EN Official Journal of the European Union L 144/44

DECISION OF THE US-EU JOINT CUSTOMS COOPERATION COMMITTEE

of 4 May 2012

regarding mutual recognition of the Customs-Trade Partnership Against Terrorism program in the United States and the Authorised Economic Operators programme of the European Union

(2012/290/EU)

THE US-EU JOINT CUSTOMS COOPERATION COMMITTEE (hereinafter referred to as the ‘JCCC’),

Having regard to the Agreement between the European Community and the United States of America on Customs Cooperation and Mutual Assistance in Customs Matters of 28 May 1997 (hereinafter referred to as the ‘CMAA’), and in particular Article 22(2)(c) thereof,

Considering the Agreement between the European Community and the United States of America on intensifying and broadening the CMAA to include cooperation on container security and related matters concluded on 28 April 2004,

Considering the need to further develop transatlantic cooperation and secure trade, particularly in accordance with the World Customs Organisation 2011 Framework of Standards to Secure and Facilitate Global Trade (hereinafter referred to as the ‘SAFE Framework’), as it may be amended with the concurrence of the European Union and the United States,

Recognising that the United States of America (hereinafter referred to as the ‘US’) and the European Union (hereinafter referred to as the ‘EU’) consider that customs security and safety, and the facilitation of the international trade supply chain, can be significantly enhanced through mutual recognition of their respective trade partnership programmes (hereinafter referred to as the ‘trade partnership programmes’); the Customs-Trade Partnership against Terrorism (hereinafter referred to as the ‘C-TPAT’) and Authorised Economic Operator (hereinafter referred to as the ‘AEO’),

Affirming that the C-TPAT and AEO programmes operate within the context of the SAFE Framework,

Acknowledging that mutual recognition allows the US and the EU to facilitate trade of operators who have invested in supply chain security and have been granted membership in either C-TPAT or AEO,

Recognising that examination of the C-TPAT and AEO programmes revealed that their qualification standards for membership are compatible,

Affirming that this Decision does not constitute a precedent for any future agreements or arrangements between the US and the EU, particularly with regard to the processing or use and transfer of personal data or information or data protection or privacy,

HAS DECIDED AS FOLLOWS:

Section I

Mutual recognition and responsibility for implementation

1. The trade partnership programmes of the EU and the US are mutually recognised to be compatible and members of each programme are treated in a manner consistent with Section III.

2. The customs authorities defined in Article 1(b) of the CMAA (hereinafter referred to as ‘customs authorities’) are responsible for the implementation of this Decision.

3. The trade partnership programmes concerned are: (a) the European Union Authorised Economic Operator (security and safety or customs simplifications/security and safety) (Council Regulation (EEC) No 2913/92 (1) and Commission Regulation (EEC) No 2454/93 (2), as amended by Regulation (EC) No 648/2005 of the European Parliament and of the Council (3) and Title IIA of Commission Regulation (EC) No 1875/2006 (4)); and (b) the US Customs-Trade Partnership Against Terrorism (tier two and tier three levels) (Security and Accountability for Every (‘SAFE’) Ports Act of 2006).

4. This Decision, as it relates to compatibility, reflects the current structure and territorial application of the C-TPAT program and the AEO programme. This Decision does not take into consideration future modifications of each programme and expansion of their respective territorial application. The customs authorities understand that any such programme modifications or expansion of territorial application may necessitate the successful completion of additional joint validations to the satisfaction of both customs authorities.

Section II

Compatibility

The customs authorities cooperate to maintain compatibility of the standards applied to each programme with respect to the following matters:

(a) application process for granting membership to operators;

(b) assessment of applications; and

(c) granting of membership and monitoring of membership status.

The customs authorities have completed a work programme setting out a process of joint validations.

Section III

Treatment of members

1. Each customs authority treats operators holding a membership status under the other customs authority’s programme in a manner comparable to the way it treats members in its own trade partnership programme, to the extent practicable and possible and consistent with applicable law and policy. This treatment includes, in particular, taking favourably into account in its risk assessment, for the purpose of the conduct of inspections or controls, the respective membership status of an operator authorised by the other customs authority in order to facilitate EU-US trade and encourage the adoption of effective security-related measures.

2. Each customs authority may suspend treatment consistent with paragraph 1 to members of the other customs authority’s programme under this Decision. Such suspension of treatment by one customs authority is to be promptly communicated to the other customs authority providing any additional information regarding the basis for suspension as appropriate.

3. Each customs authority promptly informs the other customs authority in case it identifies any irregularity committed by a member authorised by the other customs authority to allow it to take an informed decision on the possible revocation or suspension of the membership of the operator concerned.

Section IV

Exchange of information and communication

1. The customs authorities enhance communication in order to implement this Decision effectively. They exchange information and foster communication on their trade partnership programmes in particular by: (a) providing updates on operation and development of their programmes in a timely manner; (b) engaging in mutually beneficial exchanges of information regarding supply chain security; and (c) facilitating effective inter-agency communication between the European Commission Directorate-General for Taxation and Customs Union and US Customs and Border Protection to enhance risk management practices with respect to supply chain security on the part of the members of the trade partnership programmes.

2. Exchanges of information are to be conducted in electronic format and in accordance with the CMAA, in particular Article 17 thereof.

3. Data to be exchanged regarding members of the trade partnership programmes, where such exchanges are otherwise authorised, include: (a) name; (b) address; (c) status of membership; (d) validation or authorisation date; (e) suspensions and revocations; (f) the unique authorisation or identification number (in a form mutually determined by the customs authorities); and (g) details that may be mutually determined between the customs authorities, subject, where applicable, to any necessary safeguards.

4. The exchange of data is expected to commence when the customs authorities implement mutual recognition of membership status as described in paragraph 1 of Section III of this Decision.

Section V

Treatment of data

1. Consistent with the CMAA, in particular Article 17, the data obtained by the receiving customs authority under this Decision are to be used and processed for the purposes of implementing this Decision.

2. The customs authorities strive to ensure that the information exchanged is accurate and regularly updated, and that appropriate deletion procedures are in place. In the event a customs authority determines that information provided under this Decision should be amended, the customs authority providing this information is to promptly advise the receiving customs authority of such amendments. Once notified of such amendments, the receiving customs authority is to promptly record such amendment. Information may not be processed and kept longer than necessary for the purpose for which it is transferred.

3. In the event information with personal data is exchanged pursuant to Section IV paragraph 3 (a) to (g), the customs authorities also take appropriate measures to ensure data protection, security, confidentiality and integrity. The customs authorities ensure in particular that: — security safeguards are in place (including electronic safeguards) which control, on a need-to-know basis, access to such information obtained from the other customs authority under this Decision and that it is used only for the purposes of this Decision, — such information obtained from the other customs authority under this Decision is protected from unauthorised access, dissemination, and alteration, deletion or destruction, except to the extent appropriate to implement the provisions of paragraph 2 above, — information obtained from the other customs authority under this Decision is not transmitted to any other country or international body without the prior consent of the customs authority that has provided this information and only in accordance with the conditions specified by the latter, — any such information may be used within the Contracting Parties to the CMAA to protect public security interests and supply chain security relevant to this Decision, and for customs, import/export safety and trade facilitation and enforcement, provided it is subject to safeguards equivalent or comparable to those set forth in this section, — such information obtained from the other customs authority under this Decision is stored at all times in secure electronic and/or paper storage systems. Logs or documentation are kept on all access, as well as processing and use of such information obtained from the other customs authority.

4. With respect to any personal data which may be exchanged pursuant to Section IV paragraph 3 (a) to (g), a programme member may request access to and/or amendment of such data relating to him or her that are processed by a customs authority. Each customs authority is to advise its programme members to make requests for access and/or amendment in the first instance via their own trade partnership programme. Where appropriate, and in accordance with its domestic legislation, the customs authority is to correct any such inaccurate or incomplete data. Each customs authority also informs programme members of the options for seeking administrative and/or judicial redress.

5. At the request of the supplying customs authority, the receiving customs authority is to update, correct, block, or delete information received under this Decision that is inaccurate or incomplete or if its collection or further processing contravenes this Decision or the CMAA. Each customs authority is to notify the other if it becomes aware that material information it has transmitted to the other customs authority or received from the other customs authority under this Decision is inaccurate or unreliable or is subject to significant doubt. Where a customs authority determines that information it has received from the other customs authority under this Decision is inaccurate, it is to take all measures it deems appropriate to safeguard against erroneous reliance on such information, including supplementation, deletion, or correction of such information.

6. Compliance with provisions in this Section by each customs authority is subject to the independent oversight and review by their respective relevant authority (for the US side, the Department of Homeland Security’s Chief Privacy Officer; for the EU, the European Data Protection Supervisor and the EU Member States data protection authorities). These authorities have effective powers of oversight, investigation, intervention and review, and have power to refer violations of law for prosecution or disciplinary action, where appropriate. They ensure that complaints relating to non-compliance are received, investigated, responded to, and appropriately redressed.

Section VI

Review

The JCCC reviews the implementation of this Decision regularly. The review includes, in particular:

(a) joint validations to identify strengths and weaknesses in implementing this Decision;

(b) exchanges of views on data to be shared and treatment of operators, consistent with this Decision; and

(c) exchanges of views on security provisions such as procedures to be followed during and after a serious security incident or when conditions merit suspension of mutual recognition.

Section VII

General acknowledgements

1. This Decision aims to implement provisions of the CMAA and of the Agreement between the European Community and the United States of America on intensifying and broadening the CMAA to include cooperation on container security and related matters of 28 April 2004.

2. This Decision is to be implemented consistent with the respective applicable laws, regulations, and international agreements to which the EU or the US is a party.

3. This Decision does not create or confer any rights, privileges, or benefits upon any third party, person, or entity, private or public.

4. Each customs authority is to be responsible for its own costs resulting from the implementation of this Decision.

Section VIII

Commencement, suspension and discontinuation

1. The cooperation under this Decision commences upon signature by the JCCC Chairpersons.

2. Implementation of mutual recognition between the US and EU takes place consistent with Section III(1). Either customs authority may suspend or discontinue cooperation under this Decision at any time, but should provide at least thirty (30) days’ written notice thereof. Such notice is provided to or by US Customs and Border Protection and the European Commission Directorate-General for Taxation and Customs Union, respectively.

Done at Washington, DC, 4 May 2012. For the European Union European Commission Director-General for Taxation and Customs Union Heinz ZOUREK For the United States of America Acting Commissioner US Customs and Border Protection David V. AGUILAR

(1) OJ L 302, 19.10.1992, p. 1.

(2) OJ L 253, 11.10.1993, p. 1.

(3) OJ L 117, 4.5.2005, p. 13.

(4) OJ L 360, 19.12.2006, p. 64.