-raġunijiet għal kull deċiżjoni ta' rifjut ta' trasferiment u d-dipartiment konċernat għandu jiġi nformat b'dik id-deċiżjoni.

Il-fajls jew d-dokumenti li m'għandhomx jitqiesu bħala aktar meħtieġa li jinżammu mid-dipartimenti, għandhom jiġu trasferiti mhux aktar tard minn 15-il sena wara l-produzzjoni tagħhom, miċ-ċentru ta' l-amministrazzjoni tad-dokumenti u taħt l-awtorità tad-Direttorat Ġenerali, għall-Arkivji Storiċi tal-Kummissjoni. Dawn il-fajls jew dokumenti għandhom imbagħad jiġu evalwati skond ir-regoli stipulati fir-regoli ta' implimentazzjoni msemmija fl-Artikolu 12 u maħsuba biex jisseparaw dawk li għandhom jinħażnu minn dawk li m'għandhom ebda valur amministrattiv jew storiku.

L-Arkivji Storiċi għandhom ikollhom repositorji speċjali għall-ħażna tal-fajls u d-dokumenti trasferiti b'dan il-mod. Fuq talba, huma għandhom jagħmlu d-dokumenti u l-fajls disponibbli lid-Direttorat Ġenerali jew dipartiment ekwivalenti ta' oriġini.

Artikolu 8

Dokumenti klassifikati

Id-dokumenti klassifikati għandhom jiġu proċessati skond ir-regoli fis-seħħ dwar is-sigurtà.

Artikolu 9

Ċentri ta' amministrazzjoni tad-dokumenti

Kull Direttorat Ġenerali jew dipartiment ekwivalenti għandu, waqt li jieħu kont ta' l-istrutturi u l-limiti tiegħu, jkollu jopera jew iżomm ċentru wieħed jew aktar ta' amministrazzjoni tad-dokumenti.

Il-kompitu tċ-ċentri ta' amministrazzjoni tad-dokumenti għandu jkun li jassigura li d-dokumenti mħejjija jew riċevuti fid-Direttorat Ġenerali tagħhom jew dipartiment ekwivalenti jkunu amministrati skond ir-regoli.

Artikolu 10

Uffiċċji ta' amministrazzjoni tad-dokumenti

Kull Direttur Ġenerali jew Kap ta' Dipartiment għandu jinnomina uffiċjal għall-amministrazzoni tad-dokumenti.

Għall-finijiet tat-twaqqif ta' sistema moderna u effiċjenti ta' l-aamministrazzjoni tad-dokumenti u rekords, il-kompitu ta' l-uffiċjal ta' l-amministrazzjoni tad-dokumenti għandu jkun li:

— 
jidentifika t-tipi tad-dokumenti u l-fajls speċifiċi għall-oqsma ta' l-attività tad-Direttorat Ġenerali jew dipartiment ekwivalenti,
— 
iħejji u jaġġorna l-inventarju tad-databases u sistemi speċifiċi eżistenti,
— 
iħejji pjan ta' fajling tad-Direttorat Ġenerali jew dipartiment ekwivalenti,
— 
iħejji regoli u proċeduri speċifiċi għad-Direttorat Ġenerali jew dipartiment ekwivalenti li għandhom jintużaw għall-amministrazzjoni tad-dokumenti u l-fajls, u biex jassigura li dawn jiġu applikati,
— 
jorganizza, fi ħdan id-Direttorat Ġenerali jew dipartiment ekwivalenti, taħriġ għall-impjegati nkarigati mill-implimentazzjoni, kontroll u monitorjar tar-regoli ta' amministrazzjoni stabbiliti f'dawn id-disposizzjonijiet.

L-uffiċjal ta' l-amministrazzjoni tad-dokumenti għandu jassigura kordinazzjoni orizzontali bejn iċ-ċentru/i ta' amministrazzjoni tad-dokumenti u d-dipartimenti l-oħra konċernati.

Artikolu 11

Grupp interdipartimentali

Għandu jitwaqqaf grupp interdipartimentali ta' uffiċjali ta' l-amministrazzjoni tad-dokumenti. Huwa għandu jkun presedut mis-Segretarjat Ġenerali u l-kompitu tiegħu għandu jkun li:

— 
jassigura l-applikazzjoni uniformi u korretta ta' dawn id-disposizzjonijiet fi ħdan id-dipartimenti,
— 
jittratta kull kwistjoni li tinqala' mill-applikazzjoni tagħhom,
— 
jikkontribwixxi għall-preparazzjoni tar-regoli ta' implimentazzjoni msemmija fl-Artikolu 12,
— 
jirreferi l-ħtiġiet tad-Direttorat Ġenerali u dipartimenti ekwivalenti fir-rigward tat-taħriġ u miżuri ta' sostenn.

Il-grupp interdipartimentali għandu jitlaqqa' mill-President tiegħu, jew fuq l-inizjattiva tal-President jew fuq it-talba ta' Direttorat Ġenerali jew dipartiment ekwivalenti.

Artikolu 12

Regoli ta' Implimentazzjoni

Ir-regoli għall-implimentazzjoni ta' dawn id-disposizzjonijiet għandhom jiġu adottati u regolarment aġġornati mis-Segretarju Ġenerali, bi qbil mad-Direttur Ġenerali għall-Persunal u l-Amministrazzjoni, waqt li jaġixxi fuq proposta mill-grupp interdipartimentali ta' l-uffiċjali ta' l-amministrazzjoni tad-dokumenti.

L-aġġornar għandu, b'mod partikolari jieħu kont ta':

— 
l-iżvilupp ta' teknoloġiji ġodda ta' l-informazzjoni u l-komunikazzjoni,
— 
bidliet fix-xjenzi tad-dokumentazzjoni u r-riżultati ta' riċerka tal-Komunità u internazzjonali, inkluża l-emerġenza ta' standards ġodda fil-qasam,
— 
l-obbligi tal-Kummissjoni fir-rigward tat-trasparenza u l-aċċess pubbliku għad-dokumenti u r-reġistri tad-dokumenti,
— 
l-iżviluppi fl-i standardisation u l-presentazzjoni tad-dokumenti tal-Kummissjoni u dawk tad-dipartimenti tagħha,
— 
ir-regoli stabbiliti li jikkonċernaw il-valur evidenzali tad-dokumenti elettroniċi.

Artikolu 13

Implimentazzjoni fid-dipartimenti

Kull Direttur Ġenerali jew Kap ta' Dipertiment għandu jkollu taħdem l-istruttura meħtieġa ta' organizzazzjoni, amministrattiva u fiżika u jipprovdi l-impjegati meħtieġa għall-implimentazzjoni ta' dawn id-disposizzjonijiet u r-regoli ta' implimentazzjoni mid-dipartimenti tiegħu.

Artikolu 14

Informazzjoni, taħriġ u sostenn

Is-Segretarjat Ġenerali u d-Direttorat Ġenerali għall-Persunal u l-Amministrazzjoni għandhom ikollhom joperaw il-miżuri meħtieġa ta' informazzjoni, taħriġ u sostenn biex jassiguraw l-implimentazzjoni u l-applikazzjoni ta' dawn id-disposizzjonijiet fi ħdan id-Direttorati Ġenerali u d-dipartimenti ekwivalenti.

Meta jistabilixxu l-miżuri tat-taħriġ huma għandhom jieħdu kont debitu tal-ħtiġiet tat-taħriġ u sostenn tad-Direttorati Ġenerali u d-dipartimenti ekwivalenti kif riferuti mill-grupp interdipartimentali ta' l-uffiċjali ta'l-amministrazzjoni tad-dokumenti.

Artikolu 15

Konformità mad-disposizzjonijiet

Is-Segretarjat Ġenerali għandu jkun responsabbli biex jassigura l-konformità ma' dawn id-disposizzjonijiet b'kordinazzjoni mad-Diretturi Ġenerali u l-Kapijiet tad-Dipartimenti.

▼M11 —————

▼M8




Dispożizzjonijiet tal-Kummissjoni dwar id-dokumenti elettroniċi u diġitalizzati

Billi:

(1)

L-użu ġeneralizzat tat-teknoloġiji ġodda ta' informazzjoni u ta' komunikazzjoni mill-Kummissjoni għall-funzjonament tagħha u fil-bdil ta' dokumenti ma' ħaddieħor, u in partikolari ma' l-amministrazzjonijiet Komunitarji, fosthom l-organizzazzjonijiet inkarigati bit-tħaddim ta' xi politika Komunitarja u ma' l-amministrazzjonijiet nazzjonali, iwassal biex il-ġabra dokumentarja tal-Kummissjoni jkun fiha dejjem iżjed dokumenti elettroniċi u diġitalizzati.

(2)

Hi u ssegwi l-White Paper dwar ir-riforma tal-Kummissjoni ( 18 ), fejn l-azzjonijiet 7, 8, u 9 jaħsbu biex jiżguraw il-passaġġ għall-“e-Kummissjoni”, u l-komunika “Lejn e-Kummissjoni: Strateġija ta' Ħidma għall-perjodu 2001 — 2005 (Azzjonijiet 7, 8 u 9 tal-White Paper dwar ir-riforma)” ( 19 ), il-Kummissjoni intensifikat l-iżvilupp ta' sistemi informatiċi li jippermettu l-ġestjoni ta' dokumenti u proċeduri b'mezzi elettroniċi.

(3)

Bid-deċiżjoni 2002/47/KE, KEFA, EURATOM ( 20 ), Il-Kummissjoni żiedet mar-regolament intern tagħha xi disposizzjonijiet dwar il-ġestjoni tad-dokumenti biex tiżgura, b'mod partikolari, li f'kull ħin tkun tista' tagħti kont ta' kull mhi responsabbli għalih. Fil-komunika tagħha dwar is-simplifikazzjoni u l-modernizzazzjoni tal-ġestjoni tad-dokumenti tagħha ( 21 ), il-Kummissjoni iffissat bħala l-mira tagħha, fil-ġejjieni medju, li twaqqaf arkivjar elettroniku tad-dokumenti bbażat fuq il-ġabra kollha ta' regoli u proċeduri komuni applikabbli għas-servizzi kollha.

(4)

Id-dokumenti għandhom jiġu ġestiti b'rispett għar-regoli ta' sigurtà li jorbtu lill-Kummissjoni, b'mod partikolari fir-rigward tal-klassifikazzjoni tad-dokumenti skond id-deċiżjoni tagħha (2001/844/KE, KEFA, EURATOM) ( 22 ), tal-protezzjoni tas-sistemi ta' informazzjoni, skond id-deċiżjoni tagħha K(95)1510, kif ukoll tal-protezzjoni tad-data personali skond ir-Regolament tal-Parlament Ewropew u tal-Kunsill (KE nru 45/2001) ( 23 ). Flimkien ma' dan, il-ġabra dokumentarja tal-Kummissjoni għandha titfassal b'mod li s-sistemi ta' informazzjoni, l-għejun u l-mezzi ta' trasmissjoni li jibnuha għandhom ikunu protetti b'miżuri ta' sigurtà xierqa.

(5)

Dan iwassal biex jiġu approvati disposizzjonijiet li jiffissaw mhux biss il-kundizzjonijiet ta' validità, rigward il-Kummissjoni, tad-dokumenti elettroniċi u diġitalizzati jew trasmessi b'mezzi elettroniċi, meta dawn il-kundizzjonijiet ma jiġux iffissati mod ieħor, iżda wkoll il-kundizzjonijiet ta' konservazzjoni li jiggarantixxu l-integrità tagħhom u li jibqgħu jinqraw, huma u l-metadata tagħhom, fiż-żmien meħtieġ għall-konservazzjoni tagħhom.



Artikolu 1

Ħsieb

Dawn il-disposizzjonijiet jiffissaw il-kundizzjonijiet ta' validità tad-dokumenti elettroniċi u diġitalizzati fir-rigward tal-Kummissjoni. Huma jaħsbu wkoll biex jiggarantixxu l-awtentiċità u l-integrità ta' dawn id-dokumenti u tal-metadata tagħhom u li jibqgħu jinqraw.

Artikolu 2

Kamp ta' applikazzjoni

Dawn id-dokumenti japplikaw għad-dokumenti elettroniċi u diġitalizzati magħmula jew irċevuti u miżmuma mill-Kummissjoni.

Huma jistgħu japplikaw, bi ftehim, għad-dokumenti elettroniċi u diġitalizzati miżmuma minn entitajiet oħra nkarigati biex japplikaw ċerta politika Komunitarja jew għad-dokumenti mibdula fil-qafas ta' l-għejun telematiċi bejn l-amminstrazzjonijiet li tieħu sehem fihom il-Kummisjoni.

Artikolu 3

Tifsiriet

Għall-fini ta' dawn id-disposizzjonijiet jgħoddu dawn it-tifsiriet li ġejjin:

1)

“dokument”id-dokument kif hu mfisser fil-punt a ta' l-Artikolu 3, tar-Regolament tal-Parlament Ewropew u tal-Kunsilll (KE nru 1049/2001) ( 24 ) u fl-ewwel Artikolu tad-disposizzjonijiet annessi mar-regolament intern tal-Kummissjoni, hawn isfel imsemmi “disposizzjonijiet dwar il-ġestjoni tad-dokumenti”;

2)

“dokument elettroniku”ġabra ta' tagħrif miġbura jew maħżuna b'kull xorta ta' mezz minn sistema informatika jew mezz simili li jista' jinqara jew jiġi eżaminat minn persuna jew minn xi sistema jew mezz u kull anness u kull ħruġ, stampat jew b' xi mod ieħor, ta' dan it-tagħrif;

3)

“diġitalizzazzjoni ta' dokumenti”il-proċess li bih jiġi ttrasformat dokument tal-karta jew kull mezz ieħor tradizzjonali fi xbieha elettronika. Id-diġitalizzazzjoni tirrigwarda kull xorta ta' dokument u tista' ssir permezz ta' mezzi differenti bħal ma huma karta, faks, mikroformi (microfiche, mikrofilm), ritratti fotografiċi, kassetti vidjo jew awdjo jew filmati;

4)

“ċiklu ta' ħajja ta' dokument”l-istadji jew perjodi kollha fil-ħajja ta' dokument, minn meta jiġi rċevut jew jinħoloq uffiċjalment skond l-Artikolu 4 tad-disposizzjonijiet dwar il-ġestjoni tad-dokumenti sa meta jintbagħat fl-arkivji storiċi tal-Kummissjoni u l-ftuħ tagħhom għall-pubbliku jew sa meta jinqered skond l-Artikolu 7 ta' l-imsemmija disposizzjonijiet;

5)

“ġabra dokumentarja tal-Kummissjoni”Il-ġabra kollha tad-dokumenti, dossiers u l-metadata maħluqa, irċevuti, irreġistrati, ikklassifikati u maħżuna mill-Kummissjoni;

6)

“integrità”il-fatt li t-tagħrif li fih id-dokument u l-metadata li tmur miegħu huma sħaħ (id-data kollha tkun hemm) u preċiżi (l-ebda fatt ma hu mibdul);

7)

“li jibqa' jinqara fiż-żmien”il-fatt li t-tagħrif li fihom id-dokumenti u l-metadata li tmur miegħu jistgħu jibqgħu jinqraw faċilment minn kull persuna li tista' jew għandha dritt ikollha aċċess għalihom, waqt iċ-ċiklu kollu tal-ħajja ta' l-imsemmija dokumenti mill-ħolqien uffiċjali tagħhom jew minn meta jiġu rċevuti sa meta jintbagħtu fl-arkivji storiċi tal-Kummissjoni u l-ftuħ tagħhom għall-pubbliku jew sal-qirda awtorizzata tagħhom skond it-tul ta' konservazzjoni meħtieġa;

8)

“metadata”id-data li jiddeskrivi il-kuntest, il-kontenut u l-istruttura tad-dokumenti kif ukoll il-ġestjoni tagħhom fiż-żmien; kif huma ffissati fil-modalitajiet ta' applikazzjoni tad-disposizzjonijiet dwar il-ġestjoni tad-dokumenti u kif għandhom jiġu kkompletati bil-modalitiajiet ta' applikazzjoni ta' dawn id-disposizzjonijiet;

9)

“firma elettronika”il-firma elettronika skond il-punt 1 ta' l-Artikolu 2 tad-Direttiva 1999/93/KE tal-Parlament Ewropew u tal-Kunsill ( 25 );

10)

“firma elettronika avvanzata”il-firma elettronika skond il-punt 2 ta' l-Artikolu 2 tad-Direttiva 1999/93/KE.

Artikolu 4

Validità tad-dokumenti elettroniċi

1.  Fil-każ meta disposizzjoni Komunitarja jew nazzjonali applikabbli teżiġi l-oriġinali ffirmat ta' xi dokument, dokument elettroniku maħluq jew rċevut mill-Kummissjoni jkun jissodisfa din l-eżiġenza jekk id-dokument in kwistjoni ikun iġib firma elettronika avvanzata bbażata fuq ċertifikat kwalifikat u maħluq minn mezz ta' siġurtà għall-ħolqien ta' firem jew firma elettronika li għandha garanzija ugwali għall-iskop ta' firma.

2.  Fil-każ meta disposizzjoni Komunitarja jew nazzjonali applikabbli teżiġi li dokument ikun maħluq bil-kitba, mingħajr ma tkun teżiġi l-oriġinali ffirmat, dokument elettroniku maħluq jew irċevut mill-Kummissjoni jkun jissoddisfa din l-eżiġenza jekk il-persuna li jkun ġej minnha tkun identifikata kif jixraq u jekk id-dokument ikun inħoloq f'ċirkostanzi tali li jiggarantixxu l-integrità tal-kontenut u tal-metadata li jmorru miegħu u jissoddisfa il-kundizzjonijiet iffissati mill-Artikolu 7.

3.  Id-disposizzjonijiet ta' dan l-Artikolu jkunu japplikaw mill-jum ta' wara l-approvazzjoni tal-modalitajiet ta' applikazzjoni msemmija fl-Artikolu 9.

Artikolu 5

Validità tal-proċeduri elettroniċi

1.  Fil-każ li proċedura tal-Kummissjoni stess tkun teħtieġ firma ta' persuna awtorizzata jew il-kunsens ta' persuna f'stadju jew stadji ta' l-imsemmija proċedura, din tista' tinħadem permezz ta' sistemi informatiċi jekk kull persuna tkun identifikata b'mod ċert u mhux ekwivoku u jekk is-sistema in kwistjoni tkun toffri garanzija li ma jistax jinbidel il-kontenut inkluż dak li għandu x'jaqsam ma' l-istadji tal-proċedura.

2.  Fil-każ li proċedura tkun tinvolvi lill-Kummissjoni u entitajiet oħra u tkun teħtieġ il-firma ta' persuna awtorizzata jew il-kunsens ta' persuna f'stadju jew stadji ta' l-imsemmija proċedura, din tista' tinħadem b'sistemi informatiċi li l-kundizzjonijiet u l-garanziji tagħhom ikunu ffissati bi qbil.

Artikolu 6

Trasmissjoni b'mezzi elettroniċi

1.  It-trasmissjoni ta' dokumenti mill-Kummissjoni lil destinatarju intern jew estern tista' ssir permezz tal-komunikazzjoni l-iżjed xierqa skond il-każ.

2.  It-trasmissjoni ta' dokumenti lill-Kummissjoni tista' ssir b'kull xorta ta' mezz ta' komunikazzjoni fosthom il-mezz elettroniku - faks, posta elettronika (email), formularju elettroniku, websajt.

3.  Il-paragrafi 1 u 2 ma japplikawx meta xi mezzi partikolari ta' trasmissjoni jew xi formalitajiet partikolari marbuta mat-trasmissjoni jkunu meħtieġa skond disposizzjoni Komunitarja jew nazzjonali applikabbli jew bis-saħħa ta' ftehim jew bi qbil bejn il-partijiet.

Artikolu 7

Konservazzjoni

1.  Il-konservazzjoni mill-Kummissjoni ta' dokumenti elettroniċi u diġitalizzati għandha tiġi żgurata tul iż-żmien meħtieġ bil-kundizzjonijiet li ġejjin:

a) 

id-dokument jiġi kkonservat bil-forma li fiha jkun inħoloq, mibgħut jew irċevut jew taħt forma li tippreserva l-integrità mhux biss tal-kontenut ta' dan id-dokument iżda tal-metadata li tmur miegħu;

b) 

il-kontenut tad-dokument u l-metadata li tmur miegħu jkunu jistgħu jinqraw tul iż-żmien kollu ta' konservazzjoni tagħhom minn min ikun awtorizzat li jarahom;

ċ) 

rigward dokument li jkun intbagħat jew li ġie rċevut b'mezz elettroniku, it-tagħrif li jkun juri l-oriġini u d-destinazzjoni tiegħu, kif ukoll id-data u l-ħin ta' meta jkun intbagħat jew ġie rċevut jagħmlu parti mill-metadata minima li għandha tiġi kkonservata;

d) 

rigward proċeduri elettroniċi ġestiti minn sistemi informatiċi, it-tagħrif dwar l-istadji formali ta' proċedura għandhom jiġu kkonservati f'kundizzjonijiet b'mod li jiżguraw li jkunu idenitifikati dawn l-istadji kif ukoll l-identifikazzjoni ta' l-awturi u ta' l-intervenjenti.

2.  Għall-fini tal-paragrafu 1, il-Kummissjoni għandha twaqqaf sistema ta' depożitu elettroniku maħsub li jkopri iċ-ċiklu ta' ħajja kollu tad-dokumenti elettroniċi u diġitalizzati.

Il-kundizzjonijiet tekniċi tas-sistema ta' depożitu elettroniku għandhom jiġu ffissati skond il-modalitajiet ta' implimentazzjoni imsemmija fl-Artikolu 9.

Artikolu 8

Sigurtà

Id-dokumenti elettroniċi u diġitalizzati għandhom jiġu ġestiti b'rispett għar-regoli ta' sigurtà li jorbtu lill-Kummissjoni. Għal dan il-għan, is-sistemi ta' informazzjoni, l-għejun u l-mezzi ta' trasmissjoni li jibnu l-ġabra dokumentarja tal-Kummissjoni għandhom ikunu mħarsa b'miżuri ta' sigurtà xierqa rigward il-klassifikazzjoni ta' dokumenti, ta' protezzjoni tas-sistemi ta' informazzjoni u ta' protezzjoni ta' data personali.

Artikolu 9

Modalitajiet ta' implimentazzjoni

Il-modalitiajiet ta' implimentazzjoni ta' dawn id-disposizzjonijiet għandhom isiru b' koordinament mad-Direttorati Ġenerali u mas-servizzi simili u jiġu deċiżi mis-Segretarju Ġenerali nkarigat mill-informatika fil-Kummissjoni.

Dawn għandhom jiġu aġġornati regolarment skond l-iżvilupp tat-teknoloġiji ta' l-informazzjoni u tal-komunikazzjoni u ta' l-obbligi ġodda li jistgħu jorbtu lill-Kummissjoni.

Artikolu 10

Implimentazzjoni fis-servizzi

Kull Direttur Ġenerali jew Kap ta' Servizz għandu jieħu l-miżuri meħtieġa sabiex id-dokumenti, proċeduri u sistemi elettroniċi li hu responsabbli għalihom ikunu jissodisfaw l-eżiġenzi ta' dawn id-disposizzjonijiet u tal-modalitajiet ta' implimentazzjoni tagħhom.

Artikolu 11

Eżekuzzjoni tad-disposizzjonijiet

Is-Segretarjat Ġenerali tal-Kummissjoni hu nkarigat biex jissorvelja l-eżekuzzjoni ta' dawn id-disposizzjonijiet b'koordinazzjoni mad-Direttorati Ġenerali u mas-servizzi simili, b' mod partikolari mad-Direttorat Ġenerali inkarigat mill-informatika fi ħdan il-Kummissjoni.

▼M10




DISPOŻIZZJONIJIET TAL-KUMMISSJONI LI JWAQQFU S-SISTEMA ĠENERALI TA' TWISSIJA F'WAQTHA

Billi:

(1)

Huwa xieraq għall-Kummissjoni li tistabbilixxi sistema ġenerali ta' twissija f'waqtha msejħa ARGUS, sabiex ittejjeb il-kapaċità ta' reazzjoni malajr, effiċjenti u f'manjiera kkordinata, fil-qasam ta' kompetenza tagħha, għall-kriżijiet ta' natura multisettorali li jkopru oqsma politiċi diversi u li jeħtieġu azzjoni fuq il-livell Komunitarju, hi x'inhi l-kawża tagħhom.

(2)

Is-sistema għandha tkun ibbażata inizjalment fuq netwerk ta' komunikazzjoni interna li tippermetti lid-Direttorati-ġenerali u s-servizzi tal-Kummissjoni li jaqsmu informazzjoni fl-eventwalità ta' kriżi.

(3)

Is-sistema tkun reveduta fid-dawl ta' l-esperjenza miksuba u l-progress teknoloġiku biex tiżgura għaqda u koordinazzjoni tan-netwerks speċjalizzati eżistenti.

(4)

Hu neċessarju li jkun definit il-proċess ta' koordinazzjoni xieraq biex jittieħdu d-deċiżjonijiet u tkun ġestita risposta f'waqtha, ikkordinata u koerenti tal-Kummissjoni għal kriżi multisettorali ewlenija, filwaqt li jinżamm suffiċjentement flessibbli u adattabbli għall-bżonnijiet u ċirkostanzi partikolari ta' kriżi speċifika u li jirrispetta l-istrumenti politiċi eżistenti li jittrattaw mal-kriżijiet speċifiċi.

(5)

Is-sistema għandha tirrispetta l-kartteristiċi speċifiċi, l-għarfien espert, l-arranġamenti u l-qasam ta' kompetenza ta' kull sistema settorali ta' twissija f'waqtha eżistenti tal-Kummissjoni li tippermetti is-servizz tagħha jirrispondi għal kriżijiet speċifiċi fl-oqsma varji ta' l-attività tal-Komunità, kif ukoll il-prinċipju ġenerali tas-sussidjarjetà.

(6)

Ġaladarba l-komunikazzjoni hi l-element ewlieni tal-ġestjoni tal-kriżi, għandha tingħata attenzjoni speċjali lill-informazzjoni lill-pubbliku u lill-komunikazzjoni effettiva maċ-ċittadini, permezz ta' l-istampa u l-istrumenti ta' komunikazzjoni varji u postijiet tal-Komunikazzjoni, minn Brussell u/jew mil-lok l-aktar xieraq.



Artikolu 1

Is-sistema ARGUS

1.  Twaqqfet sistema ġenerali ta' twissija u risposta f'waqtha msejħa ARGUS sabiex ittejjeb il-kapaċità tal-Kummissjoni biex tipprovdi risposta malajr, effiċjenti u koerenti fl-eventwalità ta' kriżi maġġuri ta' natura multisettorali li tkopri oqsma politiċi diversi li jinħtieġu azzjoni fuq livell Komunitarju, hi x'inhi l-kawża.

2.  ARGUS għandha tkun magħmula minn

(a) 

netwerk ta' komunikazzjoni interna;

(b) 

proċess ta' koordinazzjoni speċifiku li għandu jkun attivat f'każ ta' kriżi maġġuri multisettorali.

3.  Dawn id-dispożizzjonijiet huma mingħajr preġudizzju għad-deċiżjoni tal-Kummisjoni 2003/246/KE dwar il-proċeduri operattivi għall-ġestjoni tal-kriżi.

Artikolu 2

Network ta' informazzjoni dwar l-ARGUS

1.  In-netwerk ta' komunikazzjoni interna għandha tkun pjattaforma permanenti li tippermetti d-Direttorati-Ġenerali u s-servizzi tal-Kummissjoni li jibdlu, f'ħin reali, tagħrif relevanti dwar kriżijiet multisettorali emerġenti jew theddid prevedibbli jew imminenti ta' dawn u biex jikkoordinaw risposta xieraq fil-qasam ta' kompetenza tal-Kummissjoni.

2.  Il-membri tal-qalba tan-netwerk huma: Is-Segretarju Ġenerali; DĠ ta' l-Istampa u l-Komunikazzjoni inkluż s-servizz tal-Kelliem Ewlieni; DĠ ta' l-Ambjent; DĠ Saħħa u Ħarsien tal-Konsumatur; DĠ Ġustizzja, Libertà u Sigurtà; DĠ Relazzjonijiet Esterni; DĠ Għajnuna Umanitajra; DĠ Impjegati u Amministrazzjoni; DĠ Kummerċ; DĠ Informatika; DĠ Tassazzjoni u Għaqda Doganali; iċ-Ċentru ta' Riċerka Konġunt u s-Servizz legali.

3.  Kwalunkwe Direttorat-ġenerali u servizz ieħor tal-Kummissjoni jista' jkun inkluż fin-netwerk, fuq talba tagħhom, provdut li jimplimentaw il-ħtiġijiet minimi msemmija f'paragrafu (4).

4.  Direttorati-ġenerali u servizzi li huma membri tan-netwerk għandhom jaħtru korrispondent għall-ARGUS u jimplimentaw arranġamenti ta' dmirijiet ta' l-għassa li jippermettu s-servizz ikun ikkuntattjat u jirreġixxi malajr fl-eventwalità ta' kriżi li timmerita l-intevent tiegħu. Is-sistema tkun imfassla biex tippermetti tagħmel dan fl-allokazzjoni eżistenti ta' riżorsi umani.

Artikolu 3

Il-proċess ta' koordinazzjoni fl-eventwalità ta' kriżi maġġura

1.  Fl-eventwalità ta' kriżi ewlenija multisettorali jew theddida prevedibbli jew imminenti tagħha, il-President jiddeċiedi dwar l-allokazzjoni tar-responsabbiltà politika tar-risposta tal-Kummissjoni għall-kriżi. Jew iżomm ir-responsabbiltà għalih jew jiddelegaha lil Membru tal-Kummissjoni.

2.  Din ir-responsabbiltà tikkonsisti fi tmexxija u koordinazzjoni r-risposta għall-kriżi, ir-rappreżentazzjoni tal-Kummissjoni ma' l-istituzzjonijiet l-oħra u r-responsabbiltà tal-komunikazzjoni mal-pubbliku. Din ma taffettwax il-kompetenzi eżistenti u l-mandati fil-Kulleġġ.

3.  Is-Segretarjat ġenerali, taħt l-awtorità tal-President, jattiva l-istruttura speċifika tal-ġestjoni operattiva ta' kriżi msejħa l-Kumitat għall-Koordinazzjoni tal-Kriżijiet deskritt fl-artikolu 4.

Artikolu 4

Il-Kumitat għall-Koordinazzjoni tal-Kriżijiet

1.  Il-Kumitat għall-Koordinazzjoni tal-Kriżijiet hu struttura operattiva speċifika tal-ġestjoni tal-kriżi stabbilita biex imexxi u jikkoordina r-risposta għall-kriżi, fil-waqt li jiġbor fih flimkien ma' rappreżentanti tad-Direttorati ġenerali u s-servizzi relevanti kollha tal-Kummissjoni. Bħala regola ġenerali, id-Direttorati ġenerali u s-servizzi msemmija fl-Artikolu 2(2) għandu jkun rappreżentat fil-Kumitat għall-Koordinazzjoni tal-Kriżijiet, flimkien Direttorati Ġenerali u servizzi oħrajn li għandhom x'jaqsmu mal-kriżi speċifika. Il-Kumitat għall-Koordinazzjoni tal-Kriżijiet iserraħ fuq ir-riżorsi u l-mezzi eżistenti tas-servizzi.

2.  Il-Kumitat għall-Koordinazzjoni tal-Kriżijiet għandu jkun presedut mid-Deputat Segretarju Ġenerali b'responsabbiltà partikolari għall-koordinazzjoni politika.

3.  Il-Kumitat għall-Koordinazzjoni tal-Kriżijiet b'mod partikolari jeżamina u jissorvelja l-iżvilupp tas-sitwazzjoni, jidentifika kwistjonijiet u għażliet għal deċiżjoni u azzjoni, jiżgura li d-deċiżjonijiet u l-azzjonijiet huma implimentati u jiżgura l-koerenza u l-konsistenza tar-risposta.

4.  Id-Deċiżjonijiet maqbula fil-Kumitat għall-Koordinazzjoni tal-Kriżijiet ikunu adottati permezz ta' proċeduri normali ta' teħid ta' deċiżjonijiet u jkunu eżekwiti mid-Direttorati Ġenerali u s-sistemi ta' twissija f'waqtha.

5.  Is-servizzi tal-Kummissjoni bi dmir jiżguraw il-ġestjoni tal-ħidmiet f'konnessjoni mar-risposta fil-qasam ta' kompetenza tagħhom.

Artikolu 5

Il-Manwal tal-Proċeduri Operattivi

Manwal tal-Proċeduri Operattivi jiddefinixxi d-dispożizzjonijiet dettaljati biex jimplimentaw din id-deċiżjoni.

Artikolu 6

Il-Kummissjoni tirrevedi din id-deċiżjoni fid-dawl ta' l-esperjenza miksuba u l-progress teknoloġiku, l-aktar tard sa sena wara d-dħul fis-seħħ tagħha, u, jekk hemm bżonn, tadotta miżuri addizzjonali relatati mal-funzjoni ta' l-ARGUS.

▼M12




Regoli ddettaljati għall-applikazzjoni tar-Regolament (KE) Nru 1367/2006 tal-Parlament Ewropew u tal-Kunsill dwar l-applikazzjoni għall-istituzzjonijiet u l-korpi tal-Komunità tad-dispożizzjonijiet tal-Konvenzjoni ta’ Aarhus dwar l-Aċċess għall-Informazzjoni, il-Parteċipazzjoni tal-Pubbliku fit-Teħid ta’ Deċiżjonijiet u l-Aċċess għall-Ġustizzja fi Kwistjonijiet Ambjentali



Artikolu 1

Aċċess għal informazzjoni ambjentali

Il-limitu ta’ żmien ta’ 15-il ġurnata tax-xogħol imsemmi fl-Artikolu 7 tar-Regolament (KE) Nru 1367/2006 għandu jibda mid-data ta’ reġistrazzjoni tat-talba mid-dipartiment responsabbli tal-Kummissjoni.

Artikolu 2

Il-parteċipazzjoni tal-Pubbliku

Għall-finijiet ta’ l-implimentazzjoni ta’ l-Artikolu 9(1) tar-Regolament (KE) Nru 1367/2006 l-Kummissjoni għandha tiżgura l-parteċipazzjoni tal-pubbliku skond il-Komunikazzjoni “Prinċipji ġenerali u standards minimi għal konsultazzjoni ta’ partijiet interessati mill-Kummissjoni” ( 26 ).

Artikolu 3

Talbiet għal reviżjoni interna

Talbiet għal reviżjoni interna ta’ att amministrattiv jew relatati ma’ ommissjoni amministrattiva għandhom jintbagħtu bil-posta, faks jew posta elettronika lid-dipartiment responsabbli għall-applikazzjoni tad-dispożizzjoni li abbażi tiegħu l-att amminstrattiv ġie adottat, jew fir-rigward ta’ liema l-ommissjoni amminstrattiva hija allegata.

Għal dan il-fini d-dettalji ta’ kuntatt għandhom jiġu mgħarrfa lill-pubbliku bil-mezzi kollha adegwati.

Fejn talba tintbagħat lil dipartiment ieħor minbarra dak li għandu r-responsabbiltà tar-reviżjoni, dak id-dipartiment għandu jibgħat it-talba lil dak li għandu r-responsabbiltà.

Fi kwalunkwe każ, meta d-dipartiment responsabbli għar-reviżjoni ma jkunx id-Direttorat-Ġenerali “Ambjent”, dan għandu jgħarraf lil dan ta’ l-aħħar dwar it-talba li qed issir.

Artikolu 4

Deċiżjonijiet li jikkonċernaw l-ammissibbiltà ta’ talbiet għal reviżjoni interna

1.  Malli t-talba għal reviżjoni interna tiġi rreġistrata, riċevuta tal-wasla għandha tintbagħat lill-awtur tat-talba mill-organizzazzjoni mhux governattiva, fejn xieraq bil-mezzi elettroniċi.

2.  Id-dipartiment tal-Kummissjoni kkonċernat għandu jiddetermina jekk l-organizzazjoni mhux governattiva hix intitolata tagħmel talba għal reviżjoni interna skond id-Deċiżjoni tal-Kummisjson 2008/50/KE ( 27 ).

3.  Skond l-Artikolu 14 tar-Regoli ta’ Proċedura, is-setgħa għat-teħid tad-deċiżjonijiet rigward l-ammissibbiltà ta’ talba għal reviżjoni interna hija delegata lid-Direttur-Ġenerali jew lill-kap tad-dipartiment ikkonċernat.

Deċiżjonijiet dwar l-ammissibbiltà ta’ talba għandhom ikopru kwalunkwe deċiżjoni dwar id-dritt, f'konformità mal-paragrafu 2 ta’ dan l-Artikolu, ta’ l-awtur tat-talba mill-organizzazzjoni mhux governattiva, is-sottomissjoni fil-ħin tat-talba skond it-tieni subparagrafu ta’ l-Artikolu 10(1) tar-Regolament KE Nru 1367/2006, u dwar l-indikazzjoni u s-sostanzjament tar-raġunijiet li għalihom saret it-talba, kif meħtieġ fl-Artikolu 1(2) u (3) tad-Deċiżjoni 2008/50/KE.

4.  Meta d-Direttur-Ġenerali jew il-kap tad-Dipartiment imsemmi fil-paragrafu 3 jsib li t-talba għal reviżjoni interna ma hix ammissibbli bis-sħiħ jew parzjalment, l-awtur tat-talba mill-organizzazzjoni mhux governattiva għandu jiġi mgħarraf bil-miktub, jekk xieraq bil-mezzi elettroniċi, bi spjega tar-raġunijiet.

Artikolu 5

Deċiżjonijiet li jikkonċernaw is-sostanza ta’ talbiet għal reviżjoni interna

1.  Kwalunkwe deċiżjoni li biha tiġi ddeterminat li l-att amministrattiv li għalih qed tintalab ir-reviżjoni, jew l-ommissjoni amministrattiva allegata, jmorru kontra l-liġi ambjentali għandha tittieħed mill-Kummissjoni.

2.  Skond l-Artikolu 13 tar-Regoli ta’ Proċedura, il-Membru tal-Kummissjoni responsabbli għall-applikazzjoni tad-dispożizzjonijiet abbażi ta’ liema l-att amministrattiv ikkonċernat ġie adottat jew għal liema l-ommissjoni amministrattiva tirrelata għandu jkollu s-setgħa li jiddeċiedi li l-att amministrattiv li għalih qed tintalab reviżjoni, jew l-ommissjoni amministrattiva allegata, ma jmorrux kontra l-liġi ambjentali.

Is-subdelega tas-setgħat ikkonferiti skond l-ewwel subparagrafu għandu jkun ipprojbit.

3.  L-awtur tat-talba mill-organizzazzjoni mhux governattiva għandu jiġi mgħarraf bil-miktub dwar ir-riżultat tar-reviżjoni, fejn xieraq bil-mezzi elettroniċi, bi spjega tar-raġunijiet.

Artikolu 6

Rimedji

Kwalunkwe tweġiba li tgħarraf lill-organizzazzjoni mhux governattiva li t-talba tagħha jew ma hix ammissibbli kemm bis -sħiħ kif ukoll parzjalment, jew li l-att amministrattiv li għalih qed tintalab ir-reviżjoni, jew l-ommissjoni amministrattiva allegata, ma jmorrux kontra l-liġi ambjentali għandha tavża lill-organizzazzjoni mhux governattiva dwar ir-rimedji li hemm għaliha, jiġifieri li tiftaħ proċedimenti fil-qrati kontra l-Kummissjoni, jew li tiftaħ ilment ma’ l-Ombudsman, jew it-tnejn, skond il-kondizzjonijiet stabbiliti fl-Artikoli 230 u 195 tat-Trattat KE, rispettivament.

Artikolu 7

Tagħrif lill-pubbliku

Għandha tingħata lill-pubbliku gwida prattika bl-informazzjoni xierqa dwar id-drittijiet tagħhom skond ir-Regolament (KE) Nru 1367/2006.



( 1 ) It-Trattat dwar l-Unjoni Ewropea, l-Artikolu 17(6)(a).

( 2 ) It-Trattat dwar l-Unjoni Ewropea, l-Artikolu 17(6)(b).

( 3 ) It-Trattat dwar il-Funzjonament tal-Unjoni Ewropea, l-Artikolu 248.

( 4 ) Ara n-nota 3 ta’ qiegħ il-paġna.

( 5 ) Ara n-nota 3 ta’ qiegħ il-paġna.

( 6 ) It-Trattat dwar l-Unjoni Ewropea, l-Artikolu 17(6)(c).

( 7 ) It-Trattat dwar l-Unjoni Ewropea, l-Artikolu 17(6), it-tieni paragrafu.

( 8 ) ĠU L 156, 18.6.2005, p. 3.

( 9 ) Indirizz Postali: Secretariat-General of the European Commission, Unit SG/B/2 “Openness, access to documents, relations with civil society”, rue de la Loi/Wetstraat 200, B-1049 Brussels (fax (32-2) 296 72 42).

Indirizz elettroniku: SG-Code-de-bonne-conduite@cec.eu.int.

( 10 ) OJ 17/58, 6.10.1958, p. 406/58.

( 11 ) OJ L 151, 15.6.1990, p. 1.

( 12 ) OJ L 101, 11.4.2001, p. 1.

( 13 ) OJ L 145, 31.5.2001, p. 43.

( 14 ) Without prejudice to the Vienna Convention of 1961 on diplomatic relations and the Protocol on the privileges and immunities of the European Communities of 8 April 1965.

( 15 ) See a comparative table of EU, NATO, WEU and Member States' security classifications in Appendix 1.

( 16 ) ĠU L 145, 31.05.2001, p. 43.

( 17 ) ĠU L 136, 31.05.1999, p. 20.

( 18 ) C(2000)200.

( 19 ) SEC(2001)924.

( 20 ) ĠU L 21 ta' l-24.1.2002, p. 23.

( 21 ) C(2002)99 finali.

( 22 ) ĠU L 317 tat-3.12.2001, p. 1.

( 23 ) ĠU L 8 tat-12.1.2001, p. 1.

( 24 ) ĠU L 145 tal-31.5.2001, p. 43.

( 25 ) ĠU L 13 tad-19.1.2000, p. 12.

( 26 ) COM(2002) 704 finali.

( 27 ) ĠU L 13, 16.1.2008, p. 24.