### strengthening citizen ' s awareness of european culture , history and remembrance as well as their sense of belonging to the union ; ### strengthening citizen ' s - especially of young people - awareness , of european culture , cultural heritage history and remembrance , but also of the future challenges of the eu and reinforcing their sense of belonging to the union , particularly through : initiatives to reflect on the causes of totalitarian regimes in europe ' s modern history and to commemorate the victims of their crimes ; activities concerning other defining moments and reference points in recent european history ;


### bringing together europeans of different nationalities and cultures by giving them the opportunity to participate in town - twinning activities ; ### bringing together citizens of different nationalities and cultures by giving them the opportunity to participate in meetings , town - twinning activities , small scale and civil society projects , thus creating the conditions for a stronger bottom - up approach , aimed at shaping the union’s political agenda ;


### encouraging and facilitating active participation in the construction of a more democratic union as well as awareness of rights and values through support to civil society organisations ### encouraging and facilitating active and inclusive participation , with particular attention to marginalised groups of society , in the construction of a more democratic union , by promoting , inter alia , the use of e - democracy tools and the european citizens ' initiative ; raising awareness of promoting and defending rights and values through support to civil society organisations ;


### developing the capacity of european networks to promote and further develop union law , policy goals and strategies as well as supporting civil society organisations active in the areas covered by the programme ; ### supporting civil society organisations active in the areas covered by the programme ;


### awareness raising , dissemination of information to improve the knowledge of the policies and rights in the areas covered by the programme ; ### raising awareness of union values among citizens , notably young people , dissemination of information to improve the knowledge of the policies and rights in the areas covered by the programme ;


### mutual learning through exchange of good practices among stakeholders to improve knowledge and mutual understanding and civic and democratic engagement ; ### mutual learning through exchange of good practices among stakeholders to improve knowledge , mutual understanding and intercultural dialogue and civic and democratic engagement ;


### enhancing knowledge of the programme and dissemination and transferability of its results and fostering citizen outreach , including by setting up and supporting programme desks / national contact network . ### enhancing knowledge of the programme and dissemination and transferability of its results and fostering citizen outreach , including by setting up and supporting new or existing programme desks / national contact network .


### the programme will be monitored on the basis of a set of indicators intended to measure the extent to which the general and specific objectives of the programme have been achieved and with a view to minimising administrative burdens and costs . to that end , data will be collected as regards the following set of key indicators : ### the programme will be monitored on the basis of a set of indicators intended to measure the extent to which the general and specific objectives of the programme have been achieved and with a view to minimising administrative burdens and costs . where possible , indicators are to be broken down by age , sex and any other collectable data . to that end , data will be collected as regards the following set of key indicators :


### number of transnational networks and initiatives focusing on european memory and heritage as a result of programme intervention ### number of transnational networks and initiatives focusing on european remembrance , heritage and civil dialogue as a result of programme intervention .


### in order to bring the european union closer to its citizens , a variety of actions and coordinated efforts are necessary . bringing together citizens in town - twinning projects or networks of towns and supporting civil society organisations in the areas covered by the programme will contribute to increase citizens ' engagement in society and ultimately their involvement in the democratic life of the union . at the same time supporting activities promoting mutual understanding , diversity , dialogue and respect for others fosters a sense of belonging and a european identity , based on a shared understanding of european values , culture , history and heritage . the promotion of a greater sense of belonging to the union and of union values is particularly important amongst citizens of the eu outermost regions due to their remoteness and distance from continental europe . ### in order to bring the european union closer to its citizens , a variety of actions and coordinated efforts are necessary . bringing together citizens in town - twinning projects or networks of towns and supporting civil society organisations in the areas covered by the programme will contribute to increase citizens ' awareness and active engagement in society and ultimately their involvement in the democratic and social life of the union , strengthening social inclusion and fighting marginalization . at the same time supporting activities promoting mutual understanding , diversity , dialogue and respect for others fosters a sense of belonging and a european identity , based on a shared understanding of european values , culture , history and heritage . the promotion of a greater sense of belonging to the union and of union values is particularly important amongst citizens of the eu outermost regions due to their remoteness and distance from continental europe .


### independent human rights bodies and civil society organisations play an essential role in promoting , safeguarding and raising awareness of the union’s common values under article 2 teu , and in contributing to the effective enjoyment of rights under union law , including the charter of fundamental rights of the eu . as reflected in the european parliament resolution of 18 april 2018 , adequate financial support is key to the development of a conducive and sustainable environment for civil society organisations to strengthen their role and perform their functions independently and effectively . complementing efforts at national level , eu funding should therefore contribute to support , empower and build the capacity of independent civil society organisations active in the promotion of human rights whose activities help the strategic enforcement of rights under eu law and the charter of fundamental rights of the eu , including through advocacy and watchdog activities , as well as to promote , safeguard and raise awareness of the union’s common values at national level . ### independent human rights bodies and civil society organisations play an essential role in promoting , safeguarding and raising awareness of the union’s common values under article 2 teu , and in contributing to the effective enjoyment of rights under union law , including the charter of fundamental rights of the eu . as reflected in the european parliament resolution of 18 april 2018 , adequate financial support is key to the development of a conducive and sustainable environment for civil society organisations to strengthen their role and perform their functions independently and effectively . complementing efforts at national level , eu funding should therefore contribute to support , empower and build the capacity of independent civil society organisations active in the promotion of human rights whose activities help the strategic enforcement of rights under eu law and the charter of fundamental rights of the eu , including through advocacy and watchdog activities , as well as to promote , safeguard and raise awareness of the union’s common values at local , regional and national level .


### the types of financing and the methods of implementation under this regulation should be chosen on the basis of their ability to achieve the specific objectives of the actions and to deliver results , taking into account , in particular , the costs of controls , the administrative burden , and the expected risk of non - compliance . this should include consideration of the use of lump sums , flat rates and unit costs , as well as financing not linked to costs as referred to in article 125 of the financial regulation . in accordance with the financial regulation , regulation no 883 / 2013 of the european parliament and of the council20 council regulation no 2988 / 9521 council regulation no 2185 / 9622 and council regulation 2017 / 193923 the financial interests of the union are to be protected through proportionate measures , including the prevention , detection , correction and investigation of irregularities and fraud , the recovery of funds lost , wrongly paid or incorrectly used and , where appropriate , the imposition of administrative sanctions . in particular , in accordance with regulation no 883 / 2013 and regulation no 2185 / 96 the european anti - fraud office may carry out administrative investigations , including on - the - spot checks and inspections , with a view to establishing whether there has been fraud , corruption or any other illegal activity affecting the financial interests of the union . in accordance with regulation 2017 / 1939 , the european public prosecutor’s office may investigate and prosecute fraud and other criminal offences affecting the financial interests of the union as provided for in directive 2017 / 1371 of the european parliament and of the council24 . in accordance with the financial regulation , any person or entity receiving union funds is to fully cooperate in the protection of the union’s financial interests , to grant the necessary rights and access to the commission , olaf , the eppo and the european court of auditors and to ensure that any third parties involved in the implementation of union funds grant equivalent rights . __________________ 20 regulation no 883 / 2013 of the european parliament and of the council of 11 september 2013 concerning investigations conducted by the european anti - fraud office and repealing regulation no 1073 / 1999 of the european parliament and of the council and council regulation no 1074 / 1999 , no 2988 / 95 of 18 december 1995 on the protection of the european communities financial interests . 22 council regulation no 2185 / 96 of 11 november 1996 concerning on - the - spot checks and inspections carried out by the commission in order to protect the european communities’ financial interests against fraud and other irregularities . 23 council regulation 2017 / 1939 of 12 october 2017 implementing enhanced cooperation on the establishment of the european public prosecutor’s office . 24 directive 2017 / 1371 of the european parliament and of the council of 5 july 2017 on the fight against fraud to the union’s financial interests by means of criminal law . ### the types of financing and the methods of implementation under this regulation should be chosen on the basis of their ability to achieve the specific objectives of the actions and to deliver results , taking into account , in particular , the costs of controls , the administrative burden , and the expected risk of non - compliance . this should include consideration of the use of lump sums , flat rates , unit costs , as well as financing not linked to costs as referred to in article 125 of the financial regulation . in order to facilitate participation to the programme , including by small organizations , assistance should be ensured and any unnecessary administrative burden eliminated . where appropriate , due consideration should be given to the possibility of a two - stage evaluation procedure and to the option of cascading grants and multiannual operating grants . as for co - funding rates , they should take into account the type and size of organizations for whom the programme calls are intended . in accordance with the financial regulation , regulation no 883 / 2013 of the european parliament and of the council20 council regulation no 2988 / 9521 council regulation no 2185 / 9622 and council regulation 2017 / 193923 the financial interests of the union are to be protected through proportionate measures , including the prevention , detection , correction and investigation of irregularities and fraud , the recovery of funds lost , wrongly paid or incorrectly used and , where appropriate , the imposition of administrative sanctions . in particular , in accordance with regulation no 883 / 2013 and regulation no 2185 / 96 the european anti - fraud office may carry out administrative investigations , including on - the - spot checks and inspections , with a view to establishing whether there has been fraud , corruption or any other illegal activity affecting the financial interests of the union . in accordance with regulation 2017 / 1939 , the european public prosecutor’s office may investigate and prosecute fraud and other criminal offences affecting the financial interests of the union as provided for in directive 2017 / 1371 of the european parliament and of the council24 . in accordance with the financial regulation , any person or entity receiving union funds is to fully cooperate in the protection of the union’s financial interests , to grant the necessary rights and access to the commission , olaf , the eppo and the european court of auditors and to ensure that any third parties involved in the implementation of union funds grant equivalent rights . __________________ 20 regulation no 883 / 2013 of the european parliament and of the council of 11 september 2013 concerning investigations conducted by the european anti - fraud office and repealing regulation no 1073 / 1999 of the european parliament and of the council and council regulation no 1074 / 1999 , no 2988 / 95 of 18 december 1995 on the protection of the european communities financial interests . 22 council regulation no 2185 / 96 of 11 november 1996 concerning on - the - spot checks and inspections carried out by the commission in order to protect the european communities’ financial interests against fraud and other irregularities . 23 council regulation 2017 / 1939 of 12 october 2017 implementing enhanced cooperation on the establishment of the european public prosecutor’s office . 24 directive 2017 / 1371 of the european parliament and of the council of 5 july 2017 on the fight against fraud to the union’s financial interests by means of criminal law .


### preventing and combating inequalities and discrimination on grounds of sex , racial or ethnic origin , religion or belief , disability , age or sexual orientation , and supporting comprehensive policies to promote gender equality and anti - discrimination and their mainstreaming as well policies to combat racism and all forms of intolerance ; ### preventing and combating inequalities and any kind of discrimination on grounds of sex , racial , social or ethnic origin , religion or belief , disability , age , sexual orientation , sex characteristics , gender identity or any other grounds , and supporting comprehensive policies to promote gender equality , social inclusion and anti - discrimination and their mainstreaming as well policies to combat racism and all forms of intolerance both online and offline ;


### increasing citizens ' understanding of the union , its history , cultural heritage and diversity ; ### increasing citizens ' understanding of the union , its history , cultural heritage , core values and diversity ;


### promoting exchange and cooperation between citizens of different countries ; to promote citizens’ civic and democratic participation allowing citizens and representative associations to make known and publicly exchange their views in all areas of union action ; ### promoting exchange and cooperation between citizens of different national and cultural backgrounds ; to promote citizens’ civic and democratic participation allowing citizens and representative associations to make known and publicly exchange their views in all areas of union action and to foster solidarity ;


### the commission shall implement information and communication actions relating to the programme , and its actions and results . financial resources allocated to the programme shall also contribute to the corporate communication of the political priorities of the union , as far as they are related to the objectives referred to in article 2 . ### the commission shall implement information and communication actions relating to the programme , and its actions and results .


### gender - based violence and violence against children and young people constitute a serious violation of fundamental rights . violence persists throughout the union , in all social and economic contexts , and has serious repercussions on victims’ physical and psychological health and on society as a whole . children , young people and women are particularly vulnerable to violence , in particular in close relationships . action should be taken to promote the rights of the child and to contribute to the protection of children from harm and violence , which pose a danger to their physical and mental health and constitute a breach of their rights to development , protection and dignity . combating all forms of violence , promoting prevention and protecting and supporting victims are priorities of the union which help fulfil individuals’ fundamental rights and contribute to equality between women and men . those priorities should be supported by the programme . ### gender - based violence and violence against children and young people constitute a serious violation of fundamental rights . violence persists throughout the union , in all social and economic contexts , and has serious repercussions on victims’ physical and psychological health and on society as a whole . children , young people and women are particularly vulnerable to violence , in particular in close relationships . action should be taken to promote the rights of the child and young people and to contribute to the protection of children and young people from harm and violence , which pose a danger to their physical and mental health and constitute a breach of their rights to development , protection and dignity . combating all forms of violence , promoting prevention and protecting and supporting victims are priorities of the union which help fulfil individuals’ fundamental rights and contribute to equality between women and men . those priorities should be supported by the programme .


### article 24 tfeu obliges the european parliament and the council to adopt provisions for the procedures and conditions required for a citizen ' s initiative within the meaning of article 11 of the treaty on european union . this has been done by adopting regulation [ no 211 / 2011 of the european parliament and of the council14 ] . the programme should support the financing of technical and organisational support to implement regulation [ no 211 / 2011 ] , thereby underpinning the exercise by citizens of the right to launch and support european citizens’ initiatives . __________________ 14 regulation no 211 / 2011 of the european parliament and of the council of 16 february 2011 on the citizens’ initiative . ### the european citizens ' initiative is the first supranational instrument of participative democracy , creating a direct link between the european citizens and eu institutions . article 24 tfeu obliges the european parliament and the council to adopt provisions for the procedures and conditions required for a citizen ' s initiative within the meaning of article 11 of the treaty on european union . this has been done by adopting regulation [ no 211 / 2011 of the european parliament and of the council14 ] . the programme should support the financing of technical and organisational support to implement regulation [ no 211 / 2011 ] , thereby underpinning the exercise by citizens of the right to launch and support european citizens’ initiatives . __________________ 14 regulation no 211 / 2011 of the european parliament and of the council of 16 february 2011 on the citizens’ initiative .


### preventing and combating inequalities and discrimination on grounds of sex , racial or ethnic origin , religion or belief , disability , age or sexual orientation , and supporting comprehensive policies to promote gender equality and anti - discrimination and their mainstreaming as well policies to combat racism and all forms of intolerance ; ### preventing and combating inequalities and discrimination on grounds of sex , racial or ethnic origin , religion or belief , disability , age or sexual orientation or any other grounds , and supporting comprehensive policies to promote gender equality and anti - discrimination and their mainstreaming as well policies to combat racism and all forms of intolerance ;


### promoting exchange and cooperation between citizens of different countries ; to promote citizens’ civic and democratic participation allowing citizens and representative associations to make known and publicly exchange their views in all areas of union action ; ### promoting exchange and cooperation between citizens of different countries ; to promote citizens’ civic and democratic participation allowing citizens and representative associations to make known and publicly exchange their views in all areas of union action , so as to increase the understanding of a pluralistic and participatory democracy , the rule of law and fundamental rights ;


### the financial envelope for the implementation of the programme is set at eur 222 800 000 in current prices . ; ### the financial envelope for the implementation of the programme is set at eur 222 800 000 in current prices , of which eur 80 000 000 shall be provided from the flexibility instrument under council regulation no 1311 / 2013* . ; __________________ * council regulation no 1311 / 2013 of 2 december 2013 laying down the multiannual financial framework for the years 2014 - 2020 .


### the commission shall provide the european parliament and the council with an annual monitoring report on the implementation of the programme . that report shall include information on : ### article 16 , paragraph 2 is replaced by the following : ' 2 . from 2018 until and including 2021 the commission shall provide the european parliament and the council with an annual monitoring report on the implementation of the programme . that report shall include information on : '


### research projects have demonstrated that consumer confidence is crucial in the market for organic food . in the long run , rules that are not trustworthy can jeopardise public confidence and lead to market failure . therefore the sustainable development of organic production in the union should be based on sound production rules which are harmonised at union level . in addition , those production rules should meet operators ' and consumers ' expectations regarding the quality of organic products and the compliance with the principles and rules laid down in this regulation . ### research projects have demonstrated that consumer confidence is crucial in the market for organic food . in the long run , rules that are not trustworthy can jeopardise public confidence and lead to market failure . therefore the sustainable development of organic production in the union should be based on sound and transparent production rules which are harmonised at union level . in addition , those production rules should meet operators ' and consumers ' expectations regarding the safety and quality of organic products and the compliance with the principles and rules laid down in this regulation .


### as a matter of principle , the general production rules of this regulation should include a prohibition on the use of ionising radiation and genetically modified organisms and products produced from or by gmos . since consumers are more and more concerned about environmental impacts of food processing and transportation , organic operators other than farmers and operators producing seaweed or aquaculture animals should be required to manage their environmental performance according to a harmonised system . with the objective of minimising the regulatory burden of micro - enterprises as defined in commission recommendation 2003 / 361 / ec27 involved in organic production , it is appropriate to exempt them from this requirement . in order to ensure the correct application of the general production rules , the power to adopt certain acts should be delegated to the commission in respect of establishing the criteria to which the environmental management system is to correspond . __________________ 27 commission recommendation 2003 / 361 / ec of 6 may 2003 concerning the definition of micro , small and medium - sized enterprises . ### as a matter of principle , the general production rules of this regulation should include a prohibition on the use of ionising radiation and genetically modified organisms and products produced from or by gmos and animal cloning . since consumers are more and more concerned about environmental impacts of food processing and transportation , organic operators other than farmers and operators producing seaweed or aquaculture animals should be required to manage their environmental performance according to a harmonised system . with the objective of minimising the regulatory burden of micro - enterprises as defined in commission recommendation 2003 / 361 / ec27 involved in organic production , it is appropriate to exempt them from this requirement in order to ensure the correct application of the general production rules , the power to adopt certain acts should be delegated to the commission in respect of establishing the criteria to which the environmental management system is to correspond . __________________ 27 commission recommendation 2003 / 361 / ec of 6 may 2003 concerning the definition of micro , small and medium - sized enterprises .


### as a matter of principle , the general production rules of this regulation should include a prohibition on the use of ionising radiation and genetically modified organisms and products produced from or by gmos . since consumers are more and more concerned about environmental impacts of food processing and transportation , organic operators other than farmers and operators producing seaweed or aquaculture animals should be required to manage their environmental performance according to a harmonised system . with the objective of minimising the regulatory burden of micro - enterprises as defined in commission recommendation 2003 / 361 / ec27 involved in organic production , it is appropriate to exempt them from this requirement . in order to ensure the correct application of the general production rules , the power to adopt certain acts should be delegated to the commission in respect of establishing the criteria to which the environmental management system is to correspond . __________________ 27 commission recommendation 2003 / 361 / ec of 6 may 2003 concerning the definition of micro , small and medium - sized enterprises . ### as a matter of principle , the general production rules of this regulation should include a prohibition on the use of ionising radiation , genetically modified organisms and products produced from or by gmos , animal cloning including products and descendants derived from it , and artificially induced polyploidy in animals . since consumers are more and more concerned about environmental impacts of food processing and transportation , organic operators other than farmers and operators producing seaweed or aquaculture animals should be required to manage their environmental performance according to a harmonised system . with the objective of minimising the regulatory burden of micro - enterprises as defined in commission recommendation 2003 / 361 / ec27 involved in organic production , it is appropriate to exempt them from this requirement . in order to ensure the correct application of the general production rules , the power to adopt certain acts should be delegated to the commission in respect of establishing the criteria to which the environmental management system is to correspond . __________________ commission recommendation 2003 / 361 / ec of 6 may 2003 concerning the definition of micro , small and medium - sized enterprises .


### mutilations which lead to stress , harm , disease or suffering of animals should be prohibited . ### mutilations which lead to stress , harm , disease or suffering of animals should be prohibited . an exception for dehorning should be maintained in cases where it can be justified by animal welfare and work safety concerns .


### ‘ control authority’ means control authority for organic production and labelling of organic products as defined in point 39 of article 2 of regulation no xxx / xxxx [ official controls regulation ] ; ### ‘ control authority’ means control authority for organic production and labelling of organic products as defined in point 39 of article 2 of regulation no xxx / xxxx [ official controls regulation ] to which a competent authority has , wholly or in part , transferred its responsibility for checking and certifying organic production in accordance with this regulation or , where applicable , an equivalent authority performing its activities in a third country ;


### ‘ control body’ means a delegated body as defined in point 38 of article 2 of regulation no xxx / xxxx [ official controls regulation ] , as well as a body recognised by the commission or by a third country recognised by the commission to carry out controls in third countries for the import of organic products into the union ; ### ‘ control body’ means a delegated body as defined in point 38 of article 2 of regulation no xxx / xxxx [ official controls regulation ] that checks and certifies organic production in accordance with this regulation , as well as an equivalent body recognised by the commission or by a third country recognised by the commission to carry out controls and certification in third countries for the import of organic products into the union ;


### in the framework of agricultural activities and aquaculture , organic production shall in particular be based on the following specific principles : ### organic production shall be based on the following specific principles :


### observance of a high level of animal welfare respecting species - specific needs ; ### observance of a high level of animal welfare respecting species - specific needs shall take place at all stages of life , including transport and slaughter ;


### feeding of livestock with organic feed composed of agricultural ingredients from organic production and of natural non - agricultural substances ; ### feeding of livestock with organic feed composed of agricultural ingredients from organic production and of natural non - agricultural substances that meet the nutritional needs of animals . where it is not possible to use natural products to fulfil nutritional needs , limited exemptions pursuant to article 19 may be used under well - defined conditions ;


### exclusion of genetic engineering , animal cloning , artificially induced polyploidy and ionising radiation from the whole organic food chain ; ### exclusion of genetic engineering , animal cloning , artificially induced polyploidy in animals and ionising radiation from the whole organic food chain ;


### gmos and products produced from or by gmos shall not be used in food or feed or as food , feed , processing aids , plant protection products , fertilisers , soil conditioners , plant reproductive material , micro - organisms and animals in organic production . ### gmos and products produced from or by gmos shall not be used in food or feed or as food , feed , processing aids , plant protection products , fertilisers , soil conditioners , plant reproductive material , including seeds , micro - organisms and animals in organic production .


### in order to allow organic production to continue or recommence in the event of catastrophic circumstances and subject to the principles laid down in chapter ii , the commission shall be empowered to adopt delegated acts in accordance with article 36 providing for the criteria to qualify such situations as catastrophic and laying down specific rules on how to deal with them , on monitoring and on reporting requirements . ### the commission may , in accordance with the procedure referred to in article 37 , and subject to the objectives and principles laid down in title ii and the provisions of paragraph 2 of this article , provide for the granting of exceptions from the production rules laid down in chapter iii . exceptions as referred to in paragraph 1 shall be kept to a minimum and , where appropriate , limited in time and may only be provided for in the following cases : where they are necessary in order to ensure that organic production can be initiated or maintained on holdings confronted with climatic , geographical or structural constraints ; b ) where they are necessary in order to ensure access to feed , seed and vegetative propagating material , live animals and other farm inputs , where such inputs are not available on the market in organic form ; c ) where they are necessary in order to ensure access to ingredients of agricultural origin , where such ingredients are not available on the market in organic form ; d ) where they are necessary in order to solve specific problems relating to the management of organic livestock ; e ) where they are necessary with regard to the use of specific products and substances in the processing referred to in point 2 . 1 . b of annex ii , part iv , in order to ensure production of well - established food products in organic form ; f ) where temporary measures are necessary in order to allow organic production to continue or recommence in the case of catastrophic circumstances ; g ) where it is necessary to use food additives and other substances as set out in point 2 . 1 . b of annex ii , part iv , or feed additives and other substances as set out in article 19 and such substances are not available on the market other than produced by gmos ; h ) where the use of food additives and other substances as set out in point 2 . 1 . b of annex ii , part iv , or feed additives as set out in article 19 is required on the basis of union law or national law . the commission may in accordance with the procedure referred to in article 37 lay down specific conditions for the application of exceptions provided for under paragraph 1 .


### organic certification ### organic control and certification


### operators and groups of operators that have notified their activity in accordance with article&#160 ; 24 and comply with this regulation shall be entitled to be provided with an organic certificate . the organic certificate , issued in electronic form wherever possible , shall at least allow the identification of the operator or group of operators , the type or range of products covered by the certificate and its period of validity . ### operators and groups of operators that have notified their activity in accordance with article&#160 ; 24b and comply with this regulation shall be entitled to be provided with an organic certificate . the organic certificate , issued in electronic form wherever possible , shall at least allow the identification of the operator or group of operators , the type or range of products covered by the certificate and its period of validity .


### 4 . 1 . for the production of plants and plant products only organically produced plant reproductive material shall be used . to this end , the plant intended for plant reproductive material production and , where relevant , the mother plant shall have been produced in accordance with this regulation for at least one generation , or , in the case of perennial crops , for at least one generation during two growing seasons . ### 4 . 1 . for the production of products other than seed and vegetative propagating material only organically produced seed and propagating material shall be used . to this end , the plant intended for plant reproductive material production and , where relevant , the mother plant shall have been produced in accordance with this regulation for at least one generation , or , in the case of perennial crops , for at least one generation during two growing seasons .


### growth promoters and synthetic amino - acids shall not be used ; ### growth promoters shall not be used and chemically synthesised products or substances shall be strictly limited to cases where these are needed as a feed additive to ensure the health and well - being of animals according to article 19 of this regulation ;


### 7 . 2 . husbandry practices , including stocking densities and housing conditions shall ensure that the developmental , physiological and ethological needs of animals are met . ### 7 . 2 . husbandry practices , including stocking densities and housing conditions shall ensure that the developmental , physiological and ethological needs of animals are met during the animals ' whole life .


### 7 . 3 . the livestock shall have permanent access to open air areas , preferably pasture , whenever weather conditions and the state of the ground allow this unless restrictions and obligations related to the protection of human and animal health are imposed on the basis of union legislation . ### 7 . 3 . the livestock shall have permanent access to open air areas , preferably pasture for herbivores , whenever weather conditions and the state of the ground allow this , unless restrictions and obligations related to the protection of human and animal health are imposed on the basis of union legislation .


### 7 . 8 . any suffering shall be kept to a minimum during the entire life of the animal , including at the time of slaughter . ### 7 . 8 . any avoidable suffering shall be prevented during the entire life of the animal , including at the time of slaughter .


### 7 . 10 . any suffering to the animals shall be reduced to a minimum by applying adequate anaesthesia and / or analgesia and by carrying out the operation only at the most appropriate age by qualified personnel . ### 7 . 10 . any suffering to the animals shall be prevented by applying adequate anaesthesia and / or analgesia and by carrying out the operation only at the most appropriate age by qualified personnel .


### 7 . 12 . loading and unloading of animals shall be carried out without the use of any type of electrical stimulation to coerce the animals . the use of allopathic tranquillisers , prior to or during transport , shall be prohibited . ### 7 . 12 . loading and unloading of animals shall be carried out without the use of any type of electrical stimulation to coerce the animals , except in exceptional circumstances and according to the provisions of annex iii article 1 . 9 . of regulation no 1099 / 20091a mixing of unknown animals during transport or lairage and unnecessary overnight lairage shall be prevented . social animals shall be kept in groups and shall be able to move and turn around in the pens . the use of allopathic tranquillisers , prior to or during transport , shall be prohibited . __________________________ 1a council regulation no 1099 / 2009 of 24 september 2009 on the protection of animals at the time of killing


### poultry shall either be reared until they reach a minimum age or else shall come from slow - growing poultry strains as defined by the competent authority . where slow - growing poultry strains are not used by the farmer the minimum age at slaughter shall be as follows : ### poultry shall either be reared until they reach a minimum age or else shall come from slow - growing poultry strains as defined by the commission . where slow - growing poultry strains are not used by the farmer , the minimum age at slaughter shall be as follows :


### – algae , including seaweed ; ### – algae , including seaweed and lithothamnium ;


### the united kingdom ' s withdrawal from the union will have effects on the relations of the united kingdom and the union with third parties , in particular in the context of the world trade organization of which both are original members . ### the united kingdom ' s withdrawal from the union will have effects on the relations of the united kingdom and the union with third parties , in particular in the context of the world trade organization of which both are original members . as this process will be on - going at the same time as the mff negotiations , and taking into account the share dedicated to the agricultural sector in the mff , this could expose said sector to a great extent , and as such a certain degree of caution will be required during the course of these negotiation .


### however , given the time limits imposed on this process by the negotiations on the united kingdom’s withdrawal from the union , it is possible that agreements may not be concluded with all wto members concerned in relation to all of the tariff rate quotas on the date union ' s wto schedule of concessions and commitments on trade in goods cease to apply to the united kingdom . in view of the need to ensure legal certainty and the continuous smooth operation of imports under the tariff rate quotas to the union and the united kingdom it is necessary for the union to be able to proceed unilaterally to the apportionment of the tariff rate quotas . the methodology used should be in line with the requirements of article xxviii of the gatt 1994 . ### however , given the time limits imposed on this process by the negotiations on the united kingdom’s withdrawal from the union and the as yet unclear outcome of the negotiations , it is possible that agreements may not be concluded with all wto members concerned in relation to all of the tariff rate quotas on the date union ' s wto schedule of concessions and commitments on trade in goods cease to apply to the united kingdom . in view of the need to ensure legal certainty , in particular the protection of consumers and the wellbeing of farmers , and the continuous smooth operation of imports under the tariff rate quotas to the union and the united kingdom it is necessary for the union to be able to proceed unilaterally to the apportionment of the tariff rate quotas . the methodology used should be in line with the requirements of article xxviii of the gatt 1994 .


### for the agricultural trqs concerned , articles 184 - 188 of regulation no 1308 / 20131provides the necessary legal basis for administration of the trqs once apportioned by the present regulation . for the trqs covering fisheries , industrial and certain processed agricultural products , administration is carried out pursuant to regulation no 32 / 20002 . the trq quantities concerned are set out in annex i to that regulation , which should therefore be replaced by the quantities set out in part b of the annex to the present regulation . _________________ 1 regulation no 1308 / 2013 of the european parliament and of the council of 17 december 2013 establishing a common organisation of the markets in agricultural products and repealing council regulations no 922 / 72 , no 234 / 79 , no 1037 / 2001 and no 1234 / 2007 2 council regulation no 32 / 2000 of 17 december 1999 opening and providing for the administration of community tariff quotas bound in gatt and certain other community tariff quotas and establishing detailed rules for adjusting the quotas , and repealing council regulation no 1808 / 95 . ### for the agricultural trqs concerned , articles 184 - 188 of regulation no 1308 / 20131 provide the necessary legal basis for administration of the trqs once apportioned by the present regulation . this administration must therefore be carried out in accordance with the european agricultural model , based on the multi - functionality of agricultural activity , with emphasis also on explicit recognition of non - commercial considerations and catering for the needs of the public in the field of food safety , environmental protection , food quality and animal welfare . for the trqs covering fisheries , industrial and certain processed agricultural products , administration is carried out pursuant to regulation no 32 / 20002 . the trq quantities concerned are set out in annex i to that regulation , which should therefore be replaced by the quantities set out in part b of the annex to the present regulation . _________________ 1 regulation no 1308 / 2013 of the european parliament and of the council of 17 december 2013 establishing a common organisation of the markets in agricultural products and repealing council regulations no 922 / 72 , no 234 / 79 , no 1037 / 2001 and no 1234 / 2007 . 2 council regulation no 32 / 2000 of 17 december 1999 opening and providing for the administration of community tariff quotas bound in gatt and certain other community tariff quotas and establishing detailed rules for adjusting the quotas , and repealing council regulation no 1808 / 95 .


### for the agricultural trqs concerned , articles 184 - 188 of regulation no 1308 / 20131 provides the necessary legal basis for administration of the trqs once apportioned by the present regulation . for the trqs covering fisheries , industrial and certain processed agricultural products , administration is carried out pursuant to regulation no 32 / 20002 . the trq quantities concerned are set out in annex i to that regulation , which should therefore be replaced by the quantities set out in part b of the annex to the present regulation . _________________ 1 regulation no 1308 / 2013 of the european parliament and of the council of 17 december 2013 establishing a common organisation of the markets in agricultural products and repealing council regulations no 922 / 72 , no 234 / 79 , no 1037 / 2001 and no 1234 / 2007 2 council regulation no 32 / 2000 of 17 december 1999 opening and providing for the administration of community tariff quotas bound in gatt and certain other community tariff quotas and establishing detailed rules for adjusting the quotas , and repealing council regulation no 1808 / 95 . ### for the agricultural trqs concerned , articles 184 - 188 of regulation no 1308 / 20131 provides the necessary legal basis for administration of the trqs once apportioned by the present regulation . for the trqs covering fisheries , industrial and certain processed agricultural products , administration is carried out pursuant to regulation no 32 / 20002 . the trq quantities concerned are set out in annex i to that regulation , which should therefore be replaced by the quantities set out in part b of the annex to the present regulation . there is however a need to take into account each parties specific agricultural sensitivities , and as such special consideration should be paid to these , while not furthering the degree of market access of either . _________________ 1 regulation no 1308 / 2013 of the european parliament and of the council of 17 december 2013 establishing a common organisation of the markets in agricultural products and repealing council regulations no 922 / 72 , no 234 / 79 , no 1037 / 2001 and no 1234 / 2007 2 council regulation no 32 / 2000 of 17 december 1999 opening and providing for the administration of community tariff quotas bound in gatt and certain other community tariff quotas and establishing detailed rules for adjusting the quotas , and repealing council regulation no 1808 / 95 .


### the commission is empowered to adopt delegated acts in accordance with article 4 to amend the annex to this regulation and annex i to regulation no 32 / 2000 in order to take account of the following : ### the commission is empowered to adopt delegated acts in accordance with article 4 to amend the annex to this regulation and annex i to regulation no 32 / 2000 , while taking care not to extend the current level of market access , in order to take account of the following :


### the power to adopt delegated acts referred to in article 3 shall be conferred on the commission for a period of [ 4 ] years from the date of entry into force of this regulation . ### the power to adopt delegated acts referred to in article 3 shall be conferred on the commission for a period of [ 4 ] years from the date of entry into force of this regulation , or until such time as the process is finalized .


### the power to adopt delegated acts referred to in article 3 shall be conferred on the commission for a period of [ 4 ] years from the date of entry into force of this regulation . ### the power to adopt delegated acts referred to in article 3 shall be conferred on the commission for a period of [ 2 ] years from the date of entry into force of this regulation .


### a delegated act adopted pursuant to article 3 shall enter into force only if no objection has been expressed either by the european parliament or by the council within a period of [ two months ] of notification of that act to the european parliament and the council or if , before the expiry of that period , the european parliament and the council have both informed the commission that they will not object . that period shall be extended by [ one month ] at the initiative of the european parliament or of the council . ### a delegated act adopted pursuant to article 3 shall enter into force only if no objection has been expressed either by the european parliament or by the council within a period of [ two months ] of notification of that act to the european parliament and the council or if , before the expiry of that period , the european parliament and the council have both informed the commission that they will not object . that period shall be extended by [ one month / or as requested but no more than 40 working days ] at the initiative of the european parliament or of the council .


### increased digitisation and connectivity lead to increased cybersecurity risks , thus making society at large more vulnerable to cyber threats and exacerbating dangers faced by individuals , including vulnerable persons such as children . in order to mitigate this risk to society , all necessary actions need to be taken to improve cybersecurity in the eu to better protect network and information systems , telecommunication networks , digital products , services and devices used by citizens , governments and business – from smes to operators of critical infrastructures – from cyber threats . ### increased digitisation and connectivity lead to increased cybersecurity risks , thus making society at large more vulnerable to cyber threats and exacerbating dangers faced by individuals , including vulnerable persons such as children . in order to mitigate this risk to society , all necessary actions need to be taken to improve security against cyber - attacks in the eu to better protect network and information systems , telecommunication networks , digital products , services and devices used by citizens , governments and business – from smes to operators of critical infrastructures – from cyber threats .


### cyber - attacks are on the increase and a connected economy and society that is more vulnerable to cyber threats and attacks requires stronger defences . however , while cyber - attacks are often cross - border , policy responses by cybersecurity authorities and law enforcement competences are predominantly national . large - scale cyber incidents could disrupt the provision of essential services across the eu . this requires effective eu level response and crisis management , building upon dedicated policies and wider instruments for european solidarity and mutual assistance . moreover , a regular assessment of the state of cybersecurity and resilience in the union , based on reliable union data , as well as systematic forecast of future developments , challenges and threats , both at union and global level , is therefore important for policy makers , industry and users ### cyber - attacks are on the increase and a connected economy and society that is more vulnerable to cyber threats and attacks requires stronger and more secure defences . however , while cyber - attacks are often cross - border , policy responses by it security authorities and law enforcement competences are predominantly national . large - scale cyber incidents could disrupt the provision of essential services across the eu . this requires effective eu level response and crisis management , building upon dedicated policies and wider instruments for european solidarity and mutual assistance . moreover , a regular assessment of the state of it security and resilience in the union , based on reliable union data , as well as systematic forecast of future developments , challenges and threats , both at union and global level , is therefore important for policy makers , industry and users .


### in light of the increased cybersecurity challenges faced by the union , there is a need for a comprehensive set of measures that would build on previous union action and foster mutually reinforcing objectives . these include the need to further increase capabilities and preparedness of member states and businesses , as well as to improve cooperation and coordination across member states and eu institutions , agencies and bodies . furthermore , given the borderless nature of cyber threats , there is a need to increase capabilities at union level that could complement the action of member states , in particular in the case of large scale cross - border cyber incidents and crises . additional efforts are also needed to increase awareness of citizens and businesses on cybersecurity issues . moreover , the trust in the digital single market should be further improved by offering transparent information on the level of security of ict products and services . this can be facilitated by eu - wide certification providing common cybersecurity requirements and evaluation criteria across national markets and sectors . ### in light of the increased cybersecurity challenges faced by the union , there is a need for a comprehensive set of measures that would build on previous union action and foster mutually reinforcing objectives . these include the need to further increase capabilities and preparedness of member states and businesses , as well as to improve cooperation , coordination and information sharing across member states and eu institutions , agencies and bodies . furthermore , given the borderless nature of cyber threats , there is a need to increase capabilities at union level that could complement the action of member states , in particular in the case of large scale cross - border cyber incidents and crises . additional efforts are also needed to increase awareness of citizens and businesses on cybersecurity issues , also with regard to an awareness of the increased relevance of information - sharing rather than concealment as a main deterrent to cyber attacks . moreover , the trust in the digital single market should be further improved by offering transparent information on the level of security of ict products and services . this can be facilitated by eu - wide certification providing common cybersecurity requirements and evaluation criteria across national markets and sectors .


### in light of the increased cybersecurity challenges faced by the union , there is a need for a comprehensive set of measures that would build on previous union action and foster mutually reinforcing objectives . these include the need to further increase capabilities and preparedness of member states and businesses , as well as to improve cooperation and coordination across member states and eu institutions , agencies and bodies . furthermore , given the borderless nature of cyber threats , there is a need to increase capabilities at union level that could complement the action of member states , in particular in the case of large scale cross - border cyber incidents and crises . additional efforts are also needed to increase awareness of citizens and businesses on cybersecurity issues . moreover , the trust in the digital single market should be further improved by offering transparent information on the level of security of ict products and services . this can be facilitated by eu - wide certification providing common cybersecurity requirements and evaluation criteria across national markets and sectors . ### in light of the increased cybersecurity challenges faced by the union , there is a need for a comprehensive set of measures that would build on previous union action and foster mutually reinforcing objectives . these include the need to further increase capabilities and preparedness of member states and businesses , as well as to improve cooperation and coordination across member states and eu institutions , agencies and bodies . furthermore , given the borderless nature of cyber threats , there is a need to increase capabilities at union level that could complement the action of member states , in particular in the case of large scale cross - border cyber incidents and crises . additional efforts are also needed to increase awareness of citizens and businesses on cybersecurity issues . moreover , the trust in the digital single market should be further improved by offering transparent information on the level of security of ict products and services stressing that even a high level of cybersecurity certification cannot guarantee that an ict product or service is completely safe . this can be facilitated by eu - wide certification providing common cybersecurity requirements and evaluation criteria across national markets and sectors as well as promoting cyber literacy .


### it is recognised that , since the adoption of the 2013 eu cybersecurity strategy and the last revision of the agency ' s mandate , the overall policy context has changed significantly , also in relation to a more uncertain and less secure global environment . in this context and within the framework of the new union cybersecurity policy , it is necessary to review the mandate of enisa to define its role in the changed cybersecurity ecosystem and ensure it contributes effectively to the union ' s response to cybersecurity challenges emanating from this radically transformed threat landscape , for which , as recognised by the evaluation of the agency , the current mandate is not sufficient . ### it is recognised that , since the adoption of the 2013 eu cybersecurity strategy and the last revision of the agency ' s mandate , the overall policy context has changed significantly , also in relation to a more uncertain and less secure global environment . in this context and within the framework of the new union it security policy , it is necessary to review the mandate of enisa to define its role in the changed it security ecosystem and ensure it undertakes a leading role which will effectively improve the union ' s response to it security challenges emanating from this radically transformed threat landscape , for which , as recognised by the evaluation of the agency , the current mandate is not sufficient .


### given the increasing cybersecurity challenges the union is facing , the financial and human resources allocated to the agency should be increased to reflect its enhanced role and tasks , and its critical position in the ecosystem of organisations defending the european digital ecosystem . ### given the increasing cybersecurity challenges the union is facing , the financial and human resources allocated to the agency should be increased to reflect its enhanced role and tasks , and its critical position in the ecosystem of organisations defending the european digital ecosystem , allowing enisa to effectively carry out the tasks conferred on it by this regulation .


### the agency should develop and maintain a high level of expertise and operate as a point of reference establishing trust and confidence in the single market by virtue of its independence , the quality of the advice it delivers and the information it disseminates , the transparency of its procedures and methods of operation , and its diligence in carrying out its tasks . the agency should proactively contribute to national and union efforts while carrying out its tasks in full cooperation with the union institutions , bodies , offices and agencies and the member states . in addition , the agency should build on input from and cooperation with the private sector as well as other relevant stakeholders . a set of tasks should establish how the agency is to accomplish its objectives while allowing flexibility in its operations . ### the agency should develop and maintain a high level of expertise and operate as a point of reference establishing trust and confidence in the single market by virtue of its independence , the quality of the advice it delivers and the information it disseminates , the transparency of its procedures and methods of operation , and its diligence in carrying out its tasks . the agency should proactively contribute to national and union efforts while carrying out its tasks in full cooperation with the union institutions , bodies , offices and agencies and the member states . in addition , the agency should build on input from and cooperation with the private sector as well as other relevant stakeholders . a clear agenda and a set of tasks and objectives which the agency is to accomplish should be clearly defined while giving due consideration to the necessary flexibility of its operations . where possible , the highest degree of transparency and dissemination of information should be maintained .


### the agency should assist the commission by means of advice , opinions and analyses on all the union matters related to policy and law development , update and review in the area of cybersecurity , including critical infrastructure protection and cyber resilience . the agency should act as a reference point of advice and expertise for union sector - specific policy and law initiatives where matters related to cybersecurity are involved . ### the agency should assist the commission , on its own initiative and upon request , by means of advice , opinions and analyses on all the union matters related to policy and law development , update and review in the area of cybersecurity , including critical infrastructure protection and cyber resilience . the agency should act as a reference point of advice and expertise for union sector - specific policy and law initiatives where matters related to cybersecurity are involved . the agency should regularly provide parliament with updates , analysis and review in the area of cybersecurity and the evolution of its tasks .


### the agency should assist the member states and union institutions , bodies , offices and agencies in their efforts to build and enhance capabilities and preparedness to prevent , detect and respond to cybersecurity problems and incidents and in relation to the security of network and information systems . in particular , the agency should support the development and enhancement of national csirts , with a view of achieving a high common level of their maturity in the union . the agency should also assist with the development and update of union and member states strategies on the security of network and information systems , in particular on cybersecurity , promote their dissemination and track progress of their implementation . the agency should also offer trainings and training material to public bodies , and where appropriate ' train the trainers ' with a view to assisting member states in developing their own training capabilities . ### the agency should assist the member states and union institutions , bodies , offices and agencies in their efforts to build and enhance capabilities and preparedness to prevent , detect and respond to cybersecurity problems and incidents and in relation to the security of network and information systems . in particular , the agency should support the development and enhancement of national csirts , with a view of achieving a high common level of their maturity in the union . the agency should also assist with the development and update of union and member states strategies on the security of network and information systems , in particular on cybersecurity , promote their dissemination and track progress of their implementation . considering that human mistakes are one of the most pertinent risks to cyber security , the agency should also offer trainings and training material to public bodies , and to the maximum extent possible ' train the trainers ' with a view to assisting member states and union institutions and agencies in developing their own training capabilities .


### the agency should contribute to an eu level response in case of large - scale cross - border cybersecurity incidents and crises . this function should include gathering relevant information and acting as facilitator between the csirts network and the technical community as well as decision makers responsible for crisis management . furthermore , the agency could support the handling of incidents from a technical perspective by facilitating relevant technical exchange of solutions between member states and by providing input into public communications . the agency should support the process by testing modalities of such cooperation through yearly cybersecurity exercises . ### the agency should contribute to an eu level response in case of large - scale cross - border cybersecurity incidents and crises . this function should include convening member states ' authorities and assisting in the coordination of their response , gathering relevant information and acting as facilitator between the csirts network and the technical community as well as decision makers responsible for crisis management . furthermore , the agency could support the handling of incidents from a technical perspective by facilitating relevant technical exchange of solutions between member states and by providing input into public communications . the agency should support the process by testing modalities of such cooperation through yearly cybersecurity exercises .


### the agency should contribute to an eu level response in case of large - scale cross - border cybersecurity incidents and crises . this function should include gathering relevant information and acting as facilitator between the csirts network and the technical community as well as decision makers responsible for crisis management . furthermore , the agency could support the handling of incidents from a technical perspective by facilitating relevant technical exchange of solutions between member states and by providing input into public communications . the agency should support the process by testing modalities of such cooperation through yearly cybersecurity exercises . ### the agency should contribute to an eu level response in case of large - scale cross - border cybersecurity incidents and crises . this function should include gathering relevant information and acting as facilitator between the csirts network and the technical community as well as decision makers responsible for crisis management . furthermore , the agency could support the handling of incidents from a technical perspective , for example by facilitating relevant technical exchange of solutions between member states and by providing input into public communications . the agency should support the process by testing modalities of such cooperation through yearly cybersecurity exercises .


### in order to increase the resilience of the union , the agency should develop excellence on the subject of security of internet infrastructure and of the critical infrastructures , by providing advice , guidance and best practices . with a view to ensuring easier access to better structured information on cybersecurity risks and potential remedies , the agency should develop and maintain the ' information hub ' of the union , a one - stop - shop portal providing the public with information on cybersecurity deriving from the eu and national institutions , agencies and bodies . ### in order to increase the resilience of the union , the agency should develop excellence on the subject of security of internet infrastructure and of the critical infrastructures , by providing advice , guidance and best practices . with a view to ensuring easier access to better structured information on cybersecurity risks and potential remedies , the agency should develop and maintain the ' information hub ' of the union , a one - stop - shop portal providing the public with information on cybersecurity deriving from the eu and national institutions , agencies and bodies . facilitating access to better structured information on cybersecurity risks and potential remedies should help member states bolster their capacities and align their practices , hence increasing their overall resilience in the face of cyber - attacks .


### the agency should contribute towards raising the awareness of the public about risks related to cybersecurity and provide guidance on good practices for individual users aimed at citizens and organisations . the agency should also contribute to promote best practices and solutions at the level of individuals and organisations by collecting and analysing publicly available information regarding significant incidents , and by compiling reports with a view to providing guidance to businesses and citizens and improving the overall level of preparedness and resilience . the agency should furthermore organise , in cooperation with the member states and the union institutions , bodies , offices and agencies regular outreach and public education campaigns directed to end - users , aiming at promoting safer individual online behaviour and raising awareness of potential threats in cyberspace , including cybercrimes such as phishing attacks , botnets , financial and banking fraud , as well as promoting basic authentication and data protection advice . the agency should play a central role in accelerating end - user awareness on security of devices . ### the agency should contribute towards raising the awareness of the public about risks related to cybersecurity and provide guidance on good practices for individual users aimed at citizens , organisations and businesses . the agency should also contribute to promote best practices and solutions at the level of individuals , organisations and businesses by collecting and analysing publicly available information regarding significant incidents , and by compiling reports with a view to providing guidance to businesses and citizens and improving the overall level of preparedness and resilience . the agency should furthermore organise , in cooperation with the member states and the union institutions , bodies , offices and agencies regular outreach and public education campaigns directed to end - users , aiming at promoting safer individual online behaviour , digital literacy and raising awareness of potential threats in cyberspace , including cybercrimes such as phishing attacks , botnets , financial and banking fraud , as well as promoting basic authentication and data protection advice . the agency should play a central role in accelerating end - user awareness on security of devices . given that individual mistakes and unawareness of cyber risks constitutes a main factor of uncertainty in cyber security , the agency should be provided with adequate resources for exercising this function to the maximum degree possible .


### to ensure that it fully achieves its objectives , the agency should liaise with relevant institutions , agencies and bodies , including cert - eu , european cybercrime centre at europol , european defence agency , european agency for the operational management of large - scale it systems , european aviation safety agency and any other eu agency that is involved in cybersecurity . it should also liaise with authorities dealing with data protection in order to exchange know - how and best practices and provide advice on cybersecurity aspects that might have an impact on their work . representatives of national and union law enforcement and data protection authorities should be eligible to be represented in the agency’s permanent stakeholders group . in liaising with law enforcement bodies regarding network and information security aspects that might have an impact on their work , the agency should respect existing channels of information and established networks . ### to ensure that it fully achieves its objectives , the agency ought to liaise with relevant institutions , agencies and bodies , including cert - eu , european cybercrime centre at europol , european defence agency , european agency for the operational management of large - scale it systems , european aviation safety agency and any other eu agency that is involved in cybersecurity . it should also liaise with authorities dealing with data protection in order to exchange know - how , for training purposes and to exchange best practices , and provide advice on cybersecurity aspects that might have an impact on their work . representatives of national and union law enforcement and data protection authorities should be eligible to be represented in the agency’s permanent stakeholders group . in liaising with law enforcement bodies regarding network and information security aspects that might have an impact on their work , the agency should respect existing channels of information and established networks .


### the agency should take full account of the ongoing research , development and technological assessment activities , in particular those carried out by the various union research initiatives to advise the union institutions , bodies , offices and agencies and where relevant , the member states , at their request , on research needs in the area of network and information security , in particular cybersecurity . ### the agency should take full account of the ongoing research , development and technological assessment activities , in particular those carried out by the various union research initiatives to advise the union institutions , bodies , offices and agencies and where relevant , the member states , at their request , on research needs in the area of network and information security , in particular cybersecurity . the agency should be attributed an additional budget for research and development activities complementary to existing union research programmes .


### cybersecurity problems are global issues . there is a need for closer international cooperation to improve security standards , including the definition of common norms of behaviour , and information sharing , promoting swifter international collaboration in response to , as well as a common global approach to , network and information security issues . to that end , the agency should support further union involvement and cooperation with third countries and international organisations by providing , where appropriate , the necessary expertise and analysis to the relevant union institutions , bodies , offices and agencies . ### cybersecurity problems are global issues . there is a need for closer international cooperation to improve security standards , including the definition of common norms of behaviour and codes of conduct , use of international standards , and information sharing , promoting swifter international collaboration in response to , as well as a common global approach to , network and information security issues . to that end , the agency should support further union involvement and cooperation with third countries and international organisations by providing , where appropriate , the necessary expertise and analysis to the relevant union institutions , bodies , offices and agencies .


### in order to guarantee the full autonomy and independence of the agency and to enable it to perform additional and new tasks , including unforeseen emergency tasks , the agency should be granted a sufficient and autonomous budget whose revenue comes primarily from a contribution from the union and contributions from third countries participating in the agency’s work . the majority of the agency staff should be directly engaged in the operational implementation of the agency’s mandate . the host member state , or any other member state , should be allowed to make voluntary contributions to the revenue of the agency . the union’s budgetary procedure should remain applicable as far as any subsidies chargeable to the general budget of the union are concerned . moreover , the court of auditors should audit the agency’s accounts to ensure transparency and accountability . ### in order to guarantee the full autonomy and independence of the agency and to enable it to perform additional and new tasks , including unforeseen emergency tasks , the agency should be granted a sufficient and autonomous budget whose revenue comes primarily from a contribution from the union and contributions from third countries participating in the agency’s work . the majority of the agency staff should be directly engaged in the operational implementation of the agency’s mandate . the host member state , or any other member state , should be allowed to make voluntary contributions to the revenue of the agency . the union’s budgetary procedure should remain applicable as far as any subsidies chargeable to the general budget of the union are concerned . moreover , the court of auditors should audit the agency’s accounts to ensure transparency and accountability , and the efficiency of the expenditure .


### conformity assessment is the process demonstrating whether specified requirements relating to a product , process , service , system , person or body have been fulfilled . for the purposes of this regulation , certification should be considered as a type of conformity assessment regarding the cybersecurity features of a product , process , service , system , or a combination of those by an independent third party , other than the product manufacturer or service provider . certification cannot guarantee per se that certified ict products and services are cyber secure . it is rather a procedure and technical methodology to attest that ict products and services have been tested and that they comply with certain cybersecurity requirements laid down elsewhere , for example as specified in technical standards . ### conformity assessment is the process demonstrating whether specified requirements relating to a product , process , service , system , person or body have been fulfilled . for the purposes of this regulation , certification and , where permitted , self - assessment should be considered as a type of conformity assessment regarding the cybersecurity features of a product , process , service , system , or a combination of those . certification is undertaken by an independent third party , other than the product manufacturer or service provider . self - assessment may be undertaken by the product manufacturer or service provider , as foreseen in and according to the new legislative framework and specified in this regulation , where the likelihood of a cybersecurity incident occurring , or the likelihood of such an incident causing substantial harm to the user , society , or a part thereof , is not expected to be high . certification cannot guarantee per se that certified ict products and services are cyber secure . it is rather a procedure and technical methodology to attest that ict products and services have been tested and that they comply with certain cybersecurity requirements laid down elsewhere , for example as specified in technical standards .


### conformity assessment is the process demonstrating whether specified requirements relating to a product , process , service , system , person or body have been fulfilled . for the purposes of this regulation , certification should be considered as a type of conformity assessment regarding the cybersecurity features of a product , process , service , system , or a combination of those by an independent third party , other than the product manufacturer or service provider . certification cannot guarantee per se that certified ict products and services are cyber secure . it is rather a procedure and technical methodology to attest that ict products and services have been tested and that they comply with certain cybersecurity requirements laid down elsewhere , for example as specified in technical standards . ### conformity assessment is the process demonstrating whether specified requirements relating to a product , process , service , system , person or body have been fulfilled . for the purposes of this regulation , certification and self assessment should be considered as a type of conformity assessment regarding the cybersecurity features of a product , process , service , system , or a combination of those by an independent third party , other than the product manufacturer or service provider . self - assessment may be undertaken by smes for conformity with the lowest assurance level . certification cannot guarantee per se that certified ict products and services are cyber secure and this must be duly communicated to consumers and businesses . it is rather a procedure and technical methodology to attest that ict products and services have been tested and that they comply with certain cybersecurity requirements laid down elsewhere , for example as specified in technical standards .


### currently , the cybersecurity certification of ict products and services is used only to a limited extent . when it exists , it mostly occurs at member state level or in the framework of industry driven schemes . in this context , a certificate issued by one national it security authority is not in principle recognised by other member states . companies thus may have to certify their products and services in several member states where they operate , for example with a view to participating in national procurement procedures . moreover , while new schemes are emerging , there seems to be no coherent and holistic approach with regard to horizontal cybersecurity issues , for instance in the field of the internet of things . existing schemes present significant shortcomings and differences in terms of product coverage , levels of assurance , substantive criteria and actual utilisation . ### currently , the it security certification of ict products and services is used only to a limited extent . when it exists , it mostly occurs at member state level or in the framework of industry driven schemes . in this context , a certificate issued by one national it security authority is not in principle recognised by other member states . companies thus may have to certify their products and services in several member states where they operate , for example with a view to participating in national procurement procedures , and these procedures may entail additional costs for companies . moreover , while new schemes are emerging , there seems to be no coherent and holistic approach with regard to horizontal it security issues , for instance in the field of the internet of things . existing schemes present significant shortcomings and differences in terms of product coverage , levels of assurance , substantive criteria and actual utilisation . a case - by - case approach should ensure that services and products are subject to appropriate certification schemes . additionally , a risk - based approach is needed for effective identification and mitigation of risks and to avoid increased costs for manufacturers .


### the commission should be empowered to adopt european cybersecurity certification schemes concerning specific groups of ict products and services . these schemes should be implemented and supervised by national certification supervisory authorities and certificates issued within these schemes should be valid and recognised throughout the union . certification schemes operated by the industry or other private organisations should fall outside the scope of the regulation . however , the bodies operating such schemes may propose to the commission to consider such schemes as a basis for approving them as a european scheme . ### the commission , the european cybersecurity certification group and the stakeholer certification group should propose to enisa to prepare a european cybersecurity certification schemes concerning specific groups of ict products and services . these schemes should be implemented and supervised by national certification supervisory authorities and certificates issued within these schemes should be valid and recognised throughout the union . certification schemes operated by the industry or other private organisations should fall outside the scope of the regulation . however , the bodies operating such schemes may propose to the commission to consider such schemes as a basis for approving them as a european scheme .


### the commission should be empowered to request enisa to prepare candidate schemes for specific ict products or services . the commission , based on the candidate scheme proposed by enisa , should then be empowered to adopt the european cybersecurity certification scheme by means of implementing acts . taking account of the general purpose and security objectives identified in this regulation , european cybersecurity certification schemes adopted by the commission should specify a minimum set of elements concerning the subject - matter , the scope and functioning of the individual scheme . these should include among others the scope and object of the cybersecurity certification , including the categories of ict products and services covered , the detailed specification of the cybersecurity requirements , for example by reference to standards or technical specifications , the specific evaluation criteria and evaluation methods , as well as the intended level of assurance : basic , substantial and / or high . ### after the completion of an appropriate stakeholder consultation by the commission , enisa should be empowered to prepare candidate schemes for specific ict products or services . the commission , based on the candidate scheme proposed by enisa , should then be empowered to adopt the european cybersecurity certification scheme by means of delegated acts . taking account of the general purpose and security objectives identified in this regulation , european cybersecurity certification schemes adopted by the commission should specify a minimum set of elements concerning the subject - matter , the scope and functioning of the individual scheme . these should include among others the scope and object of the cybersecurity certification , including the categories of ict products and services covered , the detailed specification of the cybersecurity requirements , for example by reference to standards or technical specifications , the specific evaluation criteria and evaluation methods , as well as the intended level of assurance : basic , substantial and / or high .


### once a european cybersecurity certification scheme is adopted , manufacturers of ict products or providers of ict services should be able to submit an application for certification of their products or services to a conformity assessment body of their choice . conformity assessment bodies should be accredited by an accreditation body if they comply with certain specified requirements set out in this regulation . accreditation should be issued for a maximum of five years and may be renewed on the same conditions provided that the conformity assessment body meets the requirements . accreditation bodies should revoke an accreditation of a conformity assessment body where the conditions for the accreditation are not , or are no longer , met or where actions taken by a conformity assessment body infringe this regulation . ### once a european cybersecurity certification scheme is adopted , manufacturers of ict products or providers of ict services should be able to submit an application for certification of their products or services to a conformity assessment body of their choice . conformity assessment bodies should be accredited by an accreditation body if they comply with certain specified requirements set out in this regulation . accreditation should be issued for a maximum of five years and may be renewed on the same conditions provided that the conformity assessment body meets the requirements . accreditation bodies should revoke an accreditation of a conformity assessment body where the conditions for the accreditation are not , or are no longer , met or where actions taken by a conformity assessment body infringe this regulation . audits by the agency should be carried out to ensure an equivalent level of quality and diligence of conformity assessment bodies with a view to avoiding regulatory arbitrage . the results should be reported to the agency , the commission and parliament and should be made publicly available .


### once a european cybersecurity certification scheme is adopted , manufacturers of ict products or providers of ict services should be able to submit an application for certification of their products or services to a conformity assessment body of their choice . conformity assessment bodies should be accredited by an accreditation body if they comply with certain specified requirements set out in this regulation . accreditation should be issued for a maximum of five years and may be renewed on the same conditions provided that the conformity assessment body meets the requirements . accreditation bodies should revoke an accreditation of a conformity assessment body where the conditions for the accreditation are not , or are no longer , met or where actions taken by a conformity assessment body infringe this regulation . ### once a european cybersecurity certification scheme is adopted , manufacturers of ict products or providers of ict services should be able to submit an application for certification of their products or services to a conformity assessment body of their choice , anywhere in the union . conformity assessment bodies should be accredited by an accreditation body if they comply with certain specified requirements set out in this regulation . accreditation should be issued for a maximum of five years and may be renewed on the same conditions provided that the conformity assessment body meets the requirements . accreditation bodies should revoke an accreditation of a conformity assessment body where the conditions for the accreditation are not , or are no longer , met or where actions taken by a conformity assessment body infringe this regulation .


### it is necessary to require all member states to designate one cybersecurity certification supervisory authority to supervise compliance of conformity assessment bodies and of certificates issued by conformity assessment bodies established in their territory with the requirements of this regulation and of the relevant cybersecurity certification schemes . national certification supervisory authorities should handle complaints lodged by natural or legal persons in relation to certificates issued by conformity assessment bodies established in their territories , investigate to the extent appropriate the subject matter of the complaint and inform the complainant of the progress and the outcome of the investigation within a reasonable time period . moreover , they should cooperate with other national certification supervisory authorities or other public authority , including by sharing information on possible non - compliance of ict products and services with the requirements of this regulation or specific cybersecurity schemes . ### it is necessary to require all member states to designate one cybersecurity certification supervisory authority to supervise compliance of conformity assessment bodies and of certificates issued by conformity assessment bodies established in their territory with the requirements of this regulation and of the relevant cybersecurity certification schemes , and to ensure that the european cybersecurity certificates are recognised on their territory . national certification supervisory authorities should handle complaints lodged by natural or legal persons in relation to certificates issued by conformity assessment bodies established in their territories , or in relation to alleged failures to recognise certificates on their territory , investigate to the extent appropriate the subject matter of the complaint and inform the complainant of the progress and the outcome of the investigation within a reasonable time period . moreover , they should cooperate with other national certification supervisory authorities or other public authority , including by sharing information on possible non - compliance of ict products and services with the requirements of this regulation or specific cybersecurity schemes , or the non - recognition of european cybersecurity certificates .


### in order to specify further the criteria for the accreditation of conformity assessment bodies , the power to adopt acts in accordance with article 290 of the treaty on the functioning of the european union should be delegated to the commission . the commission should carry out appropriate consultations during its preparatory work , including at expert level . those consultations should be conducted in accordance with the principles laid down in the interinstitutional agreement on better law - making of 13 april 2016 . in particular , to ensure equal participation in the preparation of delegated acts , the european parliament and the council should receive all documents at the same time as member states ' experts , and their experts systematically have access to meetings of commission expert groups dealing with the preparation of delegated acts . ### in order to specify further the criteria for the accreditation of conformity assessment bodies and to ensure uniform conditions for the implementation of this regulation , the power to adopt acts in accordance with article 290 of the treaty on the functioning of the european union should be delegated to the commission . the commission should carry out appropriate consultations during its preparatory work , including at expert level and with all interested stakeholders , including those that do not participate in the above groups . those consultations should be conducted in accordance with the principles laid down in the interinstitutional agreement on better law - making of 13 april 2016 . in particular , to ensure equal participation in the preparation of delegated acts , the european parliament and the council should receive all documents at the same time as member states ' experts , and their experts systematically have access to meetings of commission expert groups dealing with the preparation of delegated acts .


### the examination procedure should be used for the adoption of implementing acts on european cybersecurity certification schemes for ict products and services ; on modalities of carrying enquiries by the agency ; as well as on the circumstances , formats and procedures of notifications of accredited conformity assessment bodies by the national certification supervisory authorities to the commission . ### delegated acts could be furthermore adopted on european cybersecurity certification schemes for ict products and services ; on modalities of carrying enquiries by the agency ; as well as on the circumstances , formats and procedures of notifications of accredited conformity assessment bodies by the national certification supervisory authorities to the commission .


### the agency shall assist the union institutions , agencies and bodies , as well as member states , in developing and implementing policies related to cybersecurity . ### the agency shall assist and advise the union institutions , agencies and bodies , as well as the member states , in developing and implementing policies related to cybersecurity .


### the agency shall support capacity building and preparedness across the union , by assisting the union , member states and public and private stakeholders in order to increase the protection of their network and information systems , develop skills and competencies in the field of cybersecurity , and achieve cyber resilience . ### the agency shall support capacity building and preparedness across the union , by assisting the union , member states and public and private stakeholders in order to increase the protection of their network and information systems , develop skills , awareness and competencies in the field of cybersecurity , and achieve cyber resilience and response capacities .


### the agency shall promote cooperation and coordination at union level among member states , union institutions , agencies and bodies , and relevant stakeholders , including the private sector , on matters related to cybersecurity . ### the agency shall promote and strengthen cooperation and coordination at union level among member states , union institutions , agencies and bodies , and relevant stakeholders , including the private sector , thereby enabling a high level of cybersecurity to be attained in the member states .


### the agency shall promote cooperation and coordination at union level among member states , union institutions , agencies and bodies , and relevant stakeholders , including the private sector , on matters related to cybersecurity . ### the agency shall promote cooperation , coordination and information sharing at union level among member states , union institutions , agencies and bodies , and relevant stakeholders , including the private sector , on matters related to cybersecurity .


### the agency shall promote a high level of awareness of citizens and businesses on issues related to the cybersecurity . ### the agency shall promote and support projects contributing to a high level of awareness and cyber literacy among citizens and businesses on issues related to the cybersecurity .


### assisting and advising , in particular by providing its independent opinion and supplying preparatory work , on the development and review of union policy and law in the area of cybersecurity , as well as sector - specific policy and law initiatives where matters related to cybersecurity are involved ; ### assisting and advising , in particular by providing its independent opinion and analysis of relevant activities in cyberspace and supplying preparatory work , on the development and review of union policy and law in the area of cybersecurity , as well as sector - specific policy and law initiatives where matters related to cybersecurity are involved ;