EN Official Journal of the European Union L 300/3

AGREEMENT

between Georgia and the European Union on security procedures for exchanging and protecting classified information

Georgia,

and

The European Union, hereafter referred to as ‘the EU’;

hereafter referred to as ‘the Parties’;

CONSIDERING that the Parties share the objectives of strengthening their own security in all ways;

CONSIDERING that the Parties agree that cooperation should be developed between them on questions of common interest relating to security;

CONSIDERING that, in this context, a permanent need therefore exists to exchange classified information between the Parties;

RECOGNISING that full and effective cooperation and consultation may require access to and exchange of classified information and related material of the Parties;

AWARE that such access to and exchange of classified information and related material require that appropriate security measures be taken,

HAVE AGREED AS FOLLOWS:

Article 1

1. In order to fulfil the objectives of strengthening the security of each of the Parties in all ways, this Agreement between Georgia and the European Union on security procedures for exchanging and protecting classified information (hereafter the ‘Agreement’) shall apply to classified information or material in any form either provided or exchanged between the Parties.

2. Each Party shall protect classified information received from the other Party from loss or unauthorised disclosure in accordance with the terms set out herein and in accordance with the Parties' respective laws and regulations.

Article 2

For the purposes of this Agreement, ‘classified information’ shall mean

(i) for the EU: any information or material,

(ii) for Georgia: any information or material, including state secrets,

in any form, which:

(a) is determined by either of the Parties to require protection, as its loss or unauthorised disclosure could cause varying degrees of damage or harm to the interests of Georgia, or of the EU or one or more of its Member States; and

(b) bears a security classification marking as set out in Article 7.

Article 3

1. The EU institutions and entities to which this Agreement applies shall be: the European Council, the Council of the European Union (hereafter ‘the Council’), the General Secretariat of the Council, the High Representative of the Union for Foreign Affairs and Security Policy, the European External Action Service (hereafter ‘the EEAS’) and the European Commission.

2. Those EU institutions and entities may share classified information received under this Agreement with other EU institutions and entities, subject to the prior written consent of the providing party and subject to appropriate assurances that the receiving entity will protect the information adequately.

Article 4

Each of the Parties shall ensure that it has appropriate security systems and measures in place, based on the basic principles and minimum standards of security laid down in their respective laws or regulations, and reflected in the security arrangements to be established pursuant to Article 12, in order to ensure that an equivalent level of protection is applied to classified information subject to this Agreement.

Article 5

Each of the Parties shall:

(a) protect classified information provided by or exchanged with the other Party under this Agreement to a level at least equivalent to that afforded by the providing Party;

(b) ensure that classified information provided or exchanged under this Agreement keeps the security classification marking given to it by the providing Party, and that it is not downgraded or declassified without the prior written consent of the providing Party. The receiving Party shall protect the classified information according to the provisions set out in its own security regulations for information holding an equivalent security classification as specified in Article 7;

(c) not use such classified information for purposes other than those established by the originator or those for which the information is provided or exchanged;

(d) not disclose such classified information to third parties without the prior written consent of the providing Party;

(e) not allow individuals access to such classified information unless they have a need to know and have been granted security clearance as appropriate in accordance with the applicable laws and regulations of the receiving Party;

(f) ensure that facilities where classified information provided is handled and stored are appropriately security certified; and

(g) ensure that all individuals with access to classified information are informed of their responsibility to protect it in accordance with the applicable laws and regulations.

Article 6

1. Classified information shall be disclosed or released in accordance with the principle of originator consent.

2. For release to recipients other than the Parties, a decision on disclosure or release of classified information will be made by the receiving Party on a case-by-case basis subject to the prior written consent of the providing Party and in accordance with the principle of originator consent.

3. No generic release shall be possible unless procedures are agreed upon between the Parties regarding certain categories of information which are relevant to their specific requirements.

4. Nothing in this Agreement shall be regarded as a basis for mandatory release of classified information between the Parties.

5. Classified information subject to this Agreement may be provided to a contractor or prospective contractor only with the prior written consent of the providing Party. Prior to such release, the receiving Party shall ensure that the contractor or prospective contractor and the contractor's facility are able to protect the information and have an appropriate security clearance.

Article 7

In order to establish an equivalent level of protection for classified information provided by or exchanged between the Parties, the security classifications shall correspond as follows:

EU Georgia TRES SECRET UE / EU TOP SECRET TOP SECRET SECRET UE / EU SECRET SECRET CONFIDENTIEL UE / EU CONFIDENTIAL CONFIDENTIAL RESTREINT UE / EU RESTRICTED RESTRICTED

Article 8

1. The Parties shall ensure that all persons who, in the conduct of their official duties require access, or whose duties or functions may afford them access, to information classified (CONFIDENTIAL) or CONFIDENTIEL UE / EU CONFIDENTIAL or above provided or exchanged under this Agreement are security-cleared as appropriate before they are granted access to such information in addition to the need-to-know requirement provided for in Article 5(e).

2. Security clearance procedures shall be designed to determine whether an individual, taking into account his or her loyalty, trustworthiness and reliability, may have access to such classified information.

Article 9

The Parties shall provide mutual assistance with regard to the security of classified information subject to this Agreement and matters of common security interest. Reciprocal security consultations and assessment visits shall be conducted by the authorities referred to in Article 12 to assess the effectiveness of the security arrangements within their respective responsibility to be established pursuant to that Article.

Article 10

1. For the purposes of this Agreement:

(a) as regards the EU, all correspondence shall be sent through the Chief Registry Officer of the Council and shall be forwarded by him to the Member States and to the institutions or entities referred to in Article 3, subject to paragraph 2 of this Article;

(b) as regards Georgia, all correspondence shall be sent to the Central Registry of the State Security Service of Georgia via the Mission of Georgia to the European Union.

2. Exceptionally, correspondence from one Party which is accessible only to specific competent officials, organs or services of that Party may, for operational reasons, be addressed and be accessible only to specific competent officials, organs or services of the other Party specifically designated as recipients, taking into account their competencies and according to the need-to-know principle. As far as the EU is concerned, such correspondence shall be transmitted through the Chief Registry Officer of the Council, the Chief Registry Officer of the EEAS, or the Chief Registry Officer of the European Commission, as appropriate. As far as Georgia is concerned, such correspondence shall be transmitted through the State Security Service of Georgia via the Mission of Georgia to the European Union.

Article 11

The Head of the State Security Service of Georgia, the Secretary-General of the Council, the Member of the European Commission responsible for security matters and the High Representative of the Union for Foreign Affairs and Security Policy shall oversee the implementation of this Agreement.

Article 12

1. In order to implement this Agreement, security arrangements shall be established between the competent security authorities designated below, each acting under the direction and on behalf of its organisational superiors, in order to lay down the standards for the reciprocal protection of classified information under this Agreement:

— on the one hand, the State Security Service of Georgia;

— and on the other (i) the Security Office of the General Secretariat of the Council; (ii) Directorate HR.DS — the Security Directorate of the European Commission; and (iii) the Security Department of the EEAS.

2. Before classified information is provided or exchanged between the Parties under this Agreement, the competent security authorities referred to in paragraph 1 shall agree that the receiving Party is able to protect the information in a way consistent with the security arrangements to be established pursuant to that paragraph.

Article 13

1. The competent authority of either of the Parties referred to in Article 12 shall immediately inform the competent authority of the other Party of any proven or suspected cases of unauthorised disclosure or loss of classified information provided by that Party. The competent authority shall conduct an investigation, with assistance from the other Party if required, and shall report the results to the other Party.

2. The authorities referred to in Article 12 shall establish procedures to be followed in such cases.

Article 14

Each Party shall bear its own costs incurred in implementing this Agreement.

Article 15

Nothing in this Agreement shall alter existing agreements or arrangements between the Parties or agreements between Georgia and Member States of the EU. This Agreement shall not preclude the Parties from concluding other agreements relating to the provision or exchange of classified information subject to this Agreement provided they are not incompatible with the obligations under this Agreement.

Article 16

Any disputes between the Parties arising out of the interpretation or application of this Agreement shall be addressed by negotiation between the Parties. During the negotiation both Parties shall continue to fulfil all of their obligations under this Agreement.

Article 17

1. This Agreement shall enter into force on the first day of the first month following the day of the receipt through diplomatic channels of the last written notification on the completion by the Parties of the internal procedures necessary for the entry into force of this Agreement.

2. Each Party shall notify the other Party of any changes in its laws and regulations that could affect the protection of classified information referred to in this Agreement.

3. Each Party shall notify the other Party through diplomatic channels of any changes with regard to competent authorities and/or officials envisaged in Articles 10, 11 and 12.

4. Amendments and additions may be made to this Agreement upon mutual agreement of the Parties, which will be formed as separate documents. Amendments and additions formulated thereby shall constitute an integral part of this Agreement and shall enter into force in accordance with paragraph 1.

Article 18

This Agreement shall be subject to regular review by the Parties. Each Party may terminate this Agreement by sending a written notification of termination of this Agreement through diplomatic channels to the other Party. In such case, this Agreement shall be terminated six months after the receipt of the written notification. Termination shall not affect the observance of obligations already entered into under this Agreement. In particular, all classified information provided or exchanged pursuant to this Agreement shall continue to be protected in accordance with the provisions set out herein.

IN WITNESS WHEREOF the undersigned, respectively duly authorised, have signed this Agreement.