### as regards turkey , the legal basis for protection against persecution and mistreatment is adequately provided by substantive and procedural human rights and anti - discrimination legislation , including membership of all major international human rights treaties . in 2014 , the european court of human rights found violations in 94 out of 2 899 applications . there are no indications of any incidents of expulsion , removal or extradition of own citizens to third countries where , inter alia , there is a serious risk that they would be subjected to the death penalty , torture , persecution or other inhuman or degrading treatment or punishment , or where their lives or freedom would be threatened on account of their race , religion , nationality , sexual orientation , membership of a particular social group or political opinion , or from which there is a serious risk of an expulsion , removal or extradition to another third country . in 2014 , member states considered that 23 , 1 % of asylum applications of citizens of turkey were well - founded . one member state has designated turkey as a safe country of origin . turkey has been designated as a candidate country by the european council and negotiations have been opened . at the time , the assessment was that turkey sufficiently meets fulfilled the political criteria established by the copenhagen european council of 21 - 22 june 1993 relating to stability of institutions guaranteeing democracy , the rule of law , human rights and respect for and protection of minorities , and turkey will have to continue to fulfil those criteria , for becoming a member in line with the recommendations provided in the annual progress report . ### as regards turkey , the legal basis for protection against persecution and mistreatment is adequately provided by substantive and procedural human rights and anti - discrimination legislation , including membership of all major international human rights treaties . in 2014 , the european court of human rights found violations in 94 out of 2 899 applications . there are no indications of any incidents of expulsion , removal or extradition of own citizens to third countries where , inter alia , there is a serious risk that they would be subjected to the death penalty , torture , persecution or other inhuman or degrading treatment or punishment , or where their lives or freedom would be threatened on account of their race , religion , nationality , membership of a particular social group or political opinion , or from which there is a serious risk of an expulsion , removal or extradition to another third country . in 2014 , member states considered that23 . 1% of asylum applications of citizens of turkey were well - founded . one member state has designated turkey as a safe country of origin . turkey has been designated as a candidate country by the european council and negotiations have been opened . at the time , the assessment was that turkey sufficiently fulfilled the political criteria established by the copenhagen european council of 21 - 22 june 1993 relating to stability of institutions guaranteeing democracy , the rule of law , human rights and respect for and protection of minorities , and turkey will have to continue to fulfil those criteria , for becoming a member in line with the recommendations provided in the annual progress report .


### in order to ensure uniform conditions for the implementation of this regulation , in particular as regards the provision of information , documents to the applicants and measures concerning applicants in need of special procedural guarantees including minors , implementing powers should be conferred on the commission . those powers should be exercised in accordance with regulation no 182 / 2011 of the european parliament and of the council34of 16 february 2011 laying down the rules and general principles concerning mechanisms for control by the member states of the commission ' s exercise of implementing powers . _________________ 34 regulation no 182 / 2011 of the european parliament and of the council of 16 february 2011 laying down the rules and general principles concerning mechanisms for control by the member states of the commission ' s exercise of implementing powers . ### in order to ensure uniform conditions for the implementation of this directive , in particular as regards the provision of information , documents to the applicants and measures concerning applicants in need of special procedural guarantees including minors , implementing powers should be conferred on the commission . those powers should be exercised in accordance with regulation no 182 / 2011 of the european parliament and of the council34 of 16 february 2011 laying down the rules and general principles concerning mechanisms for control by the member states of the commission ' s exercise of implementing powers . _________________ 34 regulation no 182 / 2011 of the european parliament and of the council of 16 february 2011 laying down the rules and general principles concerning mechanisms for control by the member states of the commission ' s exercise of implementing powers .


### the application of this regulation should be evaluated at regular intervals . ### the implementation of this directive should be evaluated at regular intervals .


### where an applicant refuses to cooperate by not providing the details necessary for the examination of the application and by not providing his or her fingerprints and facial image , and the responsible authorities have properly informed that person of his or her obligations and has ensured that that person has had an effective opportunity to comply with those obligations , his or her application shall be rejected as abandoned in accordance with the procedure referred to in article 39 . ### where an applicant has been properly informed by the responsible authorities of his or her obligations referred to in this regulation and the consequences deriving from not adhering to these obligations , and refuses to cooperate by not providing the details referred to in points and of the second paragraph of article 27 or by not complying with the process of taking biometric data , his or her application shall be rejected as abandoned in accordance with the procedure referred to in article 39 .


### the determining authority shall ensure that applicants and , where applicable , their guardians , legal advisers or other counsellors have access to the information referred to in article 33 required for the examination of applications and to the information provided by the experts referred to in article 33 , where the determining authority has taken that information into consideration for the purpose of taking a decision on their application . ### the determining authority shall ensure that applicants and , where applicable , their guardians and / or legal representatives have access to the information referred to in article 33 required for the examination of applications and to the information provided by the experts referred to in article 33 , where the determining authority has taken that information into consideration for the purpose of taking a decision on their application .


### before a decision is taken by the determining authority on the merits of an application for international protection , the applicant shall be given the opportunity of a substantive interview on his or her application . ### before a decision is taken by the determining authority on the merits of an application for international protection , the applicant shall be given the opportunity of a substantive interview on his or her application with a person empowered under national law to conduct such an interview .


### without prejudice to the applicant ' s right to choose his or her own legal adviser or other counsellor at his or her own cost , an applicant may request free legal assistance and representation at all stages of the procedure in accordance with articles 15 to 17 . the applicant shall be informed of his or her right to request free legal assistance and representation at all stages of the procedure . ### without prejudice to the applicant ' s right to choose his or her own legal adviser or other counsellor at his or her own cost , an applicant may request free legal assistance and representation at all stages of the procedure in accordance with articles 15 to 17 . the applicant shall be informed of his or her right to request free legal assistance and representation at the stage of the appeal procedure .


### as regards point , the determining authority shall , in particular , grant access to information or sources to a legal adviser or other counsellor who has undergone a security check , insofar as the information is relevant for examining the application or for taking a decision to withdraw international protection . ### as regards point , the determining authority may , in particular , grant access to information or sources to a legal adviser or other counsellor who has undergone a security check , insofar as the information is relevant for examining the application or for taking a decision to withdraw international protection .


### the personnel of the authorities responsible for receiving and registering applications shall , when registering the application , indicate whether or not an applicant presents first indications of vulnerability which may require special procedural guarantees and may be inferred from physical signs or from the applicant ' s statements or behaviour . ### the personnel of the authorities responsible for receiving and registering applications shall , when registering the application , indicate whether or not an applicant presents obvious indications of vulnerability which may require special procedural guarantees and may be inferred from physical signs or from the applicant ' s statements or behaviour .


### the information that an applicant presents first signs of vulnerability shall be included in the applicant ' s file together with the description of the signs of vulnerability presented by the applicant that could require special procedural guarantees . ### the information that an applicant presents obvious signs of vulnerability shall be included in the applicant ' s file together with the description of the signs of vulnerability presented by the applicant that could require special procedural guarantees .


### member states shall ensure that the personnel of the authorities referred to in article 5 is trained to detect first signs of vulnerability of applicants that could require special procedural guarantees and that it shall receive instructions for that purpose . ### member states shall ensure that the personnel of the authorities referred to in article 5 is trained to detect obvious signs of vulnerability of applicants that could require special procedural guarantees and that it shall receive instructions for that purpose .


### the determining authority shall provide a minor the opportunity of a personal interview , including where an application is made on his or her own behalf in accordance with article 31 and article 32 , unless this is manifestly not in the best interests of the child . in that case , the determining authority shall give reasons for the decision not to provide a minor with the opportunity of a personal interview . ### the determining authority shall provide a minor with a personal interview , including where an application is made on his or her own behalf in accordance with article 31 and article 32 , unless this is manifestly not in the best interests of the child . in that case , the determining authority shall give reasons for the decision not to provide a minor with a personal interview .


### any such personal interview shall be conducted by a person who has the necessary knowledge of the rights and special needs of minors and it shall be conducted in a child - sensitive and context - appropriate manner . ### any such personal interview shall be conducted in language they understand , in a child - sensitive and context - appropriate manner . the person conducting the personal interview shall have the necessary knowledge of the rights and special needs of minors and shall not wear military or law enforcement uniform


### the decision on the application of a minor shall be prepared by personnel of the determining authority who have the necessary knowledge of the rights and special needs of minors . ### the decision on the application of a minor shall be taken by personnel of the determining authority who have the necessary knowledge of the rights and special needs of minors .


### the responsible authorities shall not place a guardian in charge of a disproportionate number of unaccompanied minors at the same time , which would render him or her unable to perform his or her tasks effectively . ### the responsible authorities shall ensure that a guardian is not placed in charge of a disproportionate number of unaccompanied minors at the same time that would render him or her unable to perform his or her tasks effectively , and in any case of no more than 20 .


### the responsible authorities shall not place a guardian in charge of a disproportionate number of unaccompanied minors at the same time , which would render him or her unable to perform his or her tasks effectively . ### the responsible authorities shall place a guardian in charge of an adequate and limited number of unaccompanied minors at the same time , which would render him or her to ensure he or she is unable to perform his or her tasks effectively . '


### member states shall appoint entities or persons responsible for the performance of guardians ' tasks and for supervising and monitoring at regular intervals that guardians perform their tasks in a satisfactory manner . those entities or persons shall review complaints lodged by unaccompanied minors against their guardian . ### member states shall appoint entities or persons responsible for monitoring at regular intervals that guardians perform their tasks in a satisfactory manner . those entities or persons shall also have the competence to review complaints lodged by unaccompanied minors against their guardian . to this end , unaccompanied minors shall be given information in a concise , transparent , intelligible and easily accessible form , using clear and plain language both orally and in a visual form , in a child - friendly manner and in a language they understand , about who these entities or persons are and how to file complaints against their guardians in confidence and safety .


### the medical examination to determine the age of unaccompanied minors shall not be carried out without their consent or the consent of their guardians . ### the medical examination to determine the age of minors shall not be carried out without their consent or the consent of their guardians .


### any medical examination shall be performed with full respect for the individual’s dignity , shall be the least invasive examination and shall be carried out by qualified medical professionals allowing for the most reliable result possible . ### any medical examination shall be performed with full respect for the individual ' s dignity , shall be the least invasive examination and shall be carried out by independent , trained and qualified medical professionals who are familiar with the applicant ' s ethnic and cultural background and in cooperation with a multi - disciplinary team with expertise in child rights , psychology and development , thereby allowing for the most reliable result possible .


### when lodging an application , applicants are required to submit all the elements referred to in article 4 of regulation no xxx / xxx needed for substantiating their application . following the lodging of their application , applicants shall be authorised to submit any additional elements relevant for its examination until a decision under the administrative procedure is taken on the application . ### when lodging an application , applicants shall submit all the elements referred to in article 4 of regulation no xxx / xxx needed for substantiating their application . he or she shall cooperate with the determining authority and shall remain present and available throughout the procedure . following the lodging of their application , applicants shall be authorised to submit any additional elements relevant for its examination until a decision under the administrative procedure is taken on the application .


### where there are indications that third - country nationals or stateless persons held in detention facilities or present at border crossing points , including transit zones , at external borders , may need international protection , the responsible authorities shall inform them of the possibility to apply for international protection , in particular , where : ### member states shall assess whether third - country nationals or stateless persons held in detention facilities or present at border crossing points , including transit zones , at external borders , are in need of international protection . if so , the responsible authorities shall inform them of the possibility to apply for international protection , in particular , where :


### the determining authority shall assess the admissibility of an application , in accordance with the basic principles and guarantees provided for in chapter ii , and shall reject an application as inadmissible where any of the following grounds applies : ### where there are indications that the grounds stated in this paragraph exist , the determining authority shall assess the admissibility of an application , in accordance with the basic principles and guarantees provided for in chapter ii , and shall reject an application as inadmissible where any of the following grounds applies :


### paragraph 1 and shall not apply to a beneficiary of subsidiary protection who has been resettled under an expedited procedure in accordance with regulation no xxx / xxx . 37 _________________ 37 oj l [ … ] , [ … ] , p . [ … ] . ### paragraph 1 and shall not apply to a beneficiary of international protection who has been resettled in accordance with regulation no xxx / xxx . 37 _________________ 37 oj l [ … ] , [ … ] , p . [ … ] .


### the determining authority shall declare an unfounded application to be manifestly unfounded in the cases referred to in article 40 , , , and . ### where there are indications that the grounds stated in article 40 , , , and exist , the determining authority shall declare an unfounded application to be manifestly unfounded .


### where the determining authority considers that the examination of the application involves issues of fact or law that are complex to be examined under an accelerated examination procedure , it may continue the examination on the merits in accordance with articles 34 and 37 . in that case , or where otherwise a decision cannot be taken within the time - limits referred to in paragraph 2 , the applicant concerned shall be informed of the change in the procedure . ### where the determining authority considers that the examination of the application involves issues of fact or law that are too complex to be examined under an accelerated examination procedure , it may continue the examination on the merits in accordance with articles 34 and 37 . this is without prejudice to the right of the determining authority to declare an application manifestly unfounded in accordance with article 37 which shall remain valid also for the subsequent examination on the merits procedure . in that case , or where otherwise a decision cannot be taken within the time - limits referred to in paragraph 2 , the applicant concerned shall be informed of the change in the procedure .


### the applicant comes from a third country considered to be a safe country of origin in accordance with the conditions set out in article 47 ; ### the applicant comes from a third country which is not a member state that is considered as a safe country of origin pursuant to article 47 ;


### the determining authority may , in accordance with the basic principles and guarantees provided for in chapter ii , take a decision on an application at the border or in transit zones of the member state on : ### the determining authority may , in accordance with the basic principles and guarantees provided for in chapter ii , take a decision , at its own discretion and depending on its capacity , on an application at the border or in transit zones of the member state on :


### the determining authority may , in accordance with the basic principles and guarantees provided for in chapter ii , take a decision on an application at the border or in transit zones of the member state on : ### the determining authority may take a decision on an application at the border or in transit zones of the member state in accordance with the basic principles and guarantees provided for in chapter ii . this decision shall be limited to :


### with a view to improve the management of the external borders , to contribute to preventing and combating irregular migration and to contribute to a high level of security within the area of freedom , security and justice of the union , including the maintenance of public security and public policy and safeguarding the security in the territories of the member states , interoperability between eu information systems , namely [ the entry / exit system ] , the visa information system , [ the european travel information and authorisation system ] , eurodac , the schengen information system , and the [ european criminal records information system for third - country nationals ] should be established in order for these eu information systems and their data to supplement each other . to achieve this , a european search portal , a shared biometric matching service , a common identity repository and a multiple - identity detector should be established as interoperability components . ### in order to improve the management of the external borders , to contribute to preventing and combating irregular migration and to contribute to a high level of security within the area of freedom , security and justice of the union , including the maintenance of public security and public policy and safeguarding the security in the territories of the member states , to improve the implementation of the common visa policy and to assist in examining applications for international protection , in order to maintain public trust in the union migration and asylum system , union security measures and union capabilities to manage the external border , interoperability between union information systems , namely the entry / exit system , visa information system , [ the european travel information and authorisation system ] , eurodac , the schengen information system , and the [ european criminal records information system for third - country nationals ] should be established in order for these union information systems and their data to supplement each other . to achieve this , a european search portal , a shared biometric matching service , a common identity repository and a multiple - identity detector should be established as interoperability components .


### the interoperability between the eu information systems should allow said systems to supplement each other in order to facilitate the correct identification of persons , contribute to fighting identity fraud , improve and harmonise data quality requirements of the respective eu information systems , facilitate the technical and operational implementation by member states of existing and future eu information systems , strengthen and simplify the data security and data protection safeguards that govern the respective eu information systems , streamline the law enforcement access to the ees , the vis , the [ etias ] and eurodac , and support the purposes of the ees , the vis , the [ etias ] , eurodac , the sis and the [ ecris - tcn system ] . ### the interoperability between the union information systems should allow said systems to supplement each other in order to facilitate the correct identification of persons , contribute to fighting identity fraud , improve and harmonise data quality requirements of the respective union information systems , contribute to ensuring the effective use of union information systems , europol data and interpol databases by facilitating access to them by the authorities in accordance with their access rights and the objectives and purposes as laid down in the legal instruments governing the respective systems , strengthen , simplify and harmonise the data security and data protection safeguards that govern the respective union information systems and streamline and simplify law enforcement access to the ees , vis , [ etias ] and eurodac , and support the purposes of the ees , vis , [ etias ] , eurodac , sis and [ ecris - tcn ] .


### the european search portal should be established to facilitate technically the ability of member state authorities and eu bodies to have fast , seamless , efficient , systematic and controlled access to the eu information systems , the europol data and the interpol databases needed to perform their tasks , in accordance with their access rights , and to support the objectives of the ees , the vis , the [ etias ] , eurodac , the sis , the [ ecris - tcn system ] and the europol data . enabling the simultaneous querying of all relevant eu information systems in parallel , as well as of the europol data and the interpol databases , the esp should act as a single window or ‘ message broker’ to search various central systems and retrieve the necessary information seamlessly and in full respect of the access control and data protection requirements of the underlying systems . ### the esp should be established to facilitate technically the ability of member state authorities and union agencies to have access to the union information systems , europol data and the interpol databases needed to perform their tasks , in accordance with their access rights , and to support the objectives of the ees , vis , [ etias ] , eurodac , the sis , [ ecris - tcn ] and europol data . enabling the simultaneous querying of all relevant union information systems in parallel , as well as of europol data and the interpol databases , the esp should act as a single window or ‘ message broker’ to search various central systems and retrieve the necessary information seamlessly and in full respect of the access control and data protection requirements of the underlying systems .


### to ensure fast and systematic use of all eu information systems , the european search portal should be used to query the common identity repository , the ees , the vis , [ the etias ] , eurodac and [ the ecris - tcn system ] . however , the national connection to the different eu information systems should remain in order to provide a technical fall back . the esp should also be used by union bodies to query the central sis in accordance with their access rights and in order to perform their tasks . the esp should be an additional means to query the central sis , the europol data and the interpol systems , complementing the existing dedicated interfaces . ### to ensure fast and systematic use of all union information systems , the european search portal should be used to query the common identity repository , the ees , vis , [ etias ] , eurodac and [ ecris - tcn ] . a central union backup esp should be established in order to provide all the functionalities of the principal esp and a similar level of performance as it in the event of its failure . however , the national connection to the different union information systems should remain in order to provide a technical fall back . the esp should also be used by union agencies to query the central sis in accordance with their access rights and in order to perform their tasks . the esp should be an additional means to query the central sis , europol data and the interpol systems , complementing the existing dedicated interfaces .


### this regulation should also introduces a new possibility for streamlined access to data beyond identity data present in the ees , the vis , [ the etias ] or eurodac by member state designated law enforcement authorities and europol . data , including data other than identity data contained in those systems , may be necessary for the prevention , detection , investigation and prosecution of terrorist offences or serious criminal offences in a specific case . ### this regulation should also introduces a new possibility for streamlined access to data beyond identity data present in the ees , the vis , [ the etias ] or eurodac by member state designated authorities and europol . data , including data other than identity data contained in those systems , may be necessary for the prevention , detection , investigation and prosecution of terrorist offences or serious criminal offences in a specific case .


### full access to the necessary data contained in the eu information systems necessary for the purposes of preventing , detecting and investigating terrorist offences or other serious criminal offences , beyond the relevant identity data covered under common identity repository obtained using biometric data of that person taken during an identity check , should continue to be governed by the provisions in the respective legal instruments . the designated law enforcement authorities and europol do not know in advance which of the eu information systems contains data of the persons they need to inquire upon . this results in delays and inefficiencies in the conduct of their tasks . the end - user authorised by the designated authority should therefore be allowed to see in which of the eu information systems the data corresponding to the query introduced are recorded . the concerned system would thus be flagged following the automated verification of the presence of a hit in the system . ### full access to the necessary data contained in the eu information systems necessary for the purposes of preventing , detecting and investigating terrorist offences or other serious criminal offences , beyond the relevant identity data covered under common identity repository obtained using biometric data of that person taken during an identity check , should continue to be governed by the provisions in the respective legal instruments . the designated authorities and europol do not know in advance which of the eu information systems contains data of the persons they need to inquire upon . this results in delays and inefficiencies in the conduct of their tasks . the end - user authorised by the designated authority should therefore be allowed to see in which of the eu information systems the data corresponding to the query introduced are recorded . the concerned system would thus be flagged following the automated verification of the presence of a hit in the system .


### eu - lisa should establish automated data quality control mechanisms and common data quality indicators . eu - lisa should be responsible to develop a central monitoring capacity for data quality and to produce regular data analysis reports to improve the control of implementation and application by member states of eu information systems . the common quality indicators should include the minimum quality standards to store data in the eu information systems or the interoperability components . the goal of such a data quality standards should be for the eu information systems and interoperability components to automatically identify apparently incorrect or inconsistent data submissions so that the originating member state is able to verify the data and carry out any necessary remedial actions . ### eu - lisa should establish automated data quality control mechanisms and common data quality indicators . eu - lisa should send out automatic and immediate warnings to the authority entering data if minimum data quality standards are not met . eu - lisa should be responsible to develop a central monitoring capacity for data quality and to produce regular data analysis reports to improve the control of implementation and application by member states of eu information systems . the common quality indicators should include the minimum quality standards to store data in the eu information systems or the interoperability components . the goal of such a data quality standards should be for the eu information systems and interoperability components to automatically identify apparently incorrect or inconsistent data submissions so that the originating member state is able to verify the data and carry out any necessary remedial actions .


### the universal message format should establish a standard for structured , cross - border information exchange between information systems , authorities and / or organisations in the field of justice and home affairs . umf should define a common vocabulary and logical structures for commonly exchanged information with the objective to facilitate interoperability by enabling the creation and reading of the contents of the exchange in a consistent and semantically equivalent manner . ### the universal message format should establish a standard for structured , cross - border information exchange between information systems , authorities and / or organisations in the field of justice and home affairs , including sis . umf should define a common vocabulary and logical structures for commonly exchanged information with the objective to facilitate interoperability by enabling the creation and reading of the contents of the exchange in a consistent and semantically equivalent manner .


### insofar as confidentiality is concerned , the relevant provisions of the staff regulations of officials and the conditions of employment of other servants of the european union should apply to officials or other servants employed and working in connection with sis . ### insofar as confidentiality is concerned , the relevant provisions of the staff regulations of officials and the conditions of employment of other servants of the european union should apply to officials or other servants employed and working in connection with the data accessed through any of the interoperability components .


### this regulation also adapts the procedures and conditions for member state law enforcement authorities and for the european union agency for law enforcement cooperation access to the entry / exit system , the visa information system , [ the european travel information and authorisation system , ] and eurodac for the purposes of the prevention , detection and investigation of terrorist offences or of other serious criminal offences falling under their competence . ### this regulation also adapts the procedures and conditions for member state designated authorities and for the european union agency for law enforcement cooperation access to the ees , vis , [ etias , ] and eurodac for the purposes of the prevention , detection and investigation of terrorist offences or of other serious criminal offences .


### objectives of interoperability ### objectives


### improving and harmonising data quality requirements of the respective eu information systems ; ### improving and harmonising the quality of the data stored in the union information systems ;


### ‘ border authority’ means the border guard assigned in accordance with national law to carry out border checks ; ### ‘ border authority’ means the border guard assigned in accordance with national law to carry out border checks as defined in article 2 of regulation 2016 / 399 ;


### ‘ eu information systems’ means the large - scale it systems managed by eu - lisa ; ### ‘ eu information systems’ means the large - scale it systems operationally managed by eu - lisa ;


### ‘ eu information systems’ means the large - scale it systems managed by eu - lisa ; ### ‘ union information systems’ means the ees , vis , [ etias ] , eurodac , sis and [ ecris - tcn ] managed by eu - lisa ;


### ‘ europol data’ means personal data provided to europol for the purpose referred to in article 18 of regulation 2016 / 794 ; ### ‘ europol data’ means personal data processed by europol for the purposes referred to in article 18 to of regulation 2016 / 794 ;


### ‘ terrorist offence’ means an offence under national law which corresponds or is equivalent to one of the offences referred to in directive 2017 / 541 ; ### ‘ terrorist offence’ means an offence under national law which corresponds to one of the offences referred to in articles 3 to 14 of directive 2017 / 541 , or which is equivalent to one of those offences for the member states which are not bound by that directive ;


### ' sis ' means the schengen information system as referred to [ in the regulation on sis in the field of border checks , regulation on sis in the field of law enforcement and regulation on sis in the field of illegal return ] ; ### ' sis ' means the schengen information system as referred to [ in the regulation on sis in the field of border checks , regulation on sis in the field of law enforcement and regulation on sis in the field of return ] ;


### a european search portal is established for the purposes of ensuring that member state authorities and eu bodies have fast , seamless , efficient , systematic and controlled access to the eu information systems , the europol data and the interpol databases that they need to perform their tasks in accordance with their access rights and of supporting the objectives of the ees , the vis , [ the etias ] , eurodac , the sis , [ the ecris - tcn system ] and the europol data . ### a european search portal is established for the purposes of facilitating the access of member state authorities and of union agencies to the union information systems , to europol data and to the interpol databases in the performance of their tasks and in accordance with their access rights to and the objectives and purposes of the ees , vis , [ etias ] , eurodac , sis , [ ecris - tcn ] and europol data .


### a secure communication channel between the esp , member states and eu bodies that are entitled to use the esp in accordance with union law ; ### a secure communication channel between the esp , member states and union agencies that are entitled to use the esp ;


### a secure communication channel between the cir , member states and eu bodies that are entitled to use the european search portal in accordance with union law ; ### a secure communication channel between the cir , member states and union agencies that are entitled to use the cir in accordance with the national and union law ;


### the use of the esp shall be reserved to the member state authorities and eu bodies having access to the ees , [ the etias ] , the vis , the sis , eurodac and [ the ecris - tcn system ] , to the cir and the multiple - identity detector as well as the europol data and the interpol databases in accordance with union or national law governing such access . ### the use of the esp shall be reserved to the member state authorities and union agencies having access to the ees , [ etias ] , vis , sis , eurodac and [ ecris - tcn ] in accordance with the legal instruments governing those union information systems , to the cir and the multiple - identity detector in accordance with this regulation as well as europol data in accordance with regulation 2016 / 794 and to the interpol databases in accordance with union or national law governing such access .


### the eu information systems , the europol data and the interpol databases that shall and may be consulted and that shall provide a reply to the user ; and ### the eu information systems , the europol data and the interpol databases that shall and may be consulted and that shall provide a reply to the user , whereby it shall be ensured that access according to access rights is technically ensured ; and


### the eu information systems , the europol data and the interpol databases that shall and may be consulted and that shall provide a reply to the user ; and ### the union information systems , europol data , the interpol databases and the elements of those systems that may be queried and that shall provide a reply to the user ; a user requesting data on the basis of article 22 shall only get a hit / no - hit notification if the user is authorised to request from the central access point the data of the individual union information system having provided a hit in accordance with the legal instrument governing that system ;


### the commission shall adopt delegated acts in accordance with article 63 to specify the technical details of the profiles referred to in paragraph 1 for the users of the esp referred to in article 7 in accordance with their access rights . ### the commission shall adopt delegated acts in accordance with article 63 to specify the technical details of the profiles referred to in paragraph 1 for the users of the esp referred to in article 7 in accordance with their access rights as laid down in the legal instruments governing union information systems and national law where applicable .


### the users of the esp shall launch a query by introducing data in the esp in accordance with their user profile and access rights . where a query has been launched , the esp shall query simultaneously , with the data introduced by the user of the esp , the ees , [ the etias ] , the vis , the sis , eurodac , [ the ecris - tcn system ] and the cir as well as the europol data and the interpol databases . ### the users of the esp shall launch a query by introducing data in the esp in accordance with their esp user profile , created in accordance with article 8 , and access rights . where a query has been launched , the esp shall query simultaneously , with the data introduced by the user of the esp , the ees , [ etias ] , vis , sis , eurodac , [ ecris - tcn ] and the cir as well as europol data and the interpol databases .


### the ees , [ the etias ] , the vis , the sis , eurodac , [ the ecris - tcn system ] , the cir and the multiple - identity detector , as well as the europol data and the interpol databases , shall provide the data that they contain resulting from the query of the esp . ### the ees , [ etias ] , vis , the sis , eurodac , [ ecris - tcn ] , the cir and the multiple - identity detector , as well as europol data and the interpol databases , shall provide the data that they contain resulting from the query of the esp . the esp shall provide replies to the user as soon as data is available from one of the systems . the replies to the user from the esp shall be unique and shall contain all the data to which the user has access under union law and under national law . without prejudice to article 20 , the reply provided by the esp shall indicate to which union information system or database the data belongs .


### when querying the interpol databases , the design of the esp shall ensure that the data used by the user of the esp to launch a query is not shared with the owners of interpol data . ### when querying the interpol databases , the design of the esp shall ensure that no information is revealed to the owner of the interpol alert .


### without prejudice to [ article 46 of the ees regulation ] , article 34 of regulation no 767 / 2008 and [ article 12 and 18 of the regulation on sis in the field of law enforcement ] , eu - lisa shall keep logs of all data processing operations within the shared bms . those logs shall include , in particular , the following : ### without prejudice to [ article 46 of the ees regulation ] , article 34 of regulation no 767 / 2008 and [ article 12 and 18 of the regulation on sis in the field of border checks ] , eu - lisa shall keep logs of all data processing operations within the shared bms . those logs shall include the following :


### where it is technically impossible to use the esp to query one or several eu information systems referred to in article 9 or the cir , because of a failure of the esp , the users of the esp shall be notified by eu - lisa . ### where it is technically impossible to use the esp to query one or several union information systems or the cir , because of a failure of the esp , the users of the esp shall be notified without delay by eu - lisa .


### where it is technically impossible to use the esp to query one or several eu information systems referred to in article 9 or the cir , because of a failure of the national infrastructure in a member state , that member state ' s competent authority shall notify eu - lisa and the commission . ### where it is technically impossible to use the esp to query one or several union information systems or the cir , because of a failure of the national infrastructure in a member state , that member state ' s competent authority shall without delay inform all its users and notify eu - lisa and the commission .


### in both scenarios , and until the technical failure is addressed , the obligation referred to in article 7 and shall not apply and member states may access the information systems referred to in article 9 or the cir directly using their respective national uniform interfaces or national communication infrastructures . ### in both scenarios , and until the technical failure is addressed , the obligation referred to in article 7 and shall not apply and member states shall access the union information systems or the cir directly using their respective national uniform interfaces or national communication infrastructures .


### [ the data referred to in article 13 of the eurodac regulation ; ] ### [ the data referred to in article 12 and , article 13 , and and article 14 , and of the eurodac regulation ; ]


### the results of the query and date and time of the result ; ### the results of the query and the date and time of the result and the union information system from which the data was received ;


### a common identity repository , creating an individual file for each person that is recorded in the ees , the vis , [ the etias ] , eurodac or [ the ecris - tcn system ] containing the data referred to in article 18 , is established for the purpose of facilitating and assisting the correct identification of persons registered in the ees , the vis , [ the etias ] , the eurodac and [ the ecris - tcn system ] , of supporting the functioning of the multiple - identity detector and of facilitating and streamlining access by law enforcement authorities to non - law enforcement information systems at eu level , where necessary for the prevention , investigation , detection or prosecution of serious crime . ### a common identity repository , creating an individual file for each person that is recorded in the ees , the vis , [ the etias ] , eurodac or [ the ecris - tcn system ] containing the data referred to in article 18 , is established for the purpose of facilitating and assisting the correct identification of persons registered in the ees , the vis , [ the etias ] , the eurodac and [ the ecris - tcn system ] , of supporting the functioning of the multiple - identity detector and of facilitating and streamlining access by designated authorities to non - law enforcement information systems at eu level , where necessary for the prevention , investigation , detection or prosecution of serious crime .


### – ### – [ the data referred to in article 5 and 5 and the following data of article 5 of the ecris - tcn regulation : surname or family name ; first name ) ; sex ; date of birth ; place and country of birth ; nationality or nationalities ; gender and where applicable previous names , pseudonyms and / or alias name as well as information on travel documents . ]


### where data is added , amended or deleted in the ees , the vis and [ the etias ] , the data referred to in article 18 stored in the individual file of the cir shall be added , amended or deleted accordingly in an automated manner . ### without duplicating the data from the respective union information systems , where data is added , amended or deleted in the ees , vis and [ etias ] , the data referred to in article 18 stored in the individual file of the cir shall be simultaneously added , amended or deleted accordingly in an automated manner .


### where a member state police authority has been so empowered by national legislative measures as referred to in paragraph 2 , it may , solely for the purpose of identifying a person , query the cir with the biometric data of that person taken during an identity check . ### where the situation referred to in paragraph - 1 arises and a member state police authority has been so empowered by national legislative measures as referred to in paragraph 2 , it may , solely for the purpose of identifying a person who is physically present , query the cir with the biometric data of that person taken during an identity check .


### member states wishing to avail themselves of the possibility provided for in this article shall adopt national legislative measures . such legislative measures shall specify the precise purposes of identity checks within the purposes referred to in article 2 and . they shall designate the police authorities competent and lay down the procedures , conditions and criteria of such checks . ### member states wishing to avail themselves of the possibility provided for in this article shall adopt national legislative measures within the purposes referred to in article 2 and . they shall designate the police authorities competent and lay down the procedures , conditions and criteria of such checks .


### the individual file shall be stored in the cir for as long as the corresponding data is stored in at least one of the information systems whose data is contained in the cir . the creation of a link shall not affect the retention period of each item of the linked data . ### the individual file shall be stored in the cir for as long as the corresponding data is stored in at least one of the information systems whose data is contained in the cir . the creation of a link shall not affect the retention period of each item of the linked data . once all data to which a link is created is deleted the link shall also be deleted automatically .


### concerning any access to the cir pursuant to article 20 , eu - lisa shall keep logs of all data processing operations within the cir . those logs shall include , in particular , the following : ### concerning any access to the cir pursuant to article 20 , eu - lisa shall keep logs of all data processing operations within the cir . those logs shall include the following :


### concerning any access to the cir pursuant to article 21 , eu - lisa shall keep logs of all data processing operations within the cir . those logs shall include , in particular , the following : ### concerning any access to the cir pursuant to article 21 , eu - lisa shall keep logs of all data processing operations within the cir . those logs shall include the following :


### concerning any access to the cir pursuant to article 22 , eu - lisa shall keep logs of all data processing operations within the cir . those logs shall include , in particular , the following : ### concerning any access to the cir pursuant to article 22 , eu - lisa shall keep logs of all data processing operations within the cir . those logs shall include the following :


### the results of the query ; ### the results of the query and the union information system from which the data was received ;


### where relevant , the results of the query ; ### the results of the query and the union information system from which the data was received ;


### where relevant , the data used to launch the query ; ### the data used to launch the query ;


### the type of data used to launch the query ; ### the data used to launch the query or in the case of a query launched with biometric data the type of data used to launch the query ;


### the logs of such access shall be regularly verified by the competent supervisory authority established in accordance with article 51 of regulation 2016 / 679 or in accordance with article 41 of directive 2016 / 680 , at intervals not exceeding six months , to verify whether the procedures and conditions set out in article 22 to are fulfilled . ### the logs of such access shall be regularly verified by the competent supervisory authority established in accordance with article 51 of regulation 2016 / 679 or in accordance with article 41 of directive 2016 / 680 , at intervals not exceeding six months , to verify whether the procedures and conditions set out in article 22 to are fulfilled . eu - lisa shall make available to the supervisory authorities a practical tool to ease and automate as far as possible the verification of the logs .


### eu - lisa shall keep the logs related to the history of the data stored in individual file , for purposes defined in paragraph 6 . the logs related to the history of the data stored shall be erased once the data is erased . ### eu - lisa shall keep the logs related to the history of the data stored in individual file , for purposes defined in paragraph 6 . the logs related to the history of the data stored shall be erased automatically once the data is erased .


### where the data contained within an information system as referred to in paragraph 1 contains biometric data , the common identity repository and the central - sis shall use the shared biometric matching service in order to perform the multiple - identity detection . the shared bms shall compare the biometric templates obtained from any new biometric data to the biometric templates already contained in the shared bms in order to verify whether or not data belonging to the same third - country national is already stored in the cir or in the central sis . ### where the data contained within an information system as referred to in paragraph 1 contains biometric data , the common identity repository and the central - sis shall use the shared biometric matching service in order to perform the multiple - identity detection . the shared bms shall compare the biometric templates obtained from any new biometric data to the biometric templates already contained in the shared bms in order to verify whether or not data belonging to the same person is already stored in the cir or in the central sis .


### the multiple - identity detection shall only be launched in order to compare data available in one information system with data available in other information systems . ### the multiple - identity detection shall only be launched in order to compare data available in one union information system with data available in other union information systems .


### the commission shall lay down the technical rules for linking data from different information systems by implementing acts . those implementing acts shall be adopted in accordance with the examination procedure referred to in article 64 . ### the commission shall , in cooperation with eu - lisa , lay down the technical rules for linking data from different union information systems by implementing acts . those implementing acts shall be adopted in accordance with the examination procedure referred to in article 64 .


### where the authority responsible for the verification of different identities in the identity confirmation file is the border authority creating or updating an individual file in the ees in accordance with article 14 of the ees regulation , and where a yellow link is obtained , the border authority shall carry out additional verifications as part of a second - line check . during this second - line check , the border authorities shall have access to the related data contained in the relevant identity confirmation file and shall assess the different identities and shall update the link in accordance with articles 31 to 33 and add it to the identity confirmation file without delay . ### where the authority responsible for the verification of different identities in the identity confirmation file is the border authority creating or updating an individual file in the ees in accordance with article 14 of the ees regulation , and where a yellow link is obtained , the border authority shall carry out additional verifications . the border authorities shall have access to the related data contained in the relevant identity confirmation file and shall assess the different identities and shall update the link in accordance with articles 31 to 33 of this regulation and add it to the identity confirmation file without delay .


### a link between data from two or more information systems shall be classified as green where the linked data do not share the same biometric but have similar identity data and the authority responsible for the verification of different identities concluded it refers to two different persons . ### a link between data from two or more information systems shall be classified as green where : the linked data do not share the same biometric but have similar identity data and the authority responsible for the verification of different identities concluded it refers to two different persons ; the linked data share the same or similar biometric data and the authority responsible for the verification of different identities has concluded that it refers to two different persons .


### without prejudice to the provisions related to the handling of alerts in the sis referred to in the [ regulations on sis in the field of border checks , on sis in the field of law enforcement and on sis in the field of illegal return ] , and without prejudice to limitations necessary to protect security and public order , prevent crime and guarantee that any national investigation will not be jeopardised , where a red link is created , the authority responsible for verification of different identities shall inform the person of the presence of multiple unlawful identities . ### without prejudice to limitations necessary to protect security and public order , prevent crime and guarantee that any national investigation will not be jeopardised , where a red link is created , the authority responsible for verification of different identities shall inform the person of the presence of multiple unlawful identities in accordance with articles 12 , 13 and 14 of regulation 2016 / 679 .


### where relevant , the authority responsible for the verification of different identities . ### the authority responsible for the verification of different identities .


### eu - lisa shall keep logs of all data processing operations within the mid . those logs shall include , in particular , the following : ### eu - lisa shall keep logs of all data processing operations within the mid . those logs shall include the following :


### eu - lisa shall establish automated data quality control mechanisms and procedures on the data stored in the ees , the [ etias ] , the vis , the sis , the shared biometric matching service , the common identity repository and the multiple - identity detector . ### eu - lisa shall establish automated data quality control mechanisms and procedures on the data stored in the ees , [ etias ] , vis , sis , the shared bms and the cir .


### the umf standard shall be used in the development of the ees , the [ etias ] , , the european search portal , the cir , the mid and , if appropriate , in the development by eu - lisa or any other eu body of new information exchange models and information systems in the area of justice and home affairs . ### the umf standard shall be used in the development of the ees , [ etias ] , the esp , the cir , the mid where feasible and , if appropriate , in the development by eu - lisa or any other union agency of new information exchange models and union information systems in the area of justice and home affairs .


### a central repository for reporting and statistics is established for the purposes of supporting the objectives of the ees , the vis , [ the etias ] and the sis and to generate cross - system statistical data and analytical reporting for policy , operational and data quality purposes . ### a central repository for reporting and statistics is established for the purposes of supporting the objectives of the ees , vis , [ etias ] and sis and to provide cross - system statistical data and analytical reporting for policy , operational and data quality purposes .


### eu - lisa shall render the data anonymous and shall record such anonymous data in the crrs . the process for rendering the data anonymous shall be automated . ### eu - lisa shall render the data anonymous and shall record such anonymous data in the crrs . the process for rendering the data anonymous shall be automated . no direct access by eu - lisa staff shall be granted to any personal data stored in the union information systems or in the interoperability components .


### a central infrastructure , consisting of a data repository enabling the rendering of anonymous data ; ### a central infrastructure , consisting of a data repository and a mechanism for enabling the rendering of anonymous data to be stored in that repository ;


### both eu - lisa and the member state authorities shall ensure the security of the processing of personal data that takes place pursuant to the application of this regulation . eu - lisa , [ the etias central unit ] and the member state authorities shall cooperate on security - related tasks . ### eu - lisa , the member state authorities and europol shall ensure the security of the processing of personal data that takes place pursuant to this regulation . eu - lisa , [ the etias central unit ] , europol and the member state authorities shall cooperate on security - related tasks .


### member states shall take measures equivalent to those referred to in paragraph 3 as regards security in respect of the processing of personal data by the authorities having a right to access any of the interoperability components . ### member states , europol and the etias central unit shall take measures equivalent to those referred to in paragraph 3 as regards security in respect of the processing of personal data by the authorities having a right to access any of the interoperability components .


### confidentiality of sis data ### confidentiality of data


### each member state shall apply its rules of professional secrecy or other equivalent duties of confidentiality to all persons and bodies required to work with sis data accessed through any of the interoperability components in accordance with its national law . that obligation shall also apply after those persons leave office or employment or after the termination of the activities of those bodies . ### each member state shall apply its rules of professional secrecy or other equivalent duties of confidentiality to all persons and bodies required to work with data accessed through any of the interoperability components in accordance with its national law . that obligation shall also apply after those persons leave office or employment or after the termination of the activities of those bodies .


### without prejudice to article 17 of the staff regulations of officials and the conditions of employment of other servants of the european union , eu - lisa shall apply appropriate rules of professional secrecy or other equivalent duties of confidentiality of comparable standards to those laid down in paragraph 1 to all its staff required to work with sis data . this obligation shall also apply after those persons leave office or employment or after the termination of their activities . ### without prejudice to article 17 of the staff regulations of officials and the conditions of employment of other servants of the european union , eu - lisa shall apply appropriate rules of professional secrecy or other equivalent duties of confidentiality of comparable standards to those laid down in paragraph 1 of this article to all its staff required to work with data . this obligation shall also apply after those persons leave office or employment or after the termination of their activities .


### without prejudice to the notification and communication of a personal data breach pursuant to article 33 of regulation 2016 / 679 , article 30 of directive 2016 / 680 , or both , member states shall notify the commission , eu - lisa and the european data protection supervisor of security incidents . in the event of a security incident in relation to the central infrastructure of the interoperability components , eu - lisa shall notify the commission and the european data protection supervisor . ### without prejudice to the notification and communication of a personal data breach pursuant to article 33 of regulation 2016 / 679 , article 30 of directive 2016 / 680 , or both , member states and europol shall notify the commission , eu - lisa and the european data protection supervisor of any security incidents without delay . in the event of a security incident in relation to the central infrastructure of the interoperability components , eu - lisa shall notify the commission and the european data protection supervisor .


### information regarding a security incident that has or may have an impact on the operation of the interoperability components or on the availability , integrity and confidentiality of the data shall be provided to the member states and reported in compliance with the incident management plan to be provided by eu - lisa . ### information regarding a security incident that has or may have an impact on the operation of the interoperability components or on the availability , integrity and confidentiality of the data shall be provided to the member states , the etias central unit where necessary , and europol without delay and reported in compliance with the incident management plan to be provided by eu - lisa .


### the member states concerned and eu - lisa shall cooperate in the event of a security incident . the commission shall lay down the specification of this cooperation procedure by means of implementing acts . those implementing acts shall be adopted in accordance with the examination procedure referred to in article 64 . ### the member states concerned , the etias central unit , europol and eu - lisa shall cooperate in the event of a security incident . the commission shall lay down the specification of this cooperation procedure by means of implementing acts . those implementing acts shall be adopted in accordance with the examination procedure referred to in article 64 .


### member states and the relevant eu bodies shall ensure that each authority entitled to access the interoperability components takes the measures necessary to monitor its compliance with this regulation and cooperates , where necessary , with the supervisory authority . ### member states and the relevant union agencies shall ensure that each authority entitled to access the interoperability components takes the measures necessary to monitor its compliance with this regulation and cooperates with the supervisory authority .


### without prejudice to the right of information referred to in articles 11 and 12 of regulation 45 / 2001 and articles 13 and 14 of regulation 2016 / 679 , persons whose data are stored in the shared biometric matching service , the common identity repository or the multiple - identity detector shall be informed by the authority collecting their data , at the time their data are collected , about the processing of personal data for the purposes of this regulation , including about identity and contact details of the respective data controllers , and about the procedures for exercising their rights of access , rectification and erasure , as well as about the contact details of the european data protection supervisor and of the national supervisory authority of the member state responsible for the collection of the data . ### the authority collecting the data of persons whose data are stored in the shared biometric matching service , the common identity repository or the multiple - identity detector shall provide them with the information required under articles 11 and 12 of regulation 45 / 2001 and articles 12 , 13 and 14 of regulation 2016 / 679 in the manner required by those provisions . the authority shall provide the information at the time such persons ' data are collected .


### if a request for correction or erasure of personal data is made to a member state other than the member state responsible , the member state to which the request has been made shall contact the authorities of the member state responsible within seven days and the member state responsible shall check the accuracy of the data and the lawfulness of the data processing within 30 days of such contact . ### if a request for access , correction or erasure of personal data is made to a member state other than the member state responsible , the member state to which the request has been made shall contact the authorities of the member state responsible within seven days and the member state responsible shall check the accuracy of the data and the lawfulness of the data processing as soon as possible , and at the latest within 30 days of such contact .


### where data in the mid is amended by the responsible member state during its validity period , the responsible member state shall carry out the processing laid down in article 27 and , where relevant , article 29 to determine whether the amended data shall be linked . where the processing does not report any hit , the responsible member state or , where applicable , the member state to which the request has been made shall delete the data from the identity confirmation file . where the automated processing reports one or several hit , the responsible member state shall create or update the relevant link in accordance with the relevant provisions of this regulation . ### where data in the cir , the shared bms or the mid is amended by the responsible member state during its validity period , the responsible member state shall carry out the processing laid down in article 27 and , where relevant , article 29 to determine whether the amended data shall be linked . where the processing does not report any hit , the responsible member state or , where applicable , the member state to which the request has been made shall delete the data from the identity confirmation file . where the automated processing reports one or several hit , the responsible member state shall create or update the relevant link in accordance with the relevant provisions of this regulation .


### where the responsible member state or , where applicable , the member state to which the request has been made does not agree that data stored in the mid are factually inaccurate or have been recorded unlawfully , that member state shall adopt an administrative decision explaining in writing to the person concerned without delay why it is not prepared to correct or delete data relating to him or her . ### where the responsible member state or , where applicable , the member state to which the request has been made does not agree that data stored in the cir , the shared bms or the mid are factually inaccurate or have been recorded unlawfully , that member state shall adopt an administrative decision explaining in writing to the person concerned without delay why it is not prepared to correct or delete data relating to him or her .


### this decision shall also provide the person concerned with information explaining the possibility to challenge the decision taken in respect of the request referred in paragraph 3 and , where relevant , information on how to bring an action or a complaint before the competent authorities or courts , and any assistance , including from the competent national supervisory authorities . ### this decision shall also provide the person concerned with information explaining the possibility to challenge the decision taken in respect of the request referred in paragraph 3 and information on how to bring an action or a complaint before the competent authorities or courts , and any assistance , including from the competent national supervisory authorities together with its contact details .


### personal data stored in or accessed by the interoperability components shall not be transferred or made available to any third country , to any international organisation or to any private party , with the exception of transfers to interpol for the purpose of carrying out the automated processing referred to in [ article 18 and of the etias regulation ] or for the purposes of article 8 of regulation 2016 / 399 . such transfers of personal data to interpol shall be compliant with the provisions of article 9 of regulation no 45 / 2001 and chapter v of regulation 2016 / 679 . ### without prejudice to [ article 55 of the etias regulation ] , article 44 of regulation 2017 / 2226 , article 31 of regulation no 676 / 2008 and the querying of interpol databases through the esp in accordance with article 9 of this regulation , personal data stored in or accessed by the interoperability components shall not be transferred or made available to any third country , to any international organisation or to any private party . transfers of personal data to interpol shall be compliant with the provisions of article 9 of regulation no 45 / 2001 and chapter v of regulation 2016 / 679 .


### the supervisory authority or authorities designated pursuant to article 49 of regulation 2016 / 679 shall ensure that an audit of the data processing operations by the responsible national authorities is carried out in accordance with relevant international auditing standards at least every four years . ### the supervisory authority or authorities referred to in article 51 of regulation 2016 / 679 shall ensure that an audit of the data processing operations by the responsible national authorities is carried out in accordance with relevant international auditing standards at least every four years . the results of the audit may be taken into account in the evaluations conducted under the mechanism established by council regulation no 1053 / 20131a . the supervisory authorities referred to in article 51 of regulation 2016 / 679 shall publish annually the number of requests for rectification , completion or erasure , or restriction of processing of data , the action subsequently taken and the number of rectifications , completions , erasures and restrictions of processing made in response to requests by the persons concerned . __________________ 1a council regulation no 1053 / 2013 of 7 october 2013 establishing an evaluation and monitoring mechanism to verify the application of the schengen acquis and repealing the decision of the executive committee of 16 september 1998 setting up a standing committee on the evaluation and implementation of schengen .


### member states shall ensure that their supervisory authority has sufficient resources to fulfil the tasks entrusted to it under this regulation . ### member states shall ensure that their supervisory authority has sufficient resources to fulfil the tasks entrusted to it under this regulation and has access to advice from persons with sufficient knowledge of biometric data .


### the european data protection supervisor shall act in close cooperation with national supervisory authorities with respect to specific issues requiring national involvement , in particular if the european data protection supervisor or a national supervisory authority finds major discrepancies between practices of member states or finds potentially unlawful transfers using the communication channels of the interoperability components , or in the context of questions raised by one or more national supervisory authorities on the implementation and interpretation of this regulation . ### the supervisory authorities and the european data protection supervisor shall , each acting within the scope of their respective competences , cooperate actively within the framework of their respective responsibilities and ensure coordinated supervision of the use of the interoperability components and the application of other provisions of this regulation .


### in the cases referred to in paragraph 1 , coordinated supervision shall be ensured in accordance with article 62 of regulation xxxx / 2018 [ revised regulation 45 / 2001 ] . ### the european data protection supervisor and the supervisory authorities shall exchange relevant information , assist each other in carrying out audits and inspections , examine any difficulties concerning the interpretation or application of this regulation , assess problems in the exercise of independent supervision or in the exercise of the rights of the data subject , draw up harmonised proposals for joint solutions to any problems and promote awareness of data protection rights , as necessary .


### the interoperability components shall be hosted by eu - lisa in its technical sites and shall provide the functionalities laid down in this regulation in accordance with the conditions of security , availability , quality and speed referred to in article 53 . ### the interoperability components shall be hosted by eu - lisa in its technical sites and shall provide the functionalities laid down in this regulation in accordance with the conditions of security , availability , quality and speed referred to in article 37 , article 37a and article 53 .


### eu - lisa shall be responsible for the development of the interoperability components , for any adaptations required for establishing interoperability between the central systems of the ees , vis , [ etias ] , sis , and eurodac , and [ the ecris - tcn system ] , and the european search portal , the shared biometric matching service , the common identity repository and the multiple - identity detector . ### eu - lisa shall be responsible for the design and development of the interoperability components , for any adaptations required for establishing interoperability between the central systems of the ees , vis , [ etias ] , sis , and eurodac , and [ ecris - tcn ] , and the esp , the shared bms , the cir , the mid and the crrs .


### the development shall consist of the elaboration and implementation of the technical specifications , testing and overall project coordination . ### the development shall consist of the elaboration and implementation of the technical specifications , testing and overall project management and coordination .


### following the entry into operations of each interoperability component , eu - lisa shall be responsible for the technical management of the central infrastructure and the national uniform interfaces . in cooperation with the member states , it shall ensure at all times the best available technology , subject to a cost - benefit analysis . eu - lisa shall also be responsible for the technical management of the communication infrastructure referred to in articles 6 , 12 , 17 , 25 and 39 . ### following the entry into operations of each interoperability component , eu - lisa shall be responsible for the technical and security management of the central infrastructure of the interoperability components , including maintenance and technological evolutions . in cooperation with the member states , it shall ensure that at all times the best available technology is used , subject to a cost - benefit analysis . eu - lisa shall also be responsible for the technical management and security of the communication infrastructure referred to in articles 6 , 12 , 17 , 25 and 39 .


### technical management of the interoperability components shall consist of all the tasks necessary to keep the interoperability components functioning 24 hours a day , 7 days a week in accordance with this regulation , in particular the maintenance work and technical developments necessary to ensure that the components function at a satisfactory level of technical quality , in particular as regards the response time for interrogation of the central infrastructures in accordance with the technical specifications . ### technical management of the interoperability components consists of all the tasks necessary to keep the interoperability components functioning 24 hours a day , 7 days a week in accordance with this regulation , in particular the maintenance work and technical developments necessary to ensure that the components function at a satisfactory level of technical quality , in particular as regards the response time for interrogation of the central infrastructures in accordance with the technical specifications .


### the border guard at second line shall consult the multiple - identity detector together with the common identity repository referred to in [ article 4 of regulation 2018 / xx on interoperability ] or the schengen information system or both to assess the differences in the linked identities and shall carry out any additional verification necessary to take a decision on the status and colour of the link as well as to take a decision on the entry or refusal of entry of the person concerned . ### the border guard shall consult the multiple - identity detector together with the common identity repository referred to in [ article 4 of regulation 2018 / xx on interoperability ] or the schengen information system or both to assess the differences in the linked identities and shall carry out any additional verification necessary to take a decision on the status and colour of the link as well as to take a decision on the entry or refusal of entry of the person concerned .


### access to the ees as a tool for the purpose of identifying an unknown suspect , perpetrator or suspected victim of a terrorist office or otherwise serious criminal offence shall only be allowed when a query to the cir was launched in accordance with [ article 22 of regulation 2018 / xx on interoperability ] and all the conditions listed in paragraph 1 and paragraph 1a are met . ### access to the ees as a tool for the purpose of identifying an unknown suspect , perpetrator or suspected victim of a terrorist offence or other serious criminal offence shall only be allowed when a query to the cir was launched in accordance with [ article 22 of regulation 2018 / xx on interoperability ] and all the conditions listed in paragraph 1 and paragraph 1a of this article are met .


### in article 1 , the following paragraph is added : ### in article 2 , the following paragraph is added :


### by storing identity , travel document and biometric data in the common identity repository established by [ article 17 of regulation 2018 / xx on interoperability ] , the vis contributes to facilitating and assisting in the correct identification of persons registered in the vis under the conditions and for the ultimate objectives laid down in paragraph 1 of this article . ### by storing identity , travel document and biometric data in the common identity repository established by [ article 17 of regulation 2018 / xx on interoperability ] , vis contributes to facilitating and assisting in the correct identification of persons registered in vis under the conditions and solely for the purpose of identification referred to in article 20 of this regulation .


### for a period of one year following the notification by eu - lisa of the completion of the test referred to in article 62 regarding the multiple - identity detector and before the start of operations of the mid , the etias central unit as referred to in [ article 33 of regulation 2016 / 1624 ] shall be responsible for carrying out a multiple - identity detection between the data stored in the vis , eurodac and the sis . the multiple - identity detections shall be carried out using only biometric data in accordance with article 27 of this regulation . ### for a period of one year following the notification by eu - lisa of the completion of the test referred to in article 62 regarding the mid and before the start of operations of the mid , the etias central unit as referred to in [ article 33 of regulation 2016 / 1624 ] shall be responsible for carrying out a multiple - identity detection between the data stored in vis , eurodac , the ees and sis . the multiple - identity detections shall be carried out using only biometric data in accordance with article 27 of this regulation .


### eu - lisa has declared the successful completion of a comprehensive test of the relevant interoperability component , which is to be conducted by eu - lisa in cooperation with the member states ; ### eu - lisa has declared the successful completion of a comprehensive test of the relevant interoperability component , which is to be conducted by eu - lisa in cooperation with the member states , the etias central unit and europol ;


### the commission shall , in close cooperation with the member states , eu - lisa and other relevant agencies , make available a practical handbook for the implementation and management of the interoperability components . the practical handbook shall provide technical and operational guidelines , recommendations and best practices . the commission shall adopt the practical handbook in the form of a recommendation . ### the commission shall , in close cooperation with the member states , eu - lisa and other relevant agencies , update the practical handbooks made available for the ees , vis , [ etias ] , eurodac , sis and [ ecris - tcn ] with information necessary and make available a practical handbook for the implementation and management of the interoperability components . the handbooks shall provide technical and operational guidelines , recommendations and best practices . the commission shall adopt the updates in accordance with the rules and in the form laid down in the respective legal instruments . the handbook on the interoperability components shall be adopted in the form of a recommendation .


### four years after the start of operations of each interoperability component and every four years thereafter , eu - lisa shall submit to the european parliament , the council and the commission a report on the technical functioning of the interoperability components , including the security thereof . ### three years after the start of operations of each interoperability component and every three years thereafter , eu - lisa shall submit to the european parliament , the council and the commission a report on the technical functioning of the interoperability components , including the security thereof .


### as the programme aims at enhancing the competitiveness of the union ' s defence industry , only entities established in the union and effectively controlled by member states or their nationals should be eligible for support . additionally , in order to ensure the protection of essential security interests of the union and its member states , the infrastructure , facilities , assets and resources used by the beneficiaries and subcontractors in actions funded under the programme , shall not be located on the territory of non - member states . ### as the programme aims at enhancing the efficient cooperation and competitiveness of the union ' s defence industry and consolidating the union’s strategic defence autonomy , only entities which are established in the union and have their executive management structures there should be eligible for financial support . undertakings located in third countries should be able to participate in the projects by cooperating with beneficiaries , where they are located in a third country identified in the work programme . additionally , in order to ensure the protection of essential defence and security interests of the union and its member states , the infrastructure , facilities and assets used by the beneficiaries and subcontractors in actions funded under the programme , should not be located on the territory of third countries . the beneficiaries and their subcontractors should not be subject to control by third countries or by third country entities , as control is understood , for example , in competition policy .


### as the programme aims at enhancing the competitiveness of the union ' s defence industry , only entities established in the union and effectively controlled by member states or their nationals should be eligible for support . additionally , in order to ensure the protection of essential security interests of the union and its member states , the infrastructure , facilities , assets and resources used by the beneficiaries and subcontractors in actions funded under the programme , shall not be located on the territory of non - member states . ### as the programme aims at the progressive framing of a common defence policy and enhancing the competitiveness of the union ' s defence industry , only entities established in the union and effectively controlled by member states or their nationals should be eligible for support . additionally , in order to ensure the protection of essential security interests of the union and its member states , the infrastructure , facilities , assets and resources used by the beneficiaries and subcontractors in actions funded under the programme , shall not be located on the territory of non - member states . however , for particular cases where undertakings located in the eu are controlled by non - eu states or by non - eu entities , such undertakings can be eligible if the member state in which they are located provides sufficient assurances that this would not contravene the security and defence interests of the union and its member states as established in the framework of the common foreign and security policy in accordance with title v of the teu , including in terms of strengthening the european defence technological and industrial base .


### as the programme aims at enhancing the competitiveness of the union ' s defence industry , only entities established in the union and effectively controlled by member states or their nationals should be eligible for support . additionally , in order to ensure the protection of essential security interests of the union and its member states , the infrastructure , facilities , assets and resources used by the beneficiaries and subcontractors in actions funded under the programme , shall not be located on the territory of non - member states . ### as the programme aims at enhancing the competitiveness of the union ' s defence industry , only entities established in the union and effectively controlled by member states or their nationals should be eligible for support . however , undertakings controlled by non - eu states or by non - eu entities could qualify as beneficiaries if the member state they are located in provides assurances that this will not contravene the security and defence interests of the union . additionally , in order to ensure the protection of essential defence and security interests of the union and its member states , the infrastructure , facilities , assets and resources used by the beneficiaries and subcontractors in actions funded under the programme , shall not be located on the territory of non - member states . material , non - material and human resources should be free to use and free of restrictions vis - à - vis third countries .


### the commission should establish a multiannual work programme in line with the objectives of the programme . the commission should be assisted in the establishment of the work programme by a committee of member states . in light of the union policy on small and medium enterprises as key to ensuring economic growth , innovation , job creation , and social integration in the union and the fact that the supported actions will typically require trans - national collaboration , it is of importance that the work programme will reflect and enable such cross - border participation of smes and that therefore a proportion of the overall budget will benefit such action . ### the commission should establish a multiannual work programme in line with the objectives of the programme , especially that of competitiveness . the commission should be assisted in the establishment of the work programme by a committee of member states within the meaning of regulation 182 / 2011 . in light of the union policy on small and medium enterprises as key to ensuring economic growth , innovation , job creation , and social integration in the union and the fact that the supported actions will typically require trans - national collaboration , it is of importance that the work programme will reflect and emphasize the role of small and medium - sized enterprises as well as middle capitalisation companies and their cross - border participation and therefore set aside a share of at least 20% of the overall budget to benefit such action .


### the commission should draw up an implementation report at the end of the programme , examining the financial activities in terms of financial implementation results and where possible , impact . this report should also analyse the cross border participation of smes in projects under the programme as well as the participation of smes to the global value chain . ### the commission should draw up an interim progress report by the end of the first year of implementation and an implementation report at the end of the programme . these reports should analyse the development of industrial expertise and defence capacity , as well as coherence with the foreign policy objectives of the union and its member states and the financial activities in terms of financial implementation results and where possible , impact . they should also analyse and promote the cross - border participation of smes and mid - caps in projects under the programme as well as their participation to the global value chain . the reports should also include information on the origin of beneficiaries .


### to support and leverage the cooperation between undertakings , including small and medium - sized enterprises , in the development of technologies or products in line with defence capability priorities commonly agreed by member states within the union ; ### to support and leverage the cooperation between member states and between undertakings , including small and medium - sized enterprises and middle capitalisation companies , in the development of technologies or products in line with defence capability priorities commonly agreed by member states within the union in order to avoid duplication and to promote interoperability and standardisation ;


### the union ' s financial assistance shall be implemented by the commission as provided for by regulation no 966 / 2012 directly or indirectly by entrusting budget implementation tasks to the entities listed in article 58 of that regulation . ### the union ' s financial assistance shall be implemented by the commission as provided for in article 58 of regulation no 966 / 2012 .


### the members of a consortium participating in an action shall conclude an internal agreement establishing their rights and obligations with respect to the implementation of the action , except in duly justified cases provided for in the work programme or call for proposals . ### the members of a consortium participating in an action shall conclude an internal agreement establishing their rights and obligations with respect to the implementation of the action , including the issue of the intellectual property rights relating to the new products , , except in duly justified cases provided for in the work programme or call for proposals .


### the members of a consortium participating in an action shall conclude an internal agreement establishing their rights and obligations with respect to the implementation of the action , except in duly justified cases provided for in the work programme or call for proposals . ### the members of a consortium participating in an action shall conclude an internal agreement establishing their rights and obligations with respect to the implementation of the action , including the issue of the intellectual property rights connected to the new products , , except in duly justified cases provided for in the work programme or call for proposals .