### (17) to ensure a smooth processing of the information received or drawn-up by the collection bodies and made available to esap , it is necessary to lay down certain requirements specifying the format and the metadata of that information and which collection bodies should collect such information. in order to ensure the quality of the information submitted to esap by the collection bodies , it is also necessary to define the characteristics of the automated validations to be carried out on each information reaching the collection bodies , and the characteristics of the qualified electronic seal to be attached to that information by the entities. to ensure the use and re-use of data on esap , a list of the designated open standard licences would need to be defined. to facilitate the searching , finding , retrieving of the data in a timely manner , the characteristics of the application programming interface and the metadata to be implemented will also need to be designed. additional requirements as regards efficient search functions will need to be implemented such as the specific legal entity identifier , the classification of the type of information , and the categories of the size of the entities. to that purpose , the joint committee of the european supervisory authorities should develop draft implementing technical standards. additionally , esma might develop draft implementing technical standards to determine the nature and extent of the specific services for which fees may be charged and the associated fee structure. the commission should be empowered to adopt those implementing technical standards by means of implementing acts pursuant to article 291 tfeu and in accordance with article 15 of regulation (eu) no 1093/2010 of the european parliament and of the council30 , no 1094/2010 of the european parliament and of the council31 and no 1095/2010 of the european parliament and of the council32 . ### (17) to ensure a smooth processing of the information received or drawn-up by the collection bodies and made available to esap , it is necessary to lay down certain requirements specifying the format and the metadata of that information and which collection bodies should collect such information. in order to ensure the quality of the information submitted to esap by the collection bodies , it is also necessary to define the characteristics of the automated validations to be carried out on each information reaching the collection bodies , and the characteristics of the qualified electronic seal to be attached to that information by the entities. to ensure the use and re-use of data on esap , a list of the designated open standard licences would need to be defined. to facilitate the searching , finding , retrieving of the data in a timely manner , the characteristics of the application programming interface and the metadata to be implemented will also need to be designed. additional requirements as regards efficient search functions will need to be implemented such as the specific legal entity identifier , the classification of the type of information , and the categories of the size of the entities. to that purpose , the joint committee of the european supervisory authorities should develop draft implementing technical standards. to that end , esma should conduct regular ongoing consultations with relevant stakeholders , including civil society and social partners , to develop and improve the usability of esap. additionally , esma might develop draft implementing technical standards to determine the nature and extent of the specific services for which fees may be charged and the associated fee structure. the commission should be empowered to adopt those implementing technical standards by means of implementing acts pursuant to article 291 tfeu and in accordance with article 15 of regulation (eu) no 1093/2010 of the european parliament and of the council30 , no 1094/2010 of the european parliament and of the council31 and no 1095/2010 of the european parliament and of the council32 .


### (17) to ensure a smooth processing of the information received or drawn-up by the collection bodies and made available to esap , it is necessary to lay down certain requirements specifying the format and the metadata of that information and which collection bodies should collect such information. in order to ensure the quality of the information submitted to esap by the collection bodies , it is also necessary to define the characteristics of the automated validations to be carried out on each information reaching the collection bodies , and the characteristics of the qualified electronic seal to be attached to that information by the entities. to ensure the use and re-use of data on esap , a list of the designated open standard licences would need to be defined. to facilitate the searching , finding , retrieving of the data in a timely manner , the characteristics of the application programming interface and the metadata to be implemented will also need to be designed. additional requirements as regards efficient search functions will need to be implemented such as the specific legal entity identifier , the classification of the type of information , and the categories of the size of the entities. to that purpose , the joint committee of the european supervisory authorities should develop draft implementing technical standards. additionally , esma might develop draft implementing technical standards to determine the nature and extent of the specific services for which fees may be charged and the associated fee structure. the commission should be empowered to adopt those implementing technical standards by means of implementing acts pursuant to article 291 tfeu and in accordance with article 15 of regulation (eu) no 1093/2010 of the european parliament and of the council30 , no 1094/2010 of the european parliament and of the council31 and no 1095/2010 of the european parliament and of the council32 . ### (17) to ensure a smooth processing of the information received or drawn-up by the collection bodies and made available to esap , it is necessary to lay down certain clear and detailed requirements specifying the format and the metadata of that information and which collection bodies should collect such information. in order to ensure the quality of the information submitted to esap by the collection bodies , it is also necessary to define the characteristics of the automated validations to be carried out on each information reaching the collection bodies , and the characteristics of the qualified electronic seal to be attached to that information by the entities. to ensure the use and re-use of data on esap , a list of the designated open standard licences would need to be defined. to facilitate the searching , finding , retrieving of the data in a timely manner , the characteristics of the application programming interface and the metadata to be implemented will also need to be designed. additional requirements as regards efficient search functions will need to be implemented such as the specific legal entity identifier , the classification of the type of information , and the categories of the size of the entities. to that purpose , the joint committee of the european supervisory authorities should develop draft implementing technical standards. in respect of standards concerning sustainability information , the joint committee of the european supervisory authorities should consult the european financial reporting advisory group (efrag) on the development of these draft implementing standards , in particular on standards defining requirements for the accessibility formats of sustainability information. all standards should seek to make esap future-proof and consider potential interoperability at a global level in the future , thus should draw upon global standards and best practices where relevant. additionally , esma might develop draft implementing technical standards to determine the nature and extent of the specific services for which fees may be charged and the associated fee structure. to ensure full transparency of the cases when fees may be charged , esma should make public and easily available on esap the thresholds of volumes of information and the frequencies above which those fees apply. the commission should be empowered to adopt those implementing technical standards by means of implementing acts pursuant to article 291 tfeu and in accordance with article 15 of regulation (eu) no 1093/2010 of the european parliament and of the council30 , no 1094/2010 of the european parliament and of the council31 and no 1095/2010 of the european parliament and of the council32 .


### esma may , however , charge fees for specific services that involve searches for a very large volume of information or for frequently updated information. those fees shall not exceed the cost incurred by esma for the provision of the service. ### esma shall , however , charge fees for specific services that involve the extraction of a very large volume of information or for frequently updated information , when those services are for commercial re-use of data. those fees shall not exceed the cost incurred by esma for the provision of the service.


### esma may , however , charge fees for specific services that involve searches for a very large volume of information or for frequently updated information. those fees shall not exceed the cost incurred by esma for the provision of the service. ### esma may , however , charge fees for specific services that involve searches and downloads for a very large volume of information or for frequently updated information , except when those services are used by civil society organisations , public bodies and academic institutions. those fees shall not exceed the cost incurred by esma for the provision of the service.


### the conditions correspond to conditions laid down in open standard licences within the meaning of article 2(5) of directive (eu) 2019/1024 , allowing free use , modification and sharing of that information by anyone and for any purpose. ### the conditions correspond to creative commons attribution 4.0 international licensing (cc by 4.0) , in line with conditions laid down in open standard licences within the meaning of article 2(5) of directive (eu) 2019/1024 , allowing free use , modification and sharing of that information by anyone and for any purpose.


### (7) in order to enable entities and the public to identify the collection bodies providing information to esap , esma should publish on its website a list of the collection bodies and keep it up to date. ### (7) in order to enable entities and the public to identify the collection bodies providing information to esap , esma should publish on its website a list of the collection bodies and keep it up to date. the designation of collection bodies should be at the discretion of member states but should respect the “file-once principle”.


### (15) in order to build and maintain public trust in esap and to protect each entity from undue alteration of its information , esap should ensure data integrity and credibility of the source of the information submitted to the collection bodies. therefore , information submitted by the entities should include a qualified electronic seal attached to the information submitted as defined in article 3(20) , of regulation (eu) no 910/2014 of the european parliament and of the council29 . a specific legal entity identifier may be a mandatory attribute of that certificate. that seal or signature acquired by esap should be made available to users. ### (15) in order to build and maintain public trust in esap and to protect each entity from undue alteration of its information , esap should ensure data integrity and credibility of the source of the information submitted to the collection bodies. therefore , information submitted by the entities should include a qualified electronic seal attached to the information submitted as defined in article 3(20) , of regulation (eu) no 910/2014 of the european parliament and of the council29 . a specific legal entity identifier may be a mandatory attribute of that certificate. that seal or signature acquired by esap should be made available to users. where available , the legal entity identifier should be based on a globally recognised standard in order to facilitate interoperability.


### (7) ‘metadata’ means structured information that makes it easier to retrieve , use , or manage an information resource , including by describing , explaining , or locating that information resource. ### (7) ‘metadata’ means structured information that makes it easier to retrieve , use , contextualise or manage an information resource , including by describing , explaining , or locating that information resource.


### use a data extractable format for drawing up that information; ### use , at least , a data extractable format for drawing up that information;


### 5. as regards the information falling under this regulation , the collection bodies shall not exercise the right of the maker of a database , referred to in article 7(1) of directive 96/9/ec of the european parliament and of the council33 , to prevent or restrict the re-use of the contents of the database or to restrict re-use of those contents. ### 5. as regards the information falling under this regulation , the collection bodies shall not exercise the right of the maker of a database , referred to in article 7(1) of directive 96/9/ec of the european parliament and of the council33 , or any other intellectual property rights , in a way that prevents or restricts the use and re-use of the contents of the database pursuant to article 9.


### the legal entity identifier of the entity that submitted the information; ### the legal entity identifier of the entity that submitted the information and , where applicable , the legal entity identifier of its subsidiaries;


### the type of information submitted by the entity that submitted the information; ### the type of information submitted by the entity;


### 2. esma shall implement appropriate technical processes to automatically notify a collection body that the information submitted does not comply with the requirements laid down in article 5(1) , point (b). ### 2. esma shall implement appropriate technical processes to automatically notify a collection body that the information submitted does not comply with the requirements laid down in article 5(1) , point (b). the collection body shall notify the submitting entity of the rejection and the reasons for in accordance with article 2(2) , subparagraph 2.


### 14. notes that at the end of 2021 the supervisor had 132 members of staff , which represents a small increase from the end of 2020 where there were 124 staff members and a significant increase from the end of 2019 , where there were 107 staff members; notes with concern that the number of contract agents has increased from 37 at the end of 2020 to 49 at the end of 2021 , whereas the number of officials has decreased from 72 to 68 during the same period; encourages the supervisor to provide permanent contracts to its employees to guarantee business continuity and work security; ### 14. notes that at the end of 2021 the supervisor had 132 members of staff , which represents a small increase from the end of 2020 where there were 124 staff members and a significant increase from the end of 2019 , where there were 107 staff members; notes with concern that the number of contract agents has increased from 37 at the end of 2020 to 49 at the end of 2021 , whereas the number of officials has decreased from 72 to 68 during the same period; encourages the supervisor to provide permanent contracts to its employees to guarantee business continuity and work security; underlines that the supervisor is facing challenges in attracting specialists with the necessary expertise in specific domains and encourages the supervisor to explore ways of increasing the visibility of its vacancies;


### 16. notes with satisfaction that at the end of 2021 the number of eu nationalities represented among the staff had increased further to 21 compared to 20 at the end of 2020; notes further that the distribution among nationalities has further developed towards a better geographical balance in the institution ### 16. notes with satisfaction that at the end of 2021 the number of eu nationalities represented among the staff had increased further to 21 compared to 20 at the end of 2020; notes further that the distribution among nationalities has further developed towards a better geographical balance in the institution; calls the supervisor to continue promoting equal opportunities and geographical balance also for the middle and senior management;


### (2) according to regulation (eu) 2021/953 , test certificates are to be issued based on two types of tests for sars-cov-2 infection , namely molecular nucleic acid amplification tests (‘naat’) , including those using reverse transcription polymerase chain reaction (‘rt-pcr’) , and rapid antigen tests , which rely on detection of viral proteins (antigens) using a lateral flow immunoassay that gives results in less than 30 minutes , provided they are carried out by health professionals or by skilled testing personnel. however , regulation (eu) 2021/953 does not cover antigenic assays , such as enzyme-linked immunosorbent assays or automated immunoassays , which test for antigens in a laboratory setting. as of july 2021 , the technical working group on covid-19 diagnostic tests2 , responsible for preparing updates to the common list of covid-19 rapid antigen tests3 agreed by the health security committee established by article 17 of decision no 1082/2013/eu of the european parliament and of the council4 , also reviews proposals put forward by member states and manufacturers for covid-19 laboratory-based antigenic assays. those proposals are assessed against the same criteria as those used for rapid antigen tests , and the health security committee has established a list of the laboratory-based antigenic assays that meet those criteria. as a result , and in an effort to enlarge the scope of the different types of diagnostic tests that may be used as the basis for the issuance of an eu digital covid certificate , the definition for rapid antigen tests should be adapted to include laboratory-based antigenic assays. it should thus be possible for member states to issue test certificates on the basis of the antigen tests included in the eu common list agreed , and regularly updated , by the health security committee as meeting the established quality criteria. ### (2) according to regulation (eu) 2021/953 , test certificates are to be issued based on two types of tests for sars-cov-2 infection , namely molecular nucleic acid amplification tests (‘naat’) , including those using reverse transcription polymerase chain reaction (‘rt-pcr’) , and rapid antigen tests , which rely on detection of viral proteins (antigens) using a lateral flow immunoassay that gives results in less than 30 minutes , provided they are carried out by health professionals or by skilled testing personnel. however , regulation (eu) 2021/953 does not cover antigenic assays , such as enzyme-linked immunosorbent assays or automated immunoassays , which test for antigens in a laboratory setting. as of july 2021 , the technical working group on covid-19 diagnostic tests2 , responsible for preparing updates to the common list of covid-19 rapid antigen tests3 agreed by the health security committee established by article 17 of decision no 1082/2013/eu of the european parliament and of the council4 , also reviews proposals put forward by member states and manufacturers for covid-19 laboratory-based antigenic assays. those proposals are assessed against the same criteria as those used for rapid antigen tests , and the health security committee has established a list of the laboratory-based antigenic assays that meet those criteria. as a result , and in an effort to enlarge the scope of the different types of diagnostic tests that may be used as the basis for the issuance of an eu digital covid certificate , the definition for rapid antigen tests and antibody detection tests , including serological tests for sars-cov-2 antibodies , should be adapted to include laboratory-based antigenic assays and antibody detection tests , including serological tests for sars-cov-2 antibodies. it should thus be possible for member states to issue test certificates on the basis of the antigen tests or the antibody tests , including serological tests for sars-cov-2 antibodies , included in the eu common list agreed , and regularly updated , by the health security committee as meeting the established quality criteria.


### (8) as a result , it cannot be excluded that member states continue to require union citizens exercising their right to free movement to present proof of covid-19 vaccination , test or recovery beyond 30 june 2022 , the date when regulation (eu) 2021/953 is set to expire. it is thus important to avoid that , in the event that certain restrictions to free movement based on public health are still in place after 30 june 2022 , union citizens and their family members are deprived of the possibility to make use of their eu digital covid certificates , which are an effective , secure and privacy-preserving way of proving one’s covid-19 status. at the same time , given that any restrictions to the free movement of persons within the union put in place to limit the spread of sars-cov-2 , including the requirement to present eu digital covid certificates , should be lifted as soon as the epidemiological situation allows , the extension of the application of regulation (eu) 2021/953 should be limited to 12 months. in addition , the extension of that regulation should not be understood as requiring member states , in particular those that lift domestic public health measures , to maintain or impose free movement restrictions. the power to adopt acts in accordance with article 290 of the treaty on the functioning of the european union delegated to the commission pursuant to regulation (eu) 2021/953 should be equally extended. it is necessary to ensure that the eu digital covid certificate system can adapt to scientific progress in containing the covid-19 pandemic. ### (8) as a result , it cannot be excluded that member states continue to require union citizens exercising their right to free movement to present proof of covid-19 vaccination , test or recovery beyond 30 june 2022 , the date when regulation (eu) 2021/953 is set to expire. it is thus important to avoid that , in the event that certain restrictions to free movement based on public health are still in place after 30 june 2022 , union citizens and their family members are deprived of the possibility to make use of their eu digital covid certificates , which are an effective , secure and privacy-preserving way of proving one’s covid-19 status. at the same time , given that any restrictions to the free movement of persons within the union put in place to limit the spread of sars-cov-2 , including the requirement to present eu digital covid certificates , should be lifted as soon as the epidemiological situation allows , the extension of the application of regulation (eu) 2021/953 should be limited to 12 months. in addition , the extension of that regulation should not be understood as requiring member states , in particular those that lift domestic public health measures , to maintain or impose free movement restrictions. any need for member states to verify eu digital covid certificates should not provide a justification for the temporary reintroduction of controls at internal borders. the power to adopt acts in accordance with article 290 of the treaty on the functioning of the european union delegated to the commission pursuant to regulation (eu) 2021/953 should be equally extended. it is necessary to ensure that the eu digital covid certificate system can adapt to scientific progress in containing the covid-19 pandemic.


### (8) as a result , it cannot be excluded that member states continue to require union citizens exercising their right to free movement to present proof of covid-19 vaccination , test or recovery beyond 30 june 2022 , the date when regulation (eu) 2021/953 is set to expire. it is thus important to avoid that , in the event that certain restrictions to free movement based on public health are still in place after 30 june 2022 , union citizens and their family members are deprived of the possibility to make use of their eu digital covid certificates , which are an effective , secure and privacy-preserving way of proving one’s covid-19 status. at the same time , given that any restrictions to the free movement of persons within the union put in place to limit the spread of sars-cov-2 , including the requirement to present eu digital covid certificates , should be lifted as soon as the epidemiological situation allows , the extension of the application of regulation (eu) 2021/953 should be limited to 12 months. in addition , the extension of that regulation should not be understood as requiring member states , in particular those that lift domestic public health measures , to maintain or impose free movement restrictions. the power to adopt acts in accordance with article 290 of the treaty on the functioning of the european union delegated to the commission pursuant to regulation (eu) 2021/953 should be equally extended. it is necessary to ensure that the eu digital covid certificate system can adapt to scientific progress in containing the covid-19 pandemic. ### (8) as a result , it cannot be excluded that member states continue to require union citizens exercising their right to free movement to present proof of covid-19 vaccination , test or recovery beyond 30 june 2022 , the date when regulation (eu) 2021/953 is set to expire. it is thus important to avoid that , in the event that certain restrictions to free movement based on public health are still in place after 30 june 2022 , union citizens and their family members are deprived of the possibility to make use of their eu digital covid certificates , which are a way of proving one’s covid-19 status. at the same time , given that any restrictions to the free movement of persons within the union put in place to limit the spread of sars-cov-2 , including the requirement to present eu digital covid certificates , should be lifted as soon as the epidemiological situation allows , the extension of the application of regulation (eu) 2021/953 should be until 30 june 2022. in addition , the extension of that regulation should not be understood as requiring member states , in particular those that lift domestic public health measures , to maintain or impose free movement restrictions. the power to adopt acts in accordance with article 290 of the treaty on the functioning of the european union delegated to the commission pursuant to regulation (eu) 2021/953 should be equally extended. it is necessary to ensure that the eu digital covid certificate system can adapt to scientific progress in containing the covid-19 pandemic.


### (11) similarly , regulation (eu) 2022/xxxx of the european parliament and of the council8 prolongs the period of application of regulation (eu) 2021/954 of the european parliament and of the council9 , which extends the eu digital covid certificate framework to third-country nationals who are legally staying or residing in the schengen area without controls at internal borders and applies as a matter of schengen acquis , without prejudice to the specific rules on the crossing of internal borders set out in regulation (eu) 2016/399 of the european parliament and of the council10. ### (11) similarly , regulation (eu) 2022/xxxx of the european parliament and of the council8 does not prolong the period of application of regulation (eu) 2021/954 of the european parliament and of the council9 , which extends the eu digital covid certificate framework to third-country nationals who are legally staying or residing in the schengen area without controls at internal borders and applies as a matter of schengen acquis , without prejudice to the specific rules on the crossing of internal borders set out in regulation (eu) 2016/399 of the european parliament and of the council10.


### a certificate confirming that the holder has been subject to a naat test , or an antigen test listed in the eu common list of covid-19 antigen tests agreed by the health security committee , carried out by health professionals or by skilled testing personnel in the member state issuing the certificate and indicating the type of test , the date on which it was carried out and the result of the test (test certificate); ### a certificate confirming that the holder has been subject to a naat test , an antigen test , an antibody test , or a serological test for antibodies against sars-cov-2 , listed in the eu common list of covid-19 antigen tests or antibody tests , including serological tests for antibodies against sars-cov-2 , agreed by the health security committee , carried out by health professionals or by skilled testing personnel in the member state issuing the certificate and indicating the type of test , the date on which it was carried out and the result of the test (test certificate);


### the commission shall publish the eu common list of covid-19 antigen tests agreed by the health security committee , including any updates.; ### the commission shall publish the eu common list of covid-19 antigen tests and antibody tests , including serological tests for antibodies against sars-cov-2 , agreed by the health security committee , including any updates;


### member states may also issue vaccination certificates referred to in point (a) of article 3(1) to persons participating in clinical trials that concern a covid-19 vaccine and that have been approved by member states’ ethical committees and competent authorities , regardless whether they have been administered the vaccine candidate or the dose administered to the control group. the information about the covid-19 vaccine to be included in the vaccination certificate in accordance with the specific data fields set out in point 1 of the annex shall not undermine the integrity of the clinical trial. member states may accept vaccination certificates issued by other member states in accordance with this paragraph in order to waive restrictions to free movement put in place , in accordance with union law , to limit the spread of sars-cov-2.; ### member states may also issue vaccination certificates referred to in point (a) of article 3(1) to persons participating in clinical trials that concern a covid-19 vaccine and that have been approved by member states’ ethical committees and competent authorities , regardless whether they have been administered the vaccine candidate or the dose administered to the control group. the information about the covid-19 vaccine to be included in the vaccination certificate in accordance with the specific data fields set out in point 1 of the annex shall not undermine the integrity of the clinical trial. the validity period of such vaccination certificates shall not be longer than that of other vaccination certificates issued pursuant to this paragraph. member states may accept vaccination certificates issued by other member states in accordance with this paragraph in order to waive restrictions to free movement put in place , in accordance with union law , to limit the spread of sars-cov-2.where a covid-19 vaccine undergoing clinical trials is subsequently granted a marketing authorisation pursuant to regulation (ec) no 726/2004 , the vaccination certificates issued in respect of that vaccine continue to be valid in accordance with the first subparagraph of this paragraph. where a covid-19 vaccine subsequently receives a negative evaluation of marketing authorisation , or when no marketing authorisation is sought for that vaccine , the certificates issued on the basis of that vaccine shall no longer be valid.;


### member states may also issue vaccination certificates referred to in point (a) of article 3(1) to persons participating in clinical trials that concern a covid-19 vaccine and that have been approved by member states’ ethical committees and competent authorities , regardless whether they have been administered the vaccine candidate or the dose administered to the control group. the information about the covid-19 vaccine to be included in the vaccination certificate in accordance with the specific data fields set out in point 1 of the annex shall not undermine the integrity of the clinical trial. member states may accept vaccination certificates issued by other member states in accordance with this paragraph in order to waive restrictions to free movement put in place , in accordance with union law , to limit the spread of sars-cov-2.; ### member states may also issue vaccination certificates referred to in point (a) of article 3(1) to persons participating in clinical trials that concern a covid-19 vaccine and that have been approved by member states’ ethical committees and competent authorities , regardless whether they have been administered the vaccine candidate or the dose administered to the control group. the information about the covid-19 vaccine to be included in the vaccination certificate in accordance with the specific data fields set out in point 1 of the annex shall not undermine the integrity of the clinical trial. member states may accept vaccination certificates or antibody tests , including serological tests for antibodies against sars-cov-2 , issued by other member states in accordance with this paragraph in order to waive restrictions to free movement put in place , in accordance with union law , to limit the spread of sars-cov-2.;


### 1. for the investigation of criminal offences , member states shall allow national contact points of other member states and europol access to data from their national police records indexes , to conduct automated searches. ### 1. for the investigation of serious criminal offences , member states shall allow national contact points of other member states and europol access to data from their national police records indexes of persons convicted of or reasonably suspected of a serious criminal offence , to conduct searches.


### 2. the requesting member state shall receive the list of matches with an indication of the quality of the matches. ### 2. should a search show that a supplied data matches data entered in the requested member state's searched file , the national contact point of the requesting member state shall receive a notification of a potential match.


### article 27 ### deleted


### article 28 ### deleted


### 1. a request for an automated search shall include only the following information: ### 1. a request for a search shall include only the following information:


### member states and europol shall observe common technical specifications in connection with all requests and answers related to searches and comparisons of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records. the commission shall adopt implementing acts to specify these technical specifications in accordance with the procedure referred to in article 76(2). ### member states and europol shall observe common technical specifications in connection with all requests and answers related to searches and comparisons of dna profiles , dactyloscopic data , certain vehicle registration data , facial images and police records. the commission shall adopt implementing acts to specify these technical specifications in accordance with the procedure referred to in article 76(2).


### member states and europol shall observe common technical specifications in connection with all requests and answers related to searches and comparisons of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records. the commission shall adopt implementing acts to specify these technical specifications in accordance with the procedure referred to in article 76(2). ### member states and europol shall observe common technical specifications in connection with all requests and answers related to searches and comparisons of dna profiles , dactyloscopic data , vehicle registration data. the commission shall adopt implementing acts to specify these technical specifications in accordance with the procedure referred to in article 76(2).


### availability of automated data exchange at national level ### availability of data exchange at national level


### 1. member states shall take all necessary measures to ensure that automated searching or comparison of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records is possible 24 hours a day and seven days a week. ### 1. member states shall take all necessary measures to ensure that automated searching or comparison of dna profiles , dactyloscopic data , certain vehicle registration data , facial images and police records is possible 24 hours a day and seven days a week.


### 1. member states shall take all necessary measures to ensure that automated searching or comparison of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records is possible 24 hours a day and seven days a week. ### 1. member states shall take all necessary measures to ensure that automated searching or comparison of dna profiles , dactyloscopic data , vehicle registration data is possible 24 hours a day and seven days a week.


### 2. national contact points shall immediately inform each other , the commission , europol and eu-lisa of the technical fault causing unavailability of the automated data exchange. ### 2. national contact points shall immediately inform each other , the commission , europol and eu-lisa of the technical fault causing unavailability of the data exchange.


### national contact points shall agree on temporary alternative information exchange arrangements in accordance with the applicable union law and national legislation. ### deleted


### 3. national contact points shall re-establish the automated data exchange without delay. ### deleted


### an indication on whether the query concerns a suspect or a perpetrator of a criminal offence; ### an indication on whether the query concerns a person convicted of or reasonably suspected of a serious criminal offence;


### the use of the router shall be reserved to the member states’ authorities that have access to the exchange of dna profiles , dactyloscopic data and facial images , and europol in accordance with this regulation and regulation (eu) 2016/794. ### the use of the router shall be reserved to the specific individuals within member states’ designated authorities for whom it is necessary to access dna profiles , dactyloscopic data and facial images , and europol in accordance with this regulation. member states and europol shall ensure those persons maintain high professional standards of confidentiality and data protection , are of high integrity and appropriately skilled , including in detecting biases in and in the ethical use of big data sets.


### the use of the router shall be reserved to the member states’ authorities that have access to the exchange of dna profiles , dactyloscopic data and facial images , and europol in accordance with this regulation and regulation (eu) 2016/794. ### the use of the router shall be reserved to the specific individuals within member states’ designated authorities for whom it is necessary to access dna profiles and dactyloscopic data and europol in accordance with this regulation. member states and europol shall ensure those persons maintain high professional standards of confidentiality and data protection , are of high integrity and appropriately skilled , including in detecting biases in and in the ethical use of big data sets.


### 2. on receiving the request for a query from the router , each requested member state and europol shall launch a query of their databases in an automated manner and without delay. ### 2. on receiving the request for a query from the router , each requested member state and europol shall launch a query of their databases in a timely manner.


### 3. any matches resulting from the query in each member states’ databases and europol data shall be sent back in an automated manner to the router. ### 3. any matches resulting from the query in each member states’ databases and europol data shall be sent back to the router following a manual review process.


### 4. the router shall rank the replies in accordance with the score of the correspondence between the biometric data used for querying and the biometric data stored in the member states’ databases and europol data. ### 4. the router shall rank the replies in accordance with the score of the correspondence between the biometric data used for querying and the biometric data stored in the member states’ databases and europol data. the ranking process and technology shall be independently verified by , respectively , the european data protection board and the european data protection supervisor to ensure that the thresholds are sufficiently high to ensure accuracy , reasonably minimise the risk of misidentification and prevent discrimination.


### 6. the commission shall adopt implementing acts to specify the technical procedure for the router to query member states’ databases and europol data , the format of the router replies and the technical rules for scoring the correspondence between biometric data. these implementing acts shall be adopted in accordance with the procedure referred to in article 76(2). ### 6. the commission shall adopt implementing acts to specify the technical procedure for the router to query member states’ databases and europol data , the format of the router replies and the technical rules for scoring the correspondence between biometric data. these implementing acts shall ensure that the thresholds are sufficiently high to ensure accuracy , reasonably minimise the risk of misidentification and prevent discrimination and shall be adopted in accordance with the procedure referred to in article 76(2).


### the requested member state shall check the quality of the transmitted data by means of a fully automated procedure. ### the requested member state shall check the quality of the transmitted data by means of a manual procedure.


### should the data be unsuitable for an automated comparison , the requested member state shall inform the requesting member state about it via the router without delay. ### deleted


### simultaneous queries of the member states’ databases and europol data and the common identity repository may only be launched in cases where it is likely that data on a suspect , perpetrator or victim of a terrorist offence or other serious criminal offences as defined respectively in article 4 , points 21 and 22 , of regulation (eu) 2019/817 and article 4 , points 21 and 22 , of regulation (eu) 2019/818 are stored in the common identity repository. ### simultaneous queries of the member states’ databases and europol data and the common identity repository may only be launched in cases where it is likely that data on a persons convicted of or reasonably suspected of a serious criminal offence are stored in the common identity repository.


### those logs shall be protected by appropriate measures against unauthorised access and erased one year after their creation. if , however , they are required for monitoring procedures that have already begun , they shall be erased once the monitoring procedures no longer require the logs. ### those logs shall be protected by appropriate measures against unauthorised access and erased five years after their creation. if , however , they are required for monitoring procedures that have already begun , they shall be erased once the monitoring procedures no longer require the logs.


### [...] ### deleted


### article 42 ### deleted


### 1. for the automated searching of police records referred to in article 26 , member states and europol shall use the european police records index system (epris). ### 1. for the searching of police records of persons convicted of or reasonably suspected of a serious criminal offence as referred to in article 26 , member states and europol shall use the european police records index system (epris).


### a central infrastructure , including a search tool enabling the simultaneous querying of member states’ databases; ### a central infrastructure , including a search tool enabling the simultaneous querying of member states’ databases containing data of persons convicted of or reasonably suspected of a serious criminal offence;


### article 43 ### deleted


### article 44 ### deleted


### 2. on receiving the request for a query from epris , each requested member state shall launch a query of their national police records index in an automated manner and without delay. ### 2. on receiving the request for a query from epris , each requested member state shall launch a query of their national police records index containing data of persons convicted of or reasonably suspected of a serious criminal offence in a timely manner.


### 3. any matches resulting from the query in each member state’s database shall be sent back in an automated manner to epris. ### 3. any matches resulting from the query in each member state’s database shall , after being reviewed by the requested member state who shall conduct a human review to confirm that the request from the requesting member state respects the fundamental rights and freedoms of the data subject pursuant to directive (eu) 2016/680 , be sent back to epris.


### 5. upon reception of the list of matches , the requesting member state shall decide the matches for which a follow-up is necessary and send a reasoned follow-up request containing any additional relevant information to the requested member state(s) via siena. ### 5. upon reception of the list of matches , the requesting member state shall decide the matches for which a follow-up is necessary and send a reasoned follow-up request containing any additional relevant information to the requested member state(s).


### 6. the requested member state(s) shall process such requests without delay to decide whether to share the data stored in their database. ### 6. the requested member state(s) shall process such requests in a timely manner to decide whether to share the data stored in their database. requested member states may refuse to share the list of matches if they determine that it disproportionately infringes on the rights and freedoms of the data subject or if they determine it to be prejudicial to an ongoing investigation. the justification for such refusals must be provided promptly to the requesting member state.


### upon confirmation , the requested member state(s) shall share the data referred to in article 43 where available. this exchange of information shall take place via siena. ### upon confirmation , the requested member state(s) shall share the data referred to in article 43 where available.


### 1. europol shall keep logs of all data processing operations in epris. those logs shall include the following: ### deleted


### article 46 ### deleted


### 1. where it is technically impossible to use epris to query one or several national databases because of a failure of the infrastructure of europol , member states shall be notified in an automated manner by europol. europol shall take measures to address the technical impossibility to use epris without delay. ### 1. where it is technically impossible to use epris to query one or several national databases because of a failure of the infrastructure of europol , member states shall be notified in an automated manner by europol. europol shall take measures to address the technical impossibility to use epris in a timely manner.


### 2. where it is technically impossible to use epris to query one or several national databases because of a failure of the national infrastructure in a member state , that member state shall notify europol and the commission in an automated manner. member states shall take measures to address the technical impossibility to use epris without delay. ### 2. where it is technically impossible to use epris to query one or several national databases because of a failure of the national infrastructure in a member state , that member state shall notify europol and the commission in an automated manner. member states shall take measures to address the technical impossibility to use epris in a timely manner.


### where the procedures referred to in articles 6 , 7 , 13 or 22 show a match between the data used for the search or comparison and data held in the database of the requested member state(s) , and upon confirmation of this match by the requesting member state , the requested member state shall return a set of core data via the router within 24 hours. that set of core data , if available , shall contain the following data: ### where the procedures referred to in articles 6 , 7 , 13 or 22 show a match between the data used for the search or comparison and data held in the database of the requested member state(s) , and upon confirmation of this match by the requesting member state , the requesting member state may decide the matches for which a follow-up is necessary and send a reasoned follow-up request to the requested member state(s).


### article 48 ### deleted


### article 49 ### deleted


### 1. member states shall , in accordance with regulation (eu) 2016/794 , have access to , and be able to search via the router , biometric data which has been provided to europol by third countries for the purposes of article 18(2) , points (a) , (b) and (c) , of regulation (eu) 2016/794. ### 1. member states shall , in accordance with regulation (eu) 2016/794 , have access to , and be able to search via the router , biometric data concerning a person convicted of or reasonably suspected of a serious criminal offence , which has been provided to europol by third countries for the purposes of article 18(2) , points (a) of regulation (eu) 2016/794;


### article 50 ### deleted


### access by europol to data stored in member states’ databases ### access by europol to data of persons convicted of or reasonably suspected of a serious criminal offence stored in member states’ databases


### 1. europol shall , in accordance with regulation (eu) 2016/794 , have access to data , which are stored by member states in their national databases in accordance with this regulation. ### 1. europol may , in accordance with regulation (eu) 2016/794 , the principle of data minimisation and following a thorough human review of the requested member state to assess the scope of the query and the proper protection of fundamental rights and freedoms of the data subject pursuant to directive (eu) 2016/680 , permit limited access to data of persons convicted of or reasonably suspected of a serious criminal offence for purposes of investigating serious criminal offences , which are stored by member states in their national databases in accordance with this regulation.


### 3. europol queries performed with vehicle registration data as a search criterion shall be carried out using eucaris. ### 3. europol queries performed with specific vehicle registration data as a search criterion shall be carried out using eucaris.


### 4. europol queries performed with police records as a search criterion shall be carried out using epris. ### 4. europol queries performed with police records of persons convicted of or reasonably suspected of a serious criminal offence as a search criterion shall be carried out using epris.


### 5. europol shall carry out the searches in accordance with paragraph 1 only when carrying out its tasks referred to in regulation (eu) 2016/794. ### 5. europol shall carry out the searches in accordance with paragraph 1 only when carrying out its tasks referred to in regulation (eu) 2016/794 and for purposes of investigation serious criminal offences.


### 6. where the procedures referred to in articles 6 , 7 , 13 or 22 show a match between the data used for the search or comparison and data held in the national database of the requested member state(s) , and upon confirmation of that match by europol , the requested member state shall decide whether to return a set of core data via the router within 24 hours. that set of core data , if available , shall contain the following data: ### 6. where the procedures referred to in articles 6 , 7 , 13 or 22 show a match between the data used for the search or comparison and data held in the national database of the requested member state(s) , and upon confirmation of that match by europol , the requested member state shall decide whether to return a set of core data via the router within a timely manner after fulfilment of the human review. that set of core data , if available , may only contain the following data:


### 1. processing of personal data by the requesting member state or europol shall be permitted solely for the purposes for which the data have been supplied by the requested member state in accordance with this regulation. processing for other purposes shall be permitted solely with the prior authorisation of the requested member state. ### 1. processing of personal data by the requesting member state or europol shall be permitted solely for the purposes for which the data have been supplied by the requested member state in accordance with this regulation. processing for other purposes shall be prohibited.


### establish whether the compared dna profiles , dactyloscopic data , vehicle registration data , facial images and police records match; ### establish whether the compared dna profiles , dactyloscopic data , certain vehicle registration data , facial images and police records match;


### establish whether the compared dna profiles , dactyloscopic data , vehicle registration data , facial images and police records match; ### establish whether the compared dna profiles , dactyloscopic data , and certain vehicle registration data;


### prepare and submit a police request for legal assistance if those data match; ### prepare and submit a police request for legal assistance in investigations into serious criminal offences if those data match;


### 3. the requesting member state may process the data supplied to it in accordance with articles 6 , 7 , 13 or 22 solely where this is necessary for the purposes of this regulation. the supplied data shall be deleted immediately following data comparison or automated replies to searches unless further processing is necessary by the requesting member state for the purposes of the prevention , detection and investigation of criminal offences. ### 3. the requesting member state may process the data supplied to it in accordance with articles 6 , 7 , 13 or 22 solely where this is strictly necessary for the purposes of this regulation. the supplied data shall be deleted immediately following data comparison or replies to searches unless further processing is necessary by the requesting member state for the purposes of the prevention , detection and investigation of serious criminal offences.


### 2. costs incurred in connection with the integration of the existing national infrastructures and their connections to the router and epris as well as costs incurred in connection with the establishment of national facial images databases and police national indexes for the prevention , detection and investigation of criminal offences shall be borne by the general budget of the union. ### 2. costs incurred in connection with the integration of the existing national infrastructures and their connections to the router and epris as well as costs incurred in connection with the establishment of national and police national indexes for the prevention , detection and investigation of criminal offences shall be borne by the general budget of the union.


### the commission shall , in close cooperation with the member states , europol and eu-lisa , make available a practical handbook for the implementation and management of this regulation. the practical handbook shall provide technical and operational guidelines , recommendations and best practices. the commission shall adopt the practical handbook in the form of a recommendation. ### the commission shall , in close cooperation with the member states , europol , eu-lisa , the european data protection board and the european data protection supervisor make available a practical handbook for the implementation and management of this regulation. the practical handbook shall provide technical and operational guidelines , recommendations and best practices. the commission shall adopt the practical handbook in the form of a recommendation.


### 7. three years after the start of operations of the router and epris as referred to in article 74 and every four years thereafter , the commission shall produce an overall evaluation of prüm ii , including: ### 7. three years after the start of operations of the router as referred to in article 74 and every four years thereafter , the commission shall produce an overall evaluation of prüm ii , including:


### 8. the member states and europol shall provide eu-lisa and the commission with the information necessary to draft the reports referred to in paragraphs 2 and 5. this information shall not jeopardise working methods or include information that reveals sources , staff members or investigations of the designated authorities. ### 8. the member states shall provide eu-lisa and the commission with the information necessary to draft the reports referred to in paragraphs 2 and 5. this information shall not jeopardise working methods or include information that reveals sources , staff members or investigations of the designated authorities.


### 9. the member states shall provide europol and the commission with the information necessary to draft the reports referred to in paragraphs 3 and 6. this information shall not jeopardise working methods or include information that reveals sources , staff members or investigations of the designated authorities. ### 9. the member states shall provide the commission with the information necessary to draft the reports referred to in paragraphs 3 and 6. this information shall not jeopardise working methods or include information that reveals sources , staff members or investigations of the designated authorities.


### 10. member states , eu-lisa and europol shall provide the commission with the information necessary to produce the evaluations referred to in paragraph 7. member states shall also provide the commission with the number of confirmed matches against each member state’s database per category of data. ### 10. member states and eu-lisa shall provide the commission with the information necessary to produce the evaluations referred to in paragraph 7. member states shall also provide the commission with the number of confirmed matches against each member state’s database per category of data.


### proposal for a regulation of the european parliament and of the council on automated data exchange for police cooperation (“prüm ii”) , amending council decisions 2008/615/jha and 2008/616/jha and regulations (eu) 2018/1726 , 2019/817 and 2019/818 of the european parliament and of the council ### proposal for a regulation of the european parliament and of the council on data exchange for police cooperation (“prüm ii”) , amending council decisions 2008/615/jha and 2008/616/jha and regulations (eu) 2018/1726 , 2019/817 and 2019/818 of the european parliament and of the council


### (3) the objective of this regulation is therefore to improve , streamline and facilitate the exchange of criminal information between member states’ law enforcement authorities , but also with the european union agency for law enforcement cooperation established by regulation (eu) no 2016/794 of the european parliament and of the council30 (europol) as the union criminal information hub. ### (3) the objective of this regulation is therefore to improve , streamline and facilitate the exchange of data about persons who have been convicted of a serious criminal offence or are reasonably suspected of a serious criminal offence , in the context of an investigation into serious criminal offences , between member states’ law enforcement authorities and the european union agency for law enforcement cooperation established by regulation (eu) no 2016/794 of the european parliament and of the council30 (europol).


### (5) this regulation should lay down the conditions and procedures for the automated transfer of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records. this should be without prejudice to the processing of any of these data in the schengen information system (sis) or the exchange of supplementary information related to them via the sirene bureaux or to the rights of individuals whose data is processed therein. ### (5) this regulation should lay down the conditions and procedures for the transfer of dna profiles , dactyloscopic data and certain vehicle registration data , facial images and police records in the context of investigations into serious criminal offences. this should be without prejudice to the processing of any of these data in the schengen information system (sis) or the exchange of supplementary information related to them via the sirene bureaux or to the rights of individuals whose data is processed therein.


### (5) this regulation should lay down the conditions and procedures for the automated transfer of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records. this should be without prejudice to the processing of any of these data in the schengen information system (sis) or the exchange of supplementary information related to them via the sirene bureaux or to the rights of individuals whose data is processed therein. ### (5) this regulation should lay down the conditions and procedures for the transfer of dna profiles , dactyloscopic data and certain vehicle registration data in the context of investigations into serious criminal offences. this should be without prejudice to the processing of any of these data in the schengen information system (sis) or the exchange of supplementary information related to them via the sirene bureaux or to the rights of individuals whose data is processed


### (7) by providing for the automated search or comparison of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records , the purpose of this regulation is also to allow for the search of missing persons and unidentified human remains. this should be without prejudice to the entry of sis alerts on missing persons and the exchange of supplementary information on such alerts under regulation (eu) 2018/1862 of the european parliament and of the council.33 ### (7) by providing for the search or comparison of dna profiles , dactyloscopic data and certain vehicle registration data , this should be without prejudice to the entry of sis alerts on missing persons and the exchange of supplementary information on such alerts under regulation (eu) 2018/1862 of the european parliament and of the council.33


### (7) by providing for the automated search or comparison of dna profiles , dactyloscopic data , vehicle registration data , facial images and police records , the purpose of this regulation is also to allow for the search of missing persons and unidentified human remains. this should be without prejudice to the entry of sis alerts on missing persons and the exchange of supplementary information on such alerts under regulation (eu) 2018/1862 of the european parliament and of the council.33 ### (7) by providing for the search or comparison of dna profiles , dactyloscopic data , specific vehicle registration data , facial images and police records , the purpose of this regulation is also to allow for the search of unidentified human remains. this should be without prejudice to the entry of sis alerts on missing persons and the exchange of supplementary information on such alerts under regulation (eu) 2018/1862 of the european parliament and of the council.33


### (8) the directive (eu) …/… [on information exchange between law enforcement authorities of member states] provides a coherent union legal framework to ensure that law enforcement authorities have equivalent access to information held by other member states when they need it to fight crime and terrorism. to enhance information exchange , that directive formalises and clarifies the procedures for information sharing between member states , in particular for investigative purposes , including the role of the ‘single point of contact’ for such exchanges , and making full use of europol’s information exchange channel siena. any exchange of information beyond what is provided for in this regulation should be regulated by directive (eu) …/… [on information exchange between law enforcement authorities of member states]. ### (8) the directive (eu) …/… [on information exchange between law enforcement authorities of member states] provides a coherent union legal framework to ensure that law enforcement authorities have equivalent access to information held by other member states when they need it to fight crime and terrorism. to enhance information exchange , that directive formalises and clarifies the procedures for information sharing between member states , in particular for investigative purposes , including the role of the ‘single point of contact’ for such exchanges. any exchange of information beyond what is provided for in this regulation should be regulated by directive (eu) …/… [on information exchange between law enforcement authorities of member states].


### (9) for the automated searching of vehicle registration data , member states should use the european vehicle and driving licence information system (eucaris) set up by the treaty concerning a european vehicle and driving licence information system (eucaris) designed for this purpose. eucaris should connect all participating member states in a network. there is no central component needed for the communication to be established as each member state communicates directly to the other connected member states. ### (9) for the searching of certain vehicle registration data , member states should use the european vehicle and driving licence information system (eucaris) set up by the treaty concerning a european vehicle and driving licence information system (eucaris) designed for this purpose. eucaris should connect all participating member states in a network. there is no central component needed for the communication to be established as each member state communicates directly to the other connected member states. databases containing information about holders or owners of driving licenses shall be excluded from the scope of this regulation.


### (10) the identification of a criminal is essential for a successful criminal investigation and prosecution. the automated searching of facial images of suspects and convicted criminals should provide for additional information for successfully identifying criminals and fighting crime. ### (10) deleted.


### (10) the identification of a criminal is essential for a successful criminal investigation and prosecution. the automated searching of facial images of suspects and convicted criminals should provide for additional information for successfully identifying criminals and fighting crime. ### (10) the identification of a criminal may be essential for a successful criminal investigation and prosecution. the searching of facial images of persons convicted of or reasonably suspected of a serious criminal offence should provide for additional information for successfully identifying criminals and fighting crime.


### (11) the automated search or comparison of biometric data (dna profiles , dactyloscopic data and facial images) between authorities responsible for the prevention , detection and investigation of criminal offences under this regulation should only concern data contained in databases established for the prevention , detection and investigation of criminal offences. ### (11) the search or comparison of biometric data (dna profiles , dactyloscopic data and facial images) between authorities responsible for the prevention , detection and investigation of criminal offences under this regulation should only concern data contained in databases established for the prevention , detection and investigation of serious criminal offences.


### (11) the automated search or comparison of biometric data (dna profiles , dactyloscopic data and facial images) between authorities responsible for the prevention , detection and investigation of criminal offences under this regulation should only concern data contained in databases established for the prevention , detection and investigation of criminal offences. ### (11) the search or comparison of biometric data (dna profiles , dactyloscopic data) between authorities responsible for the prevention , detection and investigation of criminal offences under this regulation should only concern data contained in databases established for the prevention , detection and investigation of serious criminal offences.


### (12) participation in the exchange of police records should remain voluntary. where member states decide to participate , in the spirit of reciprocity , it should not be possible for them to query other member states’ databases if they do not make their own data available for queries by other member states. ### (12) participation in the exchange of police records should remain voluntary. where member states decide to participate they should ensure the availability of national police records indexes which contain sets of biographical data of convicted persons from national databases established for the prevention , detection and investigation of criminal offences. given the sensitivity of the data concerned , it should only be possible to conduct searches for and exchange police records related to persons convicted of or reasonably suspected of a serious criminal offence . when creating national police records indexes , it is important that member states use data from national databases established for law enforcement purposes. member states’ law enforcement authorities shall check those data in the national police records indexes on receipt of information requests from the competent law enforcement authorities of other member states.


### (13) in recent years , europol has received a large amount of biometric data of suspected and convicted terrorists and criminals from several third countries. including third country-sourced data stored at europol in the prüm framework and thus making this data available to law enforcement authorities is necessary for better prevention and investigation of criminal offences. it also contributes to building synergies between different law enforcement tools. ### (13) in recent years , europol has received a large amount of biometric data of suspected and convicted terrorists and criminals from several third countries. including third country-sourced data stored at europol in the prüm framework and thus making this data available to law enforcement authorities may be helpful for better prevention and investigation of serious criminal offences but should also be critically assessed to avoid use of it if it has been provided to intentionally incriminate innocent persons.


### (14) europol should be able to search member states’ databases under the prüm framework with data received from third countries in order to establish cross-border links between criminal cases. being able to use prüm data , next to other databases available to europol , should allow establishing more complete and informed analysis on the criminal investigations and should allow europol to provide better support to member states’ law enforcement authorities. in case of a match between data used for the search and data held in member states’ databases , member states may supply europol with the information necessary for it to fulfil its tasks. ### (14) europol should be able to search member states’ databases under the prüm framework with data received from third countries in order to establish cross-border links between cases of serious criminal offences. being able to use prüm data , next to other databases available to europol , should allow establishing more complete and informed analysis on the criminal investigations and should allow europol to provide better support to member states’ law enforcement authorities.


### (15) decisions 2008/615/jha and 2008/616/jha provide for a network of bilateral connections between the national databases of member states. as a consequence of this technical architecture , each member state should establish at least 26 connections , that means a connection with each member state , per data category. the router and the european police records index system (epris) established by this regulation should simplify the technical architecture of the prüm framework and serve as connecting points between all member states. the router should require a single connection per member state in relation to biometric data and epris should require a single connection per member state in relation to police records. ### (15) decisions 2008/615/jha and 2008/616/jha provide for a network of bilateral connections between the national databases of member states. as a consequence of this technical architecture , each member state should establish at least 26 connections , that means a connection with each member state , per data category. the router established by this regulation should simplify the technical architecture of the prüm framework and serve as connecting points between all member states. the router should require a single connection per member state in relation to biometric data of serious criminal offences.


### (15) decisions 2008/615/jha and 2008/616/jha provide for a network of bilateral connections between the national databases of member states. as a consequence of this technical architecture , each member state should establish at least 26 connections , that means a connection with each member state , per data category. the router and the european police records index system (epris) established by this regulation should simplify the technical architecture of the prüm framework and serve as connecting points between all member states. the router should require a single connection per member state in relation to biometric data and epris should require a single connection per member state in relation to police records. ### (15) decisions 2008/615/jha and 2008/616/jha provide for a network of bilateral connections between the national databases of member states. as a consequence of this technical architecture , each member state should establish at least 26 connections , that means a connection with each member state , per data category. the router and the european police records index system (epris) established by this regulation should simplify the technical architecture of the prüm framework and serve as connecting points between all member states. the router should require a single connection per member state in relation to biometric data and epris should require a single connection per member state in relation to police records of serious criminal offences.


### (16) the router should be connected to the european search portal established by article 6 of regulation (eu) 2019/817 of the european parliament and of the council34 and article 6 of regulation (eu) 2019/818 of the european parliament and of the council35 to allow member states’ authorities and europol to launch queries to national databases under this regulation simultaneously to queries to the common identity repository established by article 17 of regulation (eu) 2019/817 and article 17 of regulation (eu) 2019/818 for law enforcement purposes. ### (16) the router should be connected to the european search portal established by article 6 of regulation (eu) 2019/817 of the european parliament and of the council34 and article 6 of regulation (eu) 2019/818 of the european parliament and of the council35 to allow member states’ authorities and europol to launch queries to national databases under this regulation simultaneously to queries to the common identity repository established by article 17 of regulation (eu) 2019/817 and article 17 of regulation (eu) 2019/818 for investigations into serious criminal offences.


### (17) in case of a match between the data used for the search or comparison and data held in the national database of the requested member state(s) , and upon confirmation of this match by the requesting member state , the requested member state should return a limited set of core data via the router within 24 hours. the deadline would ensure fast communication exchange between member states’ authorities. member states should retain control over the release of this limited set of core data. a certain degree of human intervention should be maintained at key points in the process , including for the decision to release personal data to the requesting member state in order to ensure that there would be no automated exchange of core data. ### (17) in case of a match between the data used for the search or comparison and data held in the national database of the requested member state(s) , and upon confirmation of this match by the requesting member state , the requested member state should return a limited set of core data via the router within 48 hours. the deadline would ensure fast communication exchange between member states’ authorities. member states should retain control over the release of this limited set of core data. human intervention should be maintained at key points in the process , including for the decision to release personal data to the requesting member state in order to ensure that there would be no automated exchange of personal data.


### (18) any exchange between member states’ authorities or with europol at any stage of one of the processes described under this regulation , which is not explicitly described in this regulation , should take place via siena to ensure that a common , secure and reliable channel of communication is used by all member states. ### deleted


### (19) the universal message format (umf) standard should be used in the development of the router and epris. any automated exchange of data in accordance with this regulation should use the umf standard. member states’ authorities and europol are encouraged to use the umf standard also in relation to any further exchange of data between them in the context of the prüm ii framework. the umf standard should serve as a standard for structured , cross-border information exchange between information systems , authorities or organisations in the field of justice and home affairs. ### (19) the universal message format (umf) standard should be used in the development of the router and epris. any exchange of data in accordance with this regulation should use the umf standard. member states’ authorities and europol are encouraged to use the umf standard also in relation to any further exchange of data between them in the context of the prüm ii framework. the umf standard should serve as a standard for structured , cross-border information exchange between information systems , authorities or organisations in the field of justice and home affairs.


### (21) certain aspects of the prüm ii framework cannot be covered exhaustively by this regulation given their technical , highly detailed and frequently changing nature. those aspects include , for example , technical arrangements and specifications for automated searching procedures , the standards for data exchange and the data elements to be exchanged. in order to ensure uniform conditions for the implementation of this regulation implementing powers should be conferred on the commission. those powers should be exercised in accordance with regulation (eu) no 182/2011 of the european parliament and of the council.36 ### (21) certain aspects of the prüm ii framework cannot be covered exhaustively by this regulation given their technical , highly detailed and frequently changing nature. those aspects include , for example , technical arrangements and specifications for searching procedures , the standards for data exchange and the data elements to be exchanged. in order to ensure uniform conditions for the implementation of this regulation implementing powers should be conferred on the commission. those powers should be exercised in accordance with regulation (eu) no 182/2011 of the european parliament and of the council.36


### this regulation establishes a framework for the exchange of information between authorities responsible for the prevention , detection and investigation of criminal offences (prüm ii). ### this regulation establishes a framework for the exchange of information between authorities responsible for the prevention , detection and investigation of serious criminal offences (prüm ii).


### this regulation lays down the conditions and procedures for the automated searching of dna profiles , dactyloscopic data , facial images , police records and certain vehicle registration data and the rules regarding the exchange of core data following a match. ### this regulation lays down the conditions and procedures for the searching of dna profiles , dactyloscopic data , facial images , police records and certain vehicle registration data of persons convicted of or reasonably suspected of a serious criminal offence and the rules regarding the exchange of core data following a match.


### this regulation lays down the conditions and procedures for the automated searching of dna profiles , dactyloscopic data , facial images , police records and certain vehicle registration data and the rules regarding the exchange of core data following a match. ### this regulation lays down the conditions and procedures for the automated searching of dna profiles , dactyloscopic data and certain vehicle registration data of persons convicted of or reasonably suspected of a serious criminal offence and the rules regarding the exchange of core data following a match.


### the purpose of prüm ii shall be to step up cross-border cooperation in matters covered by part iii , title v , chapter 5 of the treaty on the functioning of the european union , particularly the exchange of information between authorities responsible for the prevention , detection and investigation of criminal offences. ### the purpose of prüm ii shall be to step up cross-border cooperation in matters covered by part iii , title v , chapter 5 of the treaty on the functioning of the european union , particularly the exchange of information between authorities responsible for the prevention , detection and investigation of serious criminal offences in full respect of human dignity and integrity and other fundamental rights , including the right to respect for one's private life and to the protection of personal data , in accordance with the charter of fundamental rights of the european union.


### the purpose of prüm ii shall also be to allow for the search for missing persons and unidentified human remains by authorities responsible for the prevention , detection and investigation of criminal offences. ### deleted


### this regulation applies to the national databases used for the automated transfer of the categories of dna profiles , dactyloscopic data , facial images , police records and certain vehicle registration data. ### this regulation applies to the national databases used for processing of dna profiles , dactyloscopic data , facial images , police records and certain vehicle registration data of persons who have been convicted of a serious criminal offence or are reasonably suspected of a serious criminal offence.


### this regulation applies to the national databases used for the automated transfer of the categories of dna profiles , dactyloscopic data , facial images , police records and certain vehicle registration data. ### this regulation applies to the national databases used for the automated transfer of the categories of dna profiles , dactyloscopic data and certain vehicle registration data of persons who have been convicted of a serious criminal offence or are reasonably suspected of a serious criminal offence.


### (9) ‘individual case’ means a single investigation file; ### (9) ‘individual case’ means a single investigation file into one or more persons who have been convicted of a serious criminal offence or are reasonably suspected of a serious criminal offence in accordance with this regulation;


### (10) ‘facial image’ means digital image of the face; ### deleted


### (10) ‘facial image’ means digital image of the face; ### (10) ‘facial image’ means digital image of the face;


### (11) ‘biometric data’ means dna profiles , dactyloscopic data or facial images; ### (11) ‘biometric data’ means dna profiles , dactyloscopic data;


### (16) ‘police records’ means any information available in the national register or registers recording data of competent authorities , for the prevention , detection and investigation of criminal offences; ### deleted


### (16) ‘police records’ means any information available in the national register or registers recording data of competent authorities , for the prevention , detection and investigation of criminal offences; ### (16) ‘police records’ means any information available in the national register or registers of competent authorities recording data on persons convicted of or reasonably suspected of a serious criminal offence for the prevention , detection and investigation of serious criminal offences;


### 2 exchange of data ### 2 exchange of data of persons convincted of or reasonably suspected of a serious criminal offence in the context of investigations into serious criminal offences


### 1 dna profiles ### 1 dna profiles of persons convicted of or reasonably suspected of a serious criminal offence


### 1. member states shall open and keep national dna analysis files for the investigation of criminal offences. ### 1. member states shall open and keep national dna analysis files for the investigation of serious criminal offences.


### automated searching of dna profiles ### searching of dna profiles


### 1. member states shall allow national contact points referred to in article 29 and europol access to the dna reference data in their dna analysis files , to conduct automated searches by comparing dna profiles for the investigation of criminal offences. ### 1. member states shall allow national contact points referred to in article 29 and europol access to the dna reference data in their dna analysis files , to conduct searches by comparing dna profiles for the investigation of serious criminal offences.


### 2. should an automated search show that a supplied dna profile matches dna profiles entered in the requested member state's searched file , the national contact point of the requesting member state shall receive in an automated way the dna reference data with which a match has been found. ### 2. should a search show that a supplied dna profile matches dna profiles entered in the requested member state's searched file , the national contact point of the requesting member state shall receive a notification of a potential match. when the search shows that a supplied dna profile matches dna profiles entered in the requested member state’s searched file , the national contact point of the requested member state shall ensure a human review is conducted to assess the quality , accuracy and veracity of the dna reference data and the protection of fundamental rights and freedoms of the data subject pursuant to directive (eu) 2016/680. when the human review shows sharing dna reference data disproportionately infringes the rights and freedoms of the data subject or if sharing may harm ongoing investigations , the requested member state may refuse to share the dna reference data. the justification for such refusals must be provided promptly to the requesting member state.


### article 7 ### deleted


### each member state shall inform the commission and eu-lisa of the national dna analysis files , to which articles 5 to 7 apply , in accordance with article 73. ### each member state shall inform the commission and eu-lisa of the national dna analysis files , to which articles 5 and 6 apply , in accordance with article 73.


### 1. a request for an automated search or comparison shall include only the following information: ### 1. a request for a search or comparison shall include only the following information:


### 3. automated notification of a match shall only be provided if the automated search or comparison has resulted in a match of a minimum number of loci. the commission shall adopt implementing acts to specify this minimum number of loci , in accordance with the procedure referred to in article 76(2). ### 3. automated notification of a match shall only be provided if the search or comparison has resulted in a match of a minimum number of loci. the commission shall adopt implementing acts to specify this minimum number of loci , in accordance with the procedure referred to in article 76(2).


### 2 dactyloscopic data ### 2 dactyloscopic data of persons convicted of or reasonably suspected of a serious criminal offence


### 1. member states shall ensure the availability of dactyloscopic reference data from the file for the national automated fingerprint identification systems established for the prevention , detection and investigation of criminal offences. ### 1. member states shall ensure the availability of dactyloscopic reference data from the file for the national fingerprint identification systems established for the prevention , detection and investigation of serious criminal offences.


### automated searching of dactyloscopic data ### searching of dactyloscopic data


### 1. for the prevention , detection and investigation of criminal offences , member states shall allow national contact points of other member states and europol access to the dactyloscopic reference data in the automated fingerprint identification systems which they have established for that purpose , to conduct automated searches by comparing dactyloscopic reference data. ### 1. for the prevention , detection and investigation of serious criminal offences , member states may allow national contact points of other member states access to the dactyloscopic reference data in the automated fingerprint identification systems which they have established for that purpose , to conduct automated searches by comparing dactyloscopic reference data.


### 2. the national contact point of the requesting member state shall confirm a match of dactyloscopic data with dactyloscopic reference data held by the requested member state following the automated supply of the dactyloscopic reference data required for confirming a match. ### 2. the national contact point of the requesting member state shall confirm a match of dactyloscopic data with dactyloscopic reference data held by the requested member state following the supply of the dactyloscopic reference data required for confirming a match.


### 3 vehicle registration data ### 3 certain vehicle registration data of persons convicted of or reasonably suspected of a serious criminal offence


### automated searching of vehicle registration data ### searching of vehicle registration data


### 1. for the prevention , detection and investigation of criminal offences , member states shall allow national contact points of other member states and europol access to the following national vehicle registration data , to conduct automated searches in individual cases: ### 1. for the prevention , detection and investigation of serious criminal offences , member states shall allow national contact points of other member states access to the following national vehicle registration data , to conduct searches in individual cases:


### data relating to owners or operators; ### certain data relating to owners or operators;


### 2. searches may be conducted only with a full chassis number or a full registration number. ### 2. searches may be conducted only with a full chassis number or a full registration number.


### principles of automated searching of vehicle registration data ### principles of searching of vehicle registration data


### 1. for automated searching of vehicle registration data member states shall use the european vehicle and driving licence information system (eucaris). ### 1. for searching of vehicle registration data member states shall use the european vehicle and driving licence information system (eucaris).


### those logs shall be protected by appropriate measures against unauthorised access and erased one year after their creation. if , however , they are required for monitoring procedures that have already begun , they shall be erased once the monitoring procedures no longer require the logs. ### those logs shall be protected by appropriate measures against unauthorised access and erased five years after their creation. if , however , they are required for monitoring procedures that have already begun , they shall be erased once the monitoring procedures no longer require the logs.


### [...] ### deleted


### 4 facial images ### 4 facial images of persons convicted of or reasonably suspected of a serious criminal offence


### article 21 ### deleted


### 1. member states shall ensure the availability of facial images from their national databases established for the prevention , detection and investigation of criminal offences. those data shall only include facial images and the reference number referred to in article 23 , and shall indicate whether the facial images are attributed to an individual or not. ### 1. member states shall ensure the availability of facial images from their national databases established for the prevention , detection and investigation of serious criminal offences. those data shall only include facial images of persons convicted of or reasonably suspected of a serious criminal offence and the reference number referred to in article 23.


### 2. facial images which are not attributed to any individual (unidentified facial images) must be recognisable as such. ### deleted


### article 22 ### deleted


### automated searching of facial images ### searching of facial images


### 1. for the prevention , detection and investigation of criminal offences , member states shall allow national contact points of other member states and europol access to facial images stored in their national databases , to conduct automated searches. ### 1. for the prevention , detection and investigation of serious criminal offences , member states shall allow national contact points of other member states and europol access to facial images stored in their national databases , to conduct searches.


### 2. the requesting member state shall receive a list composed of matches concerning likely candidates. that member state shall review the list to determine the existence of a confirmed match. ### 2. should a search show that a supplied facial image matches one or multiple facial images entered in the requested member state's searched , the national contact point of the requesting member state shall receive a notification of a potential match.


### article 23 ### deleted


### article 24 ### deleted


### 1. a request for an automated search shall include only the following information: ### 1. a request for a search shall include only the following information:


### 5 police records ### 5 police records of persons convicted of or reasonably suspected of a serious criminal offence


### article 25 ### deleted


### 1. member states may decide to participate in the automated exchange of police records. member states participating in the automated exchange of police records shall ensure the availability of biographical data of suspects and criminals from their national police records indexes established for the investigation of criminal offences. this set of data , if available , shall contain the following data: ### 1. member states may decide to participate in the exchange of police records of persons convicted of or reasonably suspected of a serious criminal offence. member states participating in the exchange of police records may ensure the availability of biographical data of suspects and criminals from their national police records indexes established for the investigation of serious criminal offences. this set of data , if available , shall contain the following data:


### article 26 ### deleted


### automated searching of police records ### searching of police records of persons convicted of or reasonably suspected of a serious criminal offence


### a. whereas many women face intersecting inequalities and discrimination in the eu; whereas intersectional discrimination refers to a situation in which several grounds of discrimination operate and interact with each other , for example gender with other grounds of discrimination such as race , colour , ethnic or socio-economic status , age , sexual orientation , gender identity and expression , sex characteristics , genetic features , religion or belief , nationality , residence status , or disability , among others , in a way that they are inseparable and produce specific types of discrimination; ### a. whereas many women face intersecting inequalities and discrimination in the eu; whereas intersectional discrimination refers to a situation in which several grounds of discrimination operate and interact with each other in a negative synergy , for example gender with other grounds of discrimination such as race , colour , ethnic or socio-economic status , age , sexual orientation , gender identity and expression , sex characteristics , genetic features , religion or belief , nationality , residence status , or disability , among others , in a way that they are inseparable and produce distinct and specific types of discrimination; whereas discrimination per se is somehow addressed within the eu policy and legal framework , and intersectional discrimination continues to be on the margins of both; whereas the compounded effects of intersectionality constitute a human rights violation;