EN Official Journal of the European Union L 122/18

REGULATION (EU) No 376/2014 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

of 3 April 2014

on the reporting, analysis and follow-up of occurrences in civil aviation, amending Regulation (EU) No 996/2010 of the European Parliament and of the Council and repealing Directive 2003/42/EC of the European Parliament and of the Council and Commission Regulations (EC) No 1321/2007 and (EC) No 1330/2007

(Text with EEA relevance)

THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,

Having regard to the Treaty on the Functioning of the European Union, and in particular Article 100(2) thereof,

Having regard to the proposal from the European Commission,

After transmission of the draft legislative act to the national parliaments,

Having regard to the opinion of the European Economic and Social Committee (1),

After consulting the Committee of the Regions,

Acting in accordance with the ordinary legislative procedure (2),

Whereas:

(1) A high general level of safety should be ensured in civil aviation in the Union and every effort should be made to reduce the number of accidents and incidents with a view to ensuring public confidence in aviation transport.

(2) The rate of fatal accidents in civil aviation has remained fairly constant over the last decade. Nevertheless, the number of accidents could rise over the decades to come, due to an increase in air traffic and an increase in the technical complexity of aircraft.

(3) Regulation (EU) No 996/2010 of the European Parliament and of the Council (3) aims to prevent accidents by facilitating the prompt holding of efficient and high-quality safety investigations. This Regulation should not interfere with the process of accident and incident investigations managed by national safety investigation authorities as defined in Regulation (EU) No 996/2010. In the event of an accident or a serious incident, notification of the occurrence is also subject to Regulation (EU) No 996/2010.

(4) Existing legislative acts of the Union, in particular Regulation (EC) No 216/2008 of the European Parliament and of the Council (4) and its implementing regulations, impose obligations on certain organisations to establish occurrence reporting systems in the context of their safety management systems. Compliance with Regulation (EC) No 216/2008 and its implementing regulations should not exempt organisations from compliance with this Regulation. Likewise, compliance with this Regulation should not exempt organisations from compliance with Regulation (EC) No 216/2008 and its implementing regulations. However, this should not give rise to two parallel reporting systems, and Regulation (EC) No 216/2008, its implementing regulations, and this Regulation should be seen as complementary.

(5) Experience has shown that accidents are often preceded by safety-related incidents and deficiencies revealing the existence of safety hazards. Safety information is therefore an important resource for the detection of potential safety hazards. In addition, whilst the ability to learn from an accident is crucial, purely reactive systems have been found to be of limited use in continuing to bring forward improvements. Reactive systems should therefore be complemented by proactive systems which use other types of safety information to make effective improvements in aviation safety. The Union, its Member States, the European Aviation Safety Agency (‘the Agency’) and organisations should contribute to the improvement of aviation safety through the introduction of more proactive and evidence based safety systems which focus on accident prevention based on the analysis of all relevant safety information, including information on civil aviation occurrences.

(6) In order to improve aviation safety, relevant civil aviation safety information should be reported, collected, stored, protected, exchanged, disseminated and analysed, and appropriate safety action should be taken on the basis of the information collected. This proactive and evidence-based approach should be implemented by the relevant aviation safety authorities of Member States, by organisations as part of their safety management system and by the Agency.

(7) The imposition on organisations of occurrence reporting obligations should be proportionate to the size of the organisation concerned and the scope of its activity. It should therefore be possible, in particular for smaller organisations, to decide to join or merge functions related to occurrence handling within the organisation, to share occurrence reporting tasks with other organisations of the same nature or to outsource the collection, evaluation, processing, analysis and storage of details of occurrences to specialised entities approved by the competent authorities of the Member States. Such entities should comply with the protection and confidentiality principles established by this Regulation. The outsourcing organisation should maintain appropriate control of the outsourced tasks and should be ultimately accountable and responsible for the application of the requirements prescribed by this Regulation.

(8) It is necessary to ensure that front-line aviation professionals report occurrences that pose a significant risk to aviation safety. Voluntary reporting systems should complement the mandatory reporting systems, and both should allow individuals to report details of aviation safety-related occurrences. Mandatory and voluntary reporting systems should be set up within organisations, the Agency and competent authorities of the Member States. The information collected should be transferred to the authority competent for appropriate monitoring in order to enhance aviation safety. Organisations should analyse those occurrences that could have an impact on safety, in order to identify safety hazards and take any appropriate corrective or preventive action. Organisations should send the preliminary results of their analyses to the competent authority of their Member States or to the Agency and should also send them the final results if those results identify an actual or potential aviation safety risk. The competent authorities of the Member States and the Agency should put in place a similar procedure for those occurrences that have been directly submitted to them and should adequately monitor the organisation's assessment and any corrective or preventive action taken.

(9) Various categories of staff working or otherwise engaged in civil aviation witness events which are of relevance to accident prevention. They should therefore have access to tools enabling them to report such events, and their protection should be guaranteed. In order to encourage staff to report occurrences and enable them to appreciate more fully the positive impact which occurrence reporting has on air safety, they should be regularly informed about action taken under occurrence reporting systems.

(10) The hazards and risk associated with complex motor-powered aircraft are very different from those associated with other types of aircraft. Therefore, while the entire aviation sector should be covered by this Regulation, the obligations imposed by it should be proportionate to the sphere of activity and the complexity of different types of aircraft. Accordingly, information collected on occurrences involving aircraft other than complex motor-powered ones should be subject to simplified reporting obligations which are better suited to that branch of aviation.

(11) The development of other means of collecting safety information in addition to the systems required by this Regulation should be encouraged, with a view to collecting further information which could contribute to the improvement of aviation safety. Where organisations have existing and well-functioning safety information collection systems, they should be allowed to continue to use those systems alongside the systems to be established for the purpose of this Regulation.

(12) Safety investigation authorities and any entity entrusted with regulating civil aviation safety within the Union should have full access to details of occurrences collected and occurrence reports stored by their Member States, in order to decide which incidents require a safety investigation, as well as to identify where lessons can be learned in the interest of aviation safety and to fulfil their oversight obligations.

(13) It is essential to have high-quality and complete data, as analysis and trends derived from inaccurate data may show misleading results and may lead to effort being focused on inappropriate action. In addition, such inaccurate data may lead to a loss of confidence in the information produced by occurrence reporting schemes. In order to ensure the quality of occurrence reports, and to facilitate their completeness, they should contain certain minimum information, which may vary depending on the occurrence category. In addition, procedures should be implemented for checking the quality of information and avoiding inconsistency between an occurrence report and the details of the occurrence that were initially collected. Moreover, with the support of the Commission, adequate guidance material should be developed, notably to ensure the quality and to facilitate the completeness of data as well as the consistent and uniform integration of data into databases. Workshops should also be organised, notably by the Commission, to provide necessary support.

(14) The Commission should develop a common European risk classification scheme to ensure the identification of any rapid action needed when looking at high-risk individual safety occurrences. That scheme should also enable key risk areas to be identified from aggregated information. Such a scheme should help the relevant entities in their assessment of occurrences and in determining where best to focus their efforts. A common European risk classification scheme should facilitate an integrated and harmonised approach to risk management across the European aviation system and thus enable organisations, Member States, the Commission and the Agency to focus on safety improvement efforts in a harmonised manner.

(15) A common European risk classification scheme should also both enable key risk areas within the Union to be identified on the basis of aggregated information from a European perspective and support the work done in the area of the European Aviation Safety Programme and the European Aviation Safety Plan. Appropriate support should be given by the Commission to ensure consistent and uniform risk classification across Member States.

(16) To facilitate information exchange, occurrence reports should be stored in databases which should be compatible with the European Coordination Centre for Aircraft Incident Reporting Systems (ECCAIRS) (the software used by all Member States and by the European Central Repository to store occurrence reports) and with the ADREP taxonomy (the International Civil Aviation Organisation (ICAO) taxonomy, also used for the ECCAIRS software). The Agency and the Commission should provide technical support for the interoperability of the systems.

(17) Organisations should store occurrence reports derived from details of occurrences collected under the mandatory and, where applicable, the voluntary reporting systems in one or more databases. It should be possible for the complexity of the database to be proportionate to the size of the organisation concerned and/or its significance with respect to the objectives of this Regulation, and it should at least consist of a data file containing common mandatory data fields and, where applicable, specific mandatory data fields.

(18) An occurrence involving an aircraft registered in a Member State or operated by an organisation established in a Member State should be reported even if it happened outside the territory of that Member State.

(19) Information on occurrences should be exchanged within the Union to enhance the detection of actual or potential hazards. This information exchange should also enable Member States to have access to all information on occurrences which occur on their territory or in their airspace but which are reported to another Member State. It should also allow the Agency to obtain precise information about occurrences and access to all occurrence reports collected in the Union in order, where necessary, to take corrective action to counteract a risk identified in the Union. This information exchange should enable the competent authorities of the Member States to obtain precise information about occurrences in their airspace and, where necessary, to take corrective action to counteract a risk identified on their territory.

(20) The objective of the exchange of information on occurrences should be the prevention of aviation accidents and incidents. It should not be used to attribute blame or liability or to establish benchmarks for safety performance.

(21) The most efficient way to ensure the exchange of large quantities of safety information between the Member States, the Commission and the Agency is through the European Central Repository, provided that the Member States, the Commission and the Agency have full access to it.

(22) All safety-related information derived from occurrence reports collected in the Union should be transferred in the European Central Repository in a timely manner. This should include the collection of information on incidents but also information on accidents and serious incidents investigated pursuant to Regulation (EU) No 996/2010.

(23) This Regulation should apply to information on occurrences which is stored in the databases of organisations, Member States or the Agency.

(24) All safety-related information contained in the European Central Repository should be available to entities entrusted with regulating civil aviation safety within the Union, including the Agency, and to the authorities responsible for investigating accidents and incidents within the Union.

(25) It should be possible for interested parties to request access to certain information contained in the European Central Repository, subject to the rules concerning the confidentiality of such information and the anonymity of the persons involved.

(26) As national points of contact have the best knowledge of interested parties established in a given Member State, it should be for each national point of contact to deal with requests from interested parties established in the territory of its own Member State. The Commission should deal with requests from interested parties from third countries or from international organisations.

(27) Information contained in occurrence reports should be analysed, and safety risks identified. Any appropriate consequent action for improving aviation safety should be identified and implemented in a timely manner. Information on the analysis and follow-up of occurrences should be disseminated within organisations, competent authorities of the Member States and the Agency, since providing feedback on occurrences that have been reported incentivises individuals to report occurrences. Where applicable and when possible, information on the analysis and follow-up of occurrences should also be provided to individuals who have directly reported occurrences to the competent authorities of the Member States or to the Agency. Such feedback should comply with the rules on confidentiality and protection of the reporter and the persons mentioned in occurrence reports pursuant to this Regulation.

(28) This Regulation should assist Member States, the Agency and organisations in managing aviation safety risks. The safety management systems of organisations are complemented by the safety management systems of the Member States and of the Agency. While organisations manage safety risks associated with their specific activities, the competent authorities of the Member States and the Agency manage safety risks for the aviation systems of, respectively, entire Member States and of the Union as a whole, addressing common safety risks for aviation in the Member State concerned or at Union level. The responsibilities of the Agency and of the competent authorities of the Member States should not exonerate organisations from their direct responsibilities in managing safety inherent in the products and in the services they provide. For that purpose, organisations should collect and analyse information on occurrences in order to identify and mitigate hazards associated with their activities. They should also assess associated safety risks and allocate resources to take prompt and appropriate safety risk mitigation measures. The overall process should be monitored by the relevant competent authority, which should, when necessary, require that additional action be taken to ensure that the safety deficiencies are correctly addressed. On the other hand, the competent authorities of the Member States and the Agency should complement the safety management systems of the organisations at Member State and European levels respectively.

(29) When determining the action to be included within their State Safety Programme and State Safety Plan, and in order to ensure that the action is evidence-based, Member States should use the information derived from the occurrence reports that have been collected and from their analysis. State Safety Programmes and State Safety Plans are complemented at European level by the European Aviation Safety Programme and the European Aviation Safety Plan.

(30) Since the objective of aviation safety improvement cannot be sufficiently achieved by the Member States because reporting systems operated by Member States in isolation are less efficient than a coordinated network with exchange of information allowing identification of possible safety problems and key risk areas at Union level, analysis at national level should be complemented by analysis and follow-up at Union level in order to ensure better prevention of aviation accidents and incidents. This Union-level task should be carried out by a network of aviation safety analysts in coordination with the Agency and the Commission. It should be possible for that network to decide, by consensus, to invite observers to their meetings, including industry employees or representatives.

(31) The European Aviation Safety Programme and the European Aviation Safety Plan should benefit in particular from the work of the network of aviation safety analysts for the purpose of determining what action needs to be implemented at Union level from an evidence-based perspective.

(32) The general public should be provided with general aggregated information on the level of aviation safety in Member States and in the Union. That information should cover, in particular, trends and analysis deriving from the implementation of this Regulation by the Member States, as well as information in an aggregated form on the content of the European Central Repository, and may be provided by publishing safety performance indicators (SPI).

(33) The civil aviation safety system is established on the basis of feedback and lessons learned from accidents and incidents. Occurrence reporting and the use of occurrence information for the improvement of safety depend on a relationship of trust between the reporter and the entity in charge of the collection and assessment of the information. This requires strict application of rules on confidentiality. The purpose of protecting safety information from inappropriate use, and of limiting access to the European Central Repository solely to interested parties participating in the improvement of civil aviation safety, is to ensure the continuing availability of safety information so that appropriate and timely preventive action can be taken and aviation safety improved. In this context, sensitive safety information should be protected in an appropriate way and its collection should be ensured by guaranteeing its confidentiality, protecting its source and ensuring the confidence of staff working in civil aviation in occurrence reporting systems. Appropriate measures should be put in place to ensure that information collected through occurrence reporting schemes is kept confidential and that access to the European Central Repository is restricted. National rules on freedom of information should take into account the necessary confidentiality of such information. The information collected should be adequately protected from unauthorised use or disclosure. It should be used strictly for the purpose of maintaining or improving aviation safety and should not be used to attribute blame or liability.

(34) In order to ensure the confidence of employees or contracted personnel in the occurrence reporting system of the organisation, the information contained in occurrence reports should be protected appropriately and should not be used for purposes other than maintaining or improving aviation safety. The internal ‘just culture’ rules adopted by organisations pursuant to this Regulation should contribute in particular to the achievement of this objective. In addition, the limitation of the transmission of personal details, or of information allowing the identification of the reporter or of the other persons mentioned in occurrence reports, by a clear separation between the departments handling occurrence reports and the rest of the organisation, may be an efficient way to achieve this objective.

(35) A reporter or a person mentioned in occurrence reports should be adequately protected. In this context, occurrence reports should be disidentified and details relating to the identity of the reporter and of the persons mentioned in occurrence reports should not be entered into databases.

(36) In addition, the civil aviation system should promote a ‘safety culture’ facilitating the spontaneous reporting of occurrences and thereby advancing the principle of a ‘just culture’. ‘Just culture’ is an essential element of a broader ‘safety culture’, which forms the basis of a robust safety management system. An environment embracing ‘safety culture’ principles should not prevent action being taken where necessary to maintain or improve the level of aviation safety.

(37) A ‘just culture’ should encourage individuals to report safety-related information. It should not, however, absolve individuals of their normal responsibilities. In this context, employees and contracted personnel should not be subject to any prejudice on the basis of information provided pursuant to this Regulation, except in cases of wilful misconduct or where there has been manifest, severe and serious disregard with respect to an obvious risk and profound failure of professional responsibility to take such care as is evidently required in the circumstances, causing foreseeable damage to a person or to property, or seriously compromising the level of aviation safety.

(38) In order to encourage reporting of occurrences, it should be appropriate to protect not only reporters, but also persons mentioned in the occurrence reports concerned. However, such protection should not exonerate those persons from their reporting obligations under this Regulation. In particular, in a situation where a person is mentioned in an occurrence report and has himself or herself the obligation to report that same occurrence, and intentionally fails to report it, then that person should lose his or her protection and face penalties in application of this Regulation.

(39) Without prejudice to national criminal law and the proper administration of justice, it is important to clearly demarcate the extent of the protection of the reporter and other persons mentioned in occurrence reports from prejudice or prosecution.

(40) In order to enhance the confidence of individuals in the system, the handling of occurrence reports should be organised in such a way as to appropriately safeguard the confidentiality of the identity of the reporter and other persons mentioned in occurrence reports with regard to fostering a ‘just culture’. The aim, wherever possible, should be to enable an independent occurrence handling system to be established.

(41) Staff of organisations, of the competent authorities of the Member States and of the Agency who are involved in the evaluation, processing or analysis of occurrences have a significant role to play in the identification of safety hazards and safety deficiencies. Experience shows that when occurrences are analysed with the benefit of hindsight following an accident, the analysis leads to the identification of risks and deficiencies that might otherwise not have been identified. It is possible, therefore, that the persons involved in the evaluation, processing or analysis of occurrences may fear potential consequences in terms of prosecution before judicial authorities. Without prejudice to national criminal law and the proper administration of justice, Member States should not institute proceedings against persons who, in the competent authorities of the Member States, are involved in the evaluation, processing or analysis of occurrences in respect of decisions taken as part of their duties which subsequently, and with the benefit of hindsight, prove to have been erroneous or ineffective but which, when they were taken and on the basis of the information available at that time, were proportional and appropriate.

(42) Employees and contracted personnel should have the opportunity to report breaches of the principles delimiting their protection as established by this Regulation, and should not be penalised for so doing. Member States should define the consequences for those who infringe the principles of protection of the reporter and of other persons mentioned in occurrence reports and should adopt remedies or impose penalties as appropriate.

(43) Individuals may be discouraged from reporting occurrences by the fear of self-incrimination and the potential consequences in terms of prosecution before judicial authorities. The objectives of this Regulation can be achieved without interfering unduly with the justice systems of the Member States. It is therefore appropriate to provide that unpremeditated or inadvertent infringements of the law that come to the attention of the authorities of the Members States solely through reporting pursuant to this Regulation should not be the subject of disciplinary, administrative or legal proceedings, unless where otherwise provided by applicable national criminal law. However, the rights of third parties to institute civil proceedings should not be covered by this prohibition and should be subject only to national law.

(44) Nevertheless, in the context of developing a ‘just culture’ environment, Member States should retain the option of extending the prohibition on using occurrence reports as evidence against reporters in administrative and disciplinary proceedings to civil or criminal proceedings.

(45) In addition, the cooperation between safety authorities and judicial authorities should be enhanced and formalised by means of advance arrangements between themselves which should respect the balance between the various public interests at stake and which should in particular cover, for example, access to and the use of occurrence reports contained in the national databases.

(46) To support the increased responsibilities of the Agency under this Regulation, it should be given sufficient resources to enable it to carry out the additional tasks assigned to it.

(47) In order to supplement or amend this Regulation, the power to adopt acts in accordance with Article 290 of the Treaty on the Functioning of the European Union should be delegated to the Commission. It is of particular importance that the Commission carry out appropriate consultations during its preparatory work, including at expert level. The Commission, when preparing and drawing-up delegated acts, should ensure a simultaneous, timely and appropriate transmission of relevant documents to the European Parliament and to the Council.

(48) In applying this Regulation, the Commission should consult the Agency and the network of aviation safety analysts referred to herein.

(49) In order to ensure uniform conditions for the implementation of this Regulation, implementing powers should be conferred on the Commission. Those powers should be exercised in accordance with Regulation (EU) No 182/2011 of the European Parliament and of the Council (5).

(50) The rules on data processing and the protection of individuals as laid down in Directive 95/46/EC of the European Parliament and of the Council (6) and in Regulation (EC) No 45/2001 of the European Parliament and of the Council (7) should be fully respected in the application of this Regulation. The rules on access to data as laid down in Regulation (EC) No 1049/2001 of the European Parliament and of the Council (8) should be fully respected in the application of this Regulation except as regards the dissemination of data and information contained in the European Central Repository, which are protected under stricter access rules laid down in this Regulation.

(51) Penalties should, in particular, be applicable against any person who or entity which, contrary to this Regulation, misuses information protected by this Regulation; acts in a prejudicial manner against the reporter or other persons mentioned in occurrence reports, except in cases where the exemptions laid down in this Regulation apply; does not establish an environment appropriate for allowing the collection of details of occurrences; does not analyse the information collected; does not act to address any safety or potential safety deficiencies detected; or does not share the information collected in application of this Regulation.

(52) Since the objective of this Regulation, namely the establishment of common rules in the field of occurrence reporting in civil aviation, cannot be sufficiently achieved by the Member States but can rather, by reason of its Union-wide scale and effects, be better achieved at Union level, the Union may adopt measures, in accordance with the principle of subsidiarity as set out in Article 5 of the Treaty on the European Union. In accordance with the principle of proportionality, as set out in that Article, this Regulation does not go beyond what is necessary in order to achieve that objective.

(53) Regulation (EU) No 996/2010 should therefore be amended accordingly.

(54) Directive 2003/42/EC of the European Parliament and of the Council (9), Commission Regulation (EC) No 1321/2007 (10) and Commission Regulation (EC) No 1330/2007 (11) should therefore be repealed.

(55) The European Data Protection Supervisor was consulted in accordance with Article 28(2) of Regulation (EC) No 45/2001 and delivered an opinion on 10 April 2013 (12),

HAVE ADOPTED THIS REGULATION:

Article 1

Objectives

1. This Regulation aims to improve aviation safety by ensuring that relevant safety information relating to civil aviation is reported, collected, stored, protected, exchanged, disseminated and analysed.

This Regulation ensures:

(a) that, where appropriate, safety action is taken in a timely manner based on analysis of the information collected;

(b) the continued availability of safety information by introducing rules on confidentiality and on the appropriate use of information and through the harmonised and enhanced protection of reporters and persons mentioned in occurrence reports; and

(c) that aviation safety risks are considered and dealt with at both Union level and national level.

2. The sole objective of occurrence reporting is the prevention of accidents and incidents and not to attribute blame or liability.

Article 2

Definitions

For the purposes of this Regulation the following definitions apply:

(1) ‘reporter’ means a natural person who reports an occurrence or other safety-related information pursuant to this Regulation;

(2) ‘aircraft’ means any machine that can derive support in the atmosphere from the reactions of the air other than the reactions of the air against the earth's surface;

(3) ‘incident’ means an incident within the meaning of Regulation (EU) No 996/2010;

(4) ‘serious incident’ means a serious incident within the meaning of Regulation (EU) No 996/2010;

(5) ‘accident’ means an accident within the meaning of Regulation (EU) No 996/2010;

(6) ‘disidentified information’ means information arising from occurrence reports from which all personal data such as names or addresses of natural persons have been removed;

(7) ‘occurrence’ means any safety-related event which endangers or which, if not corrected or addressed, could endanger an aircraft, its occupants or any other person and includes in particular an accident or serious incident;

(8) ‘organisation’ means any organisation providing aviation products and/or which employs, contracts or uses the services of persons required to report occurrences in accordance with Article 4(6);

(9) ‘anonymisation’ means the removal from occurrence reports of all personal details relating to the reporter and to the persons mentioned in occurrence reports and any details, including the name of the organisation(s) involved in the occurrence, which may reveal the identity of the reporter or of a third party or lead to that information being inferred from the occurrence report;

(10) ‘hazard’ means a situation or an object with the potential to cause death or injury to a person, damage to equipment or a structure, loss of material, or a reduction of ability to perform a prescribed function;

(11) ‘safety investigation authority’ means the permanent national civil aviation safety investigation authority conducting or supervising safety investigations as referred to in Article 4 of Regulation (EU) No 996/2010;

(12) ‘just culture’ means a culture in which front-line operators or other persons are not punished for actions, omissions or decisions taken by them that are commensurate with their experience and training, but in which gross negligence, wilful violations and destructive acts are not tolerated;

(13) ‘point of contact’ means: (a) where a request for information is made by an interested party established in a Member State, the competent authority designated by each Member State in accordance with Article 6(3); (b) where a request for information is made by an interested party established outside the Union, the Commission;

(14) ‘interested party’ means any natural or legal person or any official body, whether or not having its own legal personality, that is in a position to participate in the improvement of aviation safety by having access to information on occurrences exchanged by the Member States and which falls within one of the categories of interested parties set out in Annex II;

(15) ‘State Safety Programme’ means an integrated set of legal acts and activities aimed at managing civil aviation safety in a Member State;

(16) ‘European Aviation Safety Plan’ means safety issues assessment and the related action plan at European level;

(17) ‘European Aviation Safety Programme’ means the integrated set of regulations at Union level, together with the activities and processes used to jointly manage the safety of civil aviation at European level;

(18) ‘safety management system’ means a systematic approach to managing aviation safety including the necessary organisational structures, accountabilities, policies and procedures, and includes any management system that, independently or integrated with other management systems of the organisation, addresses the management of safety.

Article 3

Subject matter and scope

1. This Regulation lays down rules on:

(a) the reporting of occurrences which endanger or which, if not corrected or addressed, would endanger an aircraft, its occupants, any other person, equipment or installation affecting aircraft operations; and the reporting of other relevant safety-related information in that context;

(b) analysis and follow-up action in respect of reported occurrences and other safety-related information;

(c) the protection of aviation professionals;

(d) appropriate use collected safety information;

(e) the integration of information into the European Central Repository; and

(f) the dissemination of anonymised information to interested parties for the purpose of providing such parties with the information they need in order to improve aviation safety.

2. This Regulation applies to occurrences and other safety-related information involving civil aircraft, with the exception of aircraft referred to in Annex II to Regulation (EC) No 216/2008. Member States may decide to apply this Regulation also to occurrences and other safety-related information involving the aircraft referred to in Annex II to that Regulation.

Article 4

Mandatory reporting

1. Occurrences which may represent a significant risk to aviation safety and which fall into the following categories shall be reported by the persons listed in paragraph 6 through the mandatory occurrence reporting systems pursuant to this Article:

(a) occurrences related to the operation of the aircraft, such as: (i) collision-related occurrences; (ii) take-off and landing-related occurrences; (iii) fuel-related occurrences; (iv) in-flight occurrences; (v) communication-related occurrences; (vi) occurrences related to injury, emergencies and other critical situations; (vii) crew incapacitation and other crew-related occurrences; (viii) meteorological conditions or security-related occurrences;

(b) occurrences related to technical conditions, maintenance and repair of aircraft, such as: (i) structural defects; (ii) system malfunctions; (iii) maintenance and repair problems; (iv) propulsion problems (including engines, propellers and rotor systems) and auxiliary power unit problems;

(c) occurrences related to air navigation services and facilities, such as: (i) collisions, near collisions or potential for collisions; (ii) specific occurrences of air traffic management and air navigation services (ATM/ANS); (iii) ATM/ANS operational occurrences;

(d) occurrences related to aerodromes and ground services, such as: (i) occurrences related to aerodrome activities and facilities; (ii) occurrences related to handling of passengers, baggage, mail and cargo; (iii) occurrences related to aircraft ground handling and related services.

2. Each organisation established in a Member State shall establish a mandatory reporting system to facilitate the collection of details of occurrences referred to in paragraph 1.

3. Each Member State shall establish a mandatory reporting system to facilitate the collection of details of occurrences including the collection of details of occurrences collected by organisations pursuant to paragraph 2.

4. The European Aviation Safety Agency (‘the Agency’) shall establish a mandatory reporting system to facilitate the collection of details of occurrences, including the collection of details of occurrences collected pursuant to paragraph 2 by organisations which have been certified or approved by the Agency.

5. The Commission shall, by means of implementing acts, adopt a list classifying occurrences to be referred to when reporting occurrences pursuant to paragraph 1. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 19(2).

The Commission shall include in those implementing acts a separate list classifying occurrences applicable to aircraft other than complex motor-powered aircraft. The list shall be a simplified version of the list referred to in the first subparagraph and shall, where appropriate, be adapted to the specificities of that branch of aviation.

6. The following natural persons shall report the occurrences referred to in paragraph 1 through the system established in accordance with paragraph 2 by the organisation which employs, contracts or uses the services of the reporter or, failing that, through the system established in accordance with paragraph 3 by the Member State of establishment of their organisation, or by the State which issued, validated or converted the pilot's licence, or through the system established in accordance with paragraph 4 by the Agency:

(a) the pilot in command, or, in cases where the pilot in command is unable to report the occurrence, any other crew member next in the chain of command of an aircraft registered in a Member State or an aircraft registered outside the Union but used by an operator for which a Member State ensures oversight of operations or an operator established in the Union;

(b) a person engaged in designing, manufacturing, continuous airworthiness monitoring, maintaining or modifying an aircraft, or any equipment or part thereof, under the oversight of a Member State or of the Agency;

(c) a person who signs an airworthiness review certificate, or a release to service in respect of an aircraft or any equipment or part thereof, under the oversight of a Member State or of the Agency;

(d) a person who performs a function which requires him or her to be authorised by a Member State as a staff member of an air traffic service provider entrusted with responsibilities related to air navigation services or as a flight information service officer;

(e) a person who performs a function connected with the safety management of an airport to which Regulation (EC) No 1008/2008 of the European Parliament and of the Council (13) applies;

(f) a person who performs a function connected with the installation, modification, maintenance, repair, overhaul, flight-checking or inspection of air navigation facilities for which a Member State ensures the oversight;

(g) a person who performs a function connected with the ground handling of aircraft, including fuelling, loadsheet preparation, loading, de-icing and towing at an airport covered by Regulation (EC) No 1008/2008.

7. The persons listed in paragraph 6 shall report occurrences within 72 hours of becoming aware of the occurrence, unless exceptional circumstances prevent this.

8. Following notification of an occurrence, any organisation established in a Member State which is not covered by paragraph 9 shall report to the competent authority of that Member State, as referred to in Article 6(3), the details of occurrences collected in accordance with paragraph 2 of this Article as soon as possible, and in any event no later than 72 hours after becoming aware of the occurrence.

9. Following notification of an occurrence, each organisation established in a Member State which is certified or approved by the Agency shall report to the Agency the details of occurrences collected in accordance with paragraph 2 as soon as possible, and in any event no later than 72 hours after becoming aware of the occurrence.

Article 5

Voluntary reporting

1. Each organisation established in a Member State shall establish a voluntary reporting system to facilitate the collection of:

(a) details of occurrences that may not be captured by the mandatory reporting system;

(b) other safety-related information which is perceived by the reporter as an actual or potential hazard to aviation safety.

2. Each Member State shall establish a voluntary reporting system to facilitate the collection of:

(a) details of occurrences that may not be captured by the mandatory reporting system;

(b) other safety-related information which is perceived by the reporter as an actual or potential hazard to aviation safety.

That system shall also include, but shall not be limited to, the collection of information transferred by organisations pursuant to paragraph 6.

3. The Agency shall establish a voluntary reporting system to facilitate the collection of:

(a) details of occurrences that may not be captured by the mandatory reporting system;

(b) other safety-related information which is perceived by the reporter as an actual or potential hazard to aviation safety.

That system shall also include, but shall not be limited to, the collection of information transferred by organisations certified or approved by the Agency pursuant to paragraph 5.

4. The voluntary reporting systems shall be used to facilitate the collection of details of occurrences and safety-related information:

(a) not subject to mandatory reporting pursuant to Article 4(1);

(b) reported by persons who are not listed in Article 4(6).

5. Each organisation established in a Member State and certified or approved by the Agency shall report to the Agency, in a timely manner, details of occurrences and safety-related information which have been collected pursuant to paragraph 1 and which may involve an actual or potential aviation safety risk.

6. Each organisation established in a Member State that is not certified or approved by the Agency shall, in a timely manner, report to the competent authority of that Member State, as designated pursuant to Article 6(3), the details of occurrences and other safety-related information which have been collected pursuant to paragraph 1 of this Article and which may involve an actual or potential aviation safety risk. Member States may require any organisation established in their territory to report the details of all occurrences collected pursuant to paragraph 1 of this Article.

7. Member States, the Agency and organisations may establish other safety information collection and processing systems to collect details of occurrences that might not be captured by the reporting systems referred to in Article 4 and in paragraphs 1, 2 and 3 of this Article. Those systems may include reporting to entities other than those set out in Article 6(3) and may involve the active participation of:

(a) the aviation industry;

(b) professional organisations of aviation staff.

8. Information received from voluntary and mandatory reporting may be integrated into a single system.

Article 6

Collection and storage of information

1. Each organisation established in a Member State shall designate one or more persons to handle independently the collection, evaluation, processing, analysis and storage of details of occurrences reported pursuant to Articles 4 and 5.

The handling of the reports shall be done with a view to preventing the use of information for purposes other than safety, and shall appropriately safeguard the confidentiality of the identity of the reporter and of the persons mentioned in occurrence reports, with a view to promoting a ‘just culture’.

2. By agreement with the competent authority, small organisations may put in place a simplified mechanism for the collection, evaluation, processing, analysis and storage of details of occurrences. They may share those tasks with organisations of the same nature, while complying with the rules on confidentiality and protection pursuant to this Regulation.

3. Each Member State shall designate one or more competent authorities to establish a mechanism to independently collect, evaluate, process, analyse and store details of occurrences reported pursuant to Articles 4 and 5.

The handling of the reports shall be done with a view to preventing the use of information for purposes other than safety, and shall appropriately safeguard the confidentiality of the identity of the reporter and of the persons mentioned in occurrence reports, with a view to promoting a ‘just culture’.

The authorities which may be designated pursuant to the first subparagraph, either jointly or separately, are the following:

(a) the national civil aviation authority; and/or

(b) the safety investigation authority; and/or

(c) any other independent body or entity based in the Union that is entrusted with this function.

Where a Member State designates more than one body or entity, it shall designate one of them as point of contact for the transfer of information referred to in Article 8(2).

4. The Agency shall designate one or more persons to establish a mechanism to independently collect, evaluate, process, analyse and store details of occurrences reported in accordance with Articles 4 and 5.

The handling of the reports shall be done with a view to preventing the use of information for purposes other than safety, and shall appropriately safeguard the confidentiality of the identity of the reporter and of the persons mentioned in occurrence reports, with a view to promoting a ‘just culture’.

5. Organisations shall store occurrence reports drawn up on the basis of details of occurrences collected in accordance with Articles 4 and 5 in one or more databases.

6. The competent authorities referred to in paragraph 3 shall store occurrence reports drawn up on the basis of details of occurrences collected in accordance with Articles 4 and 5 in a national database.

7. Relevant information on accidents and serious incidents collected or issued by safety investigation authorities shall also be stored in the national database.

8. The Agency shall store occurrence reports drawn up on the basis of details of occurrences collected in accordance with Articles 4 and 5 in a database.

9. Safety investigation authorities shall have full access to their respective national database referred to in paragraph 6 for the purpose of discharging their responsibilities pursuant to Article 5(4) of Regulation (EU) No 996/2010.

10. Civil aviation authorities of Member States shall have full access to their respective national database referred to in paragraph 6 for the purposes of their safety-related responsibilities.

Article 7

Quality and content of occurrence reports

1. Occurrence reports referred to in Article 6 shall contain at least the information listed in Annex I.

2. Occurrence reports referred to in paragraphs 5, 6 and 8 of Article 6 shall include a safety risk classification for the occurrence concerned. That classification shall be reviewed and if necessary amended, and shall be endorsed by the competent authority of the Member State or the Agency, in accordance with the common European risk classification scheme referred to in paragraph 5 of this Article.

3. Organisations, Member States and the Agency shall establish data quality checking processes to improve data consistency, notably between the information collected initially and the report stored in the database.

4. The databases referred to in paragraphs 5, 6 and 8 of Article 6 shall use formats which are:

(a) standardised to facilitate information exchange; and

(b) compatible with the ECCAIRS software and the ADREP taxonomy.

5. The Commission, in close cooperation with the Member States and the Agency through the network of aviation safety analysts, referred to in Article 14(2), shall develop a common European risk classification scheme to enable the organisations, Member States and the Agency to classify occurrences in terms of safety risk. In so doing, the Commission shall take into account the need for compatibility with existing risk classification schemes.

The Commission shall develop that scheme by 15 May 2017.

6. The Commission shall be empowered to adopt delegated acts in accordance with Article 18 to define the common European risk classification scheme.

7. The Commission shall, by means of implementing acts, adopt the arrangements for the implementation of the common European risk classification scheme. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 19(2).

8. The Commission and the Agency shall support the competent authorities of the Member States in their task of data integration, including for example in:

(a) the integration of the minimum information referred to in paragraph 1;

(b) the risk classification of occurrences referred to in paragraph 2; and

(c) the establishment of data quality checking processes referred to in paragraph 3.

The Commission and the Agency shall provide that support in such a way as to contribute to the harmonisation of the data entry process across Member States, in particular by providing to staff working in the bodies or entities referred to in Article 6(1), (3) and (4):

(a) guidance material;

(b) workshops; and

(c) appropriate training.

Article 8

European Central Repository

1. The Commission shall manage a European Central Repository to store all occurrence reports collected in the Union.

2. Each Member State shall, in agreement with the Commission, update the European Central Repository by transferring to it all information relating to safety stored in the national databases referred to in Article 6(6).

3. The Agency shall agree with the Commission the technical protocols for transferring to the European Central Repository all occurrence reports collected by the Agency under Regulation (EC) No 216/2008 and its implementing rules, particularly for occurrences stored in the Internal Occurrence Reporting System (IORS), as well as the information collected pursuant to Articles 4(9) and 5(5).

4. The Commission shall, by means of implementing acts, adopt the arrangements for the management of the European Central Repository as referred to in paragraph 1 and 2. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 19(2).

Article 9

Exchange of information

1. Member States and the Agency shall participate in an exchange of information by making all information relating to safety stored in their respective reporting databases available to the competent authorities of the other Member States, the Agency and the Commission, through the European Central Repository.

Occurrence reports shall be transferred to the European Central Repository no later than 30 days after having been entered in the national database.

Occurrence reports shall be updated whenever necessary with additional information relating to safety.

2. Member States shall also transfer information related to accidents and serious incidents to the European Central Repository as follows:

(a) during the course of the investigation: preliminary factual information on accidents and serious incidents;

(b) when the investigation is completed: (i) the final investigation report; and (ii) when available, a summary in English of the final investigation report.

3. A Member State or the Agency shall forward all pertinent safety-related information to the relevant authority of the Member State or the Agency as soon as possible if, while collecting details of occurrences or when storing occurrence reports or carrying out an analysis in accordance with Article 13(6), it identifies safety matters which it considers either:

(a) to be of interest to other Member States or the Agency; or

(b) to possibly require safety action to be taken by other Member States or the Agency.

Article 10

Dissemination of information stored in the European Central Repository

1. Any entity entrusted with regulating civil aviation safety, or any safety investigation authority, within the Union shall have secure full online access to information on occurrences contained in the European Central Repository.

The information shall be used in accordance with Articles 15 and 16.

2. Interested parties listed in Annex II may request access to certain information contained in the European Central Repository.

Interested parties established within the Union shall address requests for information to the point of contact of the Member State in which they are established.

Interested parties established outside the Union shall address their request to the Commission.

The Commission shall inform the competent authority of the Member State concerned when a request is made pursuant to this paragraph.

3. Subject to Article 15(2) of Regulation (EU) No 996/2010, information contained in the European Central Repository relating to ongoing safety investigations conducted in accordance with that Regulation shall not be disclosed to interested parties pursuant to this Article.

4. For security reasons, interested parties shall not be granted direct access to the European Central Repository.

Article 11

Processing of requests and decisions

1. Requests for information contained in the European Central Repository shall be submitted using forms approved by the point of contact. Those forms shall contain at least the items set out in Annex III.

2. A point of contact which receives a request shall verify that:

(a) the request is made by an interested party;

(b) it is competent to deal with that request.

Where the point of contact determines that another Member State or the Commission is competent to deal with the request, it shall transfer it to that Member State or to the Commission, as appropriate.

3. A point of contact which receives a request shall evaluate on a case-by-case basis whether the request is justified and practicable.

A point of contact may supply information to interested parties on paper or by using secure electronic means of communication.

4. Where the request is accepted, the point of contact shall determine the amount and the level of information to be supplied. Without prejudice to Articles 15 and 16, the information shall be limited to what is strictly required for the purpose of the request.

Information unrelated to the interested party's own equipment, operations or field of activity shall be supplied only in aggregated or anonymised form. Information in non-aggregated form may be provided to the interested party if it provides a detailed written justification. That information shall be used in accordance with Articles 15 and 16.

5. The point of contact shall supply interested parties listed in point (b) of Annex II only with information relating to the interested party's own equipment, operations or field of activity.

6. A point of contact receiving a request from an interested party listed in point (a) of Annex II may take a general decision to supply information on a regular basis to that interested party, provided that:

(a) the information requested is related to the interested party's own equipment, operations or field of activity;

(b) the general decision does not grant access to the entire content of the database;

(c) the general decision relates only to anonymised information.

7. The interested party shall use the information received pursuant to this Article subject to the following conditions:

(a) the interested party shall use the information only for the purpose specified in the request form, which should be compatible with the objective of this Regulation as stated in Article 1; and

(b) the interested party shall not disclose the information received without the written consent of the information provider and shall take the necessary measures to ensure appropriate confidentiality of the information received.

8. The decision to disseminate information pursuant to this Article shall be limited to what is strictly required for the purpose of its user.

Article 12

Record of requests and exchange of information

1. The point of contact shall record each request received and the action taken pursuant to that request.

That information shall be transmitted in a timely manner to the Commission whenever a request is received and/or action is taken.

2. The Commission shall make available the updated list of requests received and action taken by the various points of contact and by the Commission itself to all points of contact.

Article 13

Occurrence analysis and follow-up at national level

1. Each organisation established in a Member State shall develop a process to analyse occurrences collected in accordance with Articles 4(2) and 5(1) in order to identify the safety hazards associated with identified occurrences or groups of occurrences.

Based on that analysis, each organisation shall determine any appropriate corrective or preventive action, required to improve aviation safety.

2. When, following the analysis referred to in paragraph 1, an organisation established in a Member State identifies any appropriate corrective or preventive action required to address actual or potential aviation safety deficiencies, it shall:

(a) implement that action in a timely manner; and

(b) establish a process to monitor the implementation and effectiveness of the action.

3. Each organisation established in a Member State shall regularly provide its employees and contracted personnel with information concerning the analysis of, and follow-up on, occurrences for which preventive or corrective action is taken.

4. Where an organisation established in a Member State which is not covered by paragraph 5 identifies an actual or potential aviation safety risk as a result of its analysis of occurrences or group of occurrences reported pursuant to Articles 4(8) and 5(6), it shall transmit to the competent authority of that Member State, within 30 days from the date of notification of the occurrence by the reporter:

(a) the preliminary results of the analysis performed pursuant to paragraph 1, if any; and

(b) any action to be taken pursuant to paragraph 2.

The organisation shall report the final results of the analysis, where required, as soon as they are available and, in principle, no later than three months from the date of notification of the occurrence.

A competent authority of a Member State may request organisations to transmit to it the preliminary or final results of the analysis of any occurrence of which it has been notified but in relation to which it has received no follow-up or only the preliminary results.

5. Where an organisation established in a Member State and certified or approved by the Agency identifies an actual or potential aviation safety risk as a result of its analysis of occurrences or group of occurrences reported pursuant to Articles 4(9) and 5(5), it shall transmit to the Agency, within 30 days from the date of notification of the occurrence by the reporter:

(a) the preliminary results of the analysis performed pursuant to paragraph 1, if any; and

(b) any action to be taken pursuant to paragraph 2.

The organisation certified or approved by the Agency shall transmit to the Agency the final results of the analysis, where required, as soon as they are available and, in principle, no later than three months from the date of notification of the occurrence.

The Agency may request organisations to transmit to it the preliminary or final results of the analysis of any occurrence of which it has been notified but in relation to which it has received no follow-up or only the preliminary results.

6. Each Member State and the Agency shall develop a process to analyse the information relating to occurrences which are directly reported to them in accordance with Articles 4(6), 5(2) and 5(3) in order to identify the safety hazards associated with those occurrences. Based on that analysis, they shall determine any appropriate corrective or preventive action required to improve aviation safety.

7. When, following the analysis referred to in paragraph 6, a Member State or the Agency identifies any appropriate corrective or preventive action required to address actual or potential aviation safety deficiencies, it shall:

(a) implement that action in a timely manner; and

(b) establish a process to monitor the implementation and effectiveness of the action.

8. For each occurrence or group of occurrences monitored in accordance with paragraph 4 or 5, each Member State and the Agency shall have access to the analysis made and shall appropriately monitor action taken by the organisations for which it is respectively responsible.

If a Member State or the Agency concludes that the implementation and the effectiveness of the reported action is inappropriate to address actual or potential safety deficiencies, it shall ensure that additional appropriate action is taken and implemented by the relevant organisation.

9. Where available, information relating to the analysis and the follow-up of individual occurrences or groups of occurrences obtained pursuant to this Article shall be stored in the European Central Repository, in accordance with Article 8(2) and (3), in a timely manner and no later than two months after their storage in the national database.

10. Member States shall use information obtained from the analysis of occurrence reports to identify remedial action to be taken, if any, within the State Safety Programme.

11. In order to inform the public of the level of safety in civil aviation, each Member State shall publish a safety review at least once a year. The safety review shall:

(a) contain aggregated and anonymised information on the type of occurrences and safety-related information reported through its national mandatory and voluntary reporting systems;

(b) identify trends;

(c) identify the action it has taken.

12. Member States may also publish anonymised occurrence reports and risk analysis outcomes.

Article 14

Occurrence analysis and follow up at Union level

1. The Commission, the Agency and the competent authorities of the Member States shall, in collaboration, participate regularly in the exchange and analysis of information contained in the European Central Repository.

Without prejudice to the confidentiality requirements laid down in this Regulation, observers may be invited on a case-by-case basis, where appropriate.

2. The Commission, the Agency and the competent authorities of the Member States shall collaborate through a network of aviation safety analysts.

The network of aviation safety analysts shall contribute to the improvement of aviation safety in the Union, in particular by performing safety analysis in support of the European Aviation Safety Programme and the European Aviation Safety Plan.

3. The Agency shall support the activities of the network of aviation safety analysts by, for example, providing assistance for the preparation and organisation of the meetings of the network.

4. The Agency shall include information about the result of information analysis referred to in paragraph 1 in the annual safety review referred to in Article 15(4) of Regulation (EC) No 216/2008.

Article 15

Confidentiality and appropriate use of information

1. Member States and organisations, in accordance with their national law, and the Agency shall take the necessary measures to ensure the appropriate confidentiality of the details of occurrences received by them pursuant to Articles 4, 5 and 10.

Each Member State, each organisation established in a Member State, or the Agency shall process personal data only to the extent necessary for the purposes of this Regulation and without prejudice to national legal acts implementing Directive 95/46/EC.

2. Without prejudice to the provisions relating to the protection of safety information in Articles 12, 14 and 15 of Regulation (EU) No 996/2010, information derived from occurrence reports shall be used only for the purpose for which it has been collected.

Member States, the Agency and organisations shall not make available or use the information on occurrences:

(a) in order to attribute blame or liability; or

(b) for any purpose other than the maintenance or improvement of aviation safety.

3. The Commission, the Agency and the competent authorities of the Member States, when discharging their obligations under Article 14 in relation to the information contained in the European Central Repository, shall:

(a) ensure the confidentiality of the information; and

(b) limit the use of the information to what is strictly necessary in order to discharge their safety-related obligations without attributing blame or liability; in this respect, the information shall be used in particular for risk management and for analysis of safety trends which may lead to safety recommendations or actions, addressing actual or potential safety deficiencies.

4. Member States shall ensure that their competent authorities referred to in Article 6(3) and their competent authorities for the administration of justice cooperate with each other through advance administrative arrangements. These advance administrative arrangements shall seek to ensure the correct balance between the need for proper administration of justice, on the one hand, and the necessary continued availability of safety information, on the other.

Article 16

Protection of the information source

1. For the purposes of this Article, ‘personal details’ includes in particular names or addresses of natural persons.

2. Each organisation established in a Member State shall ensure that all personal details are made available to staff of that organisation other than persons designated in accordance with Article 6(1) only where absolutely necessary in order to investigate occurrences with a view to enhancing aviation safety.

Disidentified information shall be disseminated within the organisation as appropriate.

3. Each Member State shall ensure that no personal details are ever recorded in the national database referred to in Article 6(6). Such disidentified information shall be made available to all relevant parties, for example to allow them to discharge their obligations in relation to aviation safety improvement.

4. The Agency shall ensure that no personal details are ever recorded in the Agency database referred to in Article 6(8). Such disidentified information shall be made available to all relevant parties, for example to allow them to discharge their obligations in relation to aviation safety improvement.

5. Member States and the Agency shall not be prevented from taking any action necessary for maintaining or improving aviation safety.

6. Without prejudice to applicable national criminal law, Member States shall refrain from instituting proceedings in respect of unpremeditated or inadvertent infringements of the law which come to their attention only because they have been reported pursuant to Articles 4 and 5.

The first subparagraph shall not apply in the cases referred to in paragraph 10. Member States may retain or adopt measures to strengthen the protection of reporters or persons mentioned in occurrence reports. Member States may in particular apply this rule without the exceptions referred to in paragraph 10.

7. If disciplinary or administrative proceedings are instituted under national law, information contained in occurrence reports shall not be used against:

(a) the reporters; or

(b) the persons mentioned in occurrence reports.

The first subparagraph shall not apply in the cases referred to in paragraph 10.

Member States may retain or adopt measures to strengthen the protection of reporters or persons mentioned in occurrence reports. Member States may in particular extend that protection to civil or criminal proceedings.

8. Member States may adopt or maintain in force legislative provisions ensuring a higher level of protection for reporters or for persons mentioned in occurrence reports than those established in this Regulation.

9. Except where paragraph 10 applies, employees and contracted personnel who report or are mentioned in occurrence reports collected in accordance with Articles 4 and 5 shall not be subject to any prejudice by their employer or by the organisation for which the services are provided on the basis of the information supplied by the reporter.

10. The protection under paragraphs 6, 7 and 9 of this Article shall not apply to any of the following situations:

(a) in cases of wilful misconduct;

(b) where there has been a manifest, severe and serious disregard of an obvious risk and profound failure of professional responsibility to take such care as is evidently required in the circumstances, causing foreseeable damage to a person or property, or which seriously compromises the level of aviation safety.

11. Each organisation established in a Member State shall, after consulting its staff representatives, adopt internal rules describing how ‘just culture’ principles, in particular the principle referred to in paragraph 9, are guaranteed and implemented within that organisation.

The body designated pursuant to paragraph 12 may ask to review the internal rules of the organisations established in its Member State before those internal rules are implemented.

12. Each Member State shall designate a body responsible for the implementation of paragraphs 6, 9 and 11.

Employees and contracted personnel may report to that body alleged infringements of the rules established by this Article. Employees and contracted personnel shall not be penalised for reporting alleged infringements. Employees and contracted personnel may inform the Commission about such alleged infringements.

Where appropriate, the designated body shall advise the relevant authorities of its Member State concerning remedies or penalties in application of Article 21.

13. On 15 May 2019 and every five years thereafter, each Member State shall send the Commission a report on the application of this Article, and in particular on the activities of the body designated pursuant to paragraph 12. The report shall not contain any personal data.

Article 17

Updating of the annexes

The Commission shall be empowered to adopt delegated acts in accordance with Article 18 in order to:

(a) update the list of mandatory data fields in occurrence reports laid down in Annex I where, in the light of experience gained in the application of this Regulation, changes prove necessary in order to improve aviation safety;

(b) update the request for European Central Repository information form provided in Annex III, to take account of experience gained and of new developments;

(c) align any of the Annexes with the ECCAIRS software and the ADREP taxonomy, as well as with legal acts adopted by the Union and with international agreements.

With a view to updating the list of mandatory fields, the Agency and the network of aviation safety analysts referred to in Article 14(2) shall provide the Commission with appropriate opinion(s).

Article 18

Exercise of the delegation

1. The power to adopt delegated acts is conferred on the Commission subject to the conditions laid down in this Article.

2. The power to adopt delegated acts referred to in Article 7(6) and Article 17 shall be conferred on the Commission for a period of five years from the entry into force of this Regulation. The Commission shall draw up a report in respect of the delegation of power not later than nine months before the end of the five year period. The delegation of power shall be tacitly extended for periods of an identical duration, unless the European Parliament or the Council opposes such extension not later than three months before the end of each period.

3. The delegation of power referred to in Article 7(6) and Article 17 may be revoked at any time by the European Parliament or by the Council. A decision to revoke shall put an end to the delegation of the power specified in that decision. It shall take effect the day following the publication of the decision in the Official Journal of the European Union or at a later date specified therein. It shall not affect the validity of any delegated acts already in force.

4. As soon as it adopts a delegated act, the Commission shall notify it simultaneously to the European Parliament and to the Council.

5. A delegated act adopted pursuant to Article 7(6) and Article 17 shall enter into force only if no objection has been expressed either by the European Parliament or the Council within a period of two months of notification of that act to the European Parliament and the Council or if, before the expiry of that period, the European Parliament and the Council have both informed the Commission that they will not object. That period shall be extended by two months at the initiative of the European Parliament or of the Council.

Article 19

Committee procedure

1. The Commission shall be assisted by the committee established by Article 65 of Regulation (EC) No 216/2008. That committee shall be a committee within the meaning of Regulation (EU) No 182/2011.

2. Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply. Where the committee delivers no opinion, the Commission shall not adopt the draft implementing act and the third subparagraph of Article 5(4) of Regulation (EU) No 182/2011 shall apply.

Article 20

Access to documents and protection of personal data

1. With the exception of Articles 10 and 11, which establish stricter rules on access to the data and information contained in the European Central Repository, this Regulation shall apply without prejudice to Regulation (EC) No 1049/2001.

2. This Regulation shall apply without prejudice to national legal acts implementing Directive 95/46/EC and in accordance with Regulation (EC) No 45/2001.

Article 21

Penalties

Member States shall lay down the rules on penalties applicable to infringements of this Regulation. The penalties provided for shall be effective, proportionate and dissuasive. Member States shall notify to the Commission those provisions and any subsequent amendment affecting them.

Article 22

Amendment to Regulation (EU) No 996/2010

Article 19 of Regulation (EU) No 996/2010 is deleted.

However, that Article shall remain applicable until the date of application of this Regulation in accordance with Article 24(3).

Article 23

Repeals

Directive 2003/42/EC, Regulation (EC) No 1321/2007 and Regulation (EC) No 1330/2007 are repealed. They shall remain applicable until the date of application of this Regulation in accordance with Article 24(3).

Article 24

Entry into force and application

1. This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

2. By 16 November 2020, the Commission shall publish and send to the European Parliament and to the Council an evaluation report on the implementation of this Regulation. That report shall cover, in particular, the contribution made by this Regulation to reducing the number of aircraft accidents and related fatalities. If appropriate and on the basis of that report, the Commission shall make proposals for amending this Regulation.

3. This Regulation shall apply from 15 November 2015 and not before the entry into force of the implementing measures referred to in Article 4(5). Article 7(2) shall apply once the delegated and implementing acts specifying and developing the European common risk classification scheme referred to in Article 7(6) and (7) enter into force.

This Regulation shall be binding in its entirety and directly applicable in all Member States. Done at Brussels, 3 April 2014. For the European Parliament The President M. SCHULZ For the Council The President D. KOURKOULAS

(1) OJ C 198, 10.7.2013, p. 73.

(2) Position of the European Parliament of 26 February 2014 (not yet published in the Official Journal) and decision of the Council of 14 March 2014 .

(3) Regulation (EU) No 996/2010 of the European Parliament and of the Council of 20 October 2010 on the investigation and prevention of accidents and incidents in civil aviation and repealing Directive 94/56/EC (OJ L 295, 12.11.2010, p. 35).

(4) Regulation (EC) No 216/2008 of the European Parliament and of the Council of 20 February 2008 on common rules in the field of civil aviation and establishing a European Aviation Safety Agency, and repealing Council Directive 91/670/EEC, Regulation (EC) No 1592/2002 and Directive 2004/36/EC (OJ L 79, 19.3.2008, p. 1).

(5) Regulation (EU) No 182/2011 of the European Parliament and of the Council of 16 February 2011 laying down the rules and general principles concerning mechanisms for control by Member States of the Commission's exercise of implementing powers (OJ L 55, 28.2.2011, p. 13).

(6) Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ L 281, 23.11.1995, p. 31).

(7) Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (OJ L 8, 12.1.2001, p. 1).

(8) Regulation (EC) No 1049/2001 of the European Parliament and of the Council of 30 May 2001 regarding public access to European Parliament, Council and Commission documents (OJ L 145, 31.5.2001, p. 43).

(9) Directive 2003/42/EC of the European Parliament and of the Council of 13 June 2003 on occurrence reporting in civil aviation (OJ L 167, 4.7.2003, p. 23).

(10) Commission Regulation (EC) No 1321/2007 of 12 November 2007 laying down implementing rules for the integration into a central repository of information on civil aviation occurrences exchanged in accordance with Directive 2003/42/EC of the European Parliament and of the Council (OJ L 294, 13.11.2007, p. 3).

(11) Commission Regulation (EC) No 1330/2007 of 24 September 2007 laying down implementing rules for the dissemination to interested parties of information on civil aviation occurrences referred to in Article 7(2) of Directive 2003/42/EC of the European Parliament and of the Council (OJ L 295, 14.11.2007, p. 7).

(12) OJ C 358, 7.12.2013, p. 19.

(13) Regulation (EC) No 1008/2008 of the European Parliament and of the Council of 24 September 2008 on common rules for the operation of air services in the Community (OJ L 293, 31.10.2008, p. 3).

ANNEX I LIST OF REQUIREMENTS APPLICABLE TO THE MANDATORY AND VOLUNTARY OCCURRENCE REPORTING SCHEMES Note: The data fields must be completed with the information requested. If it is not possible for the competent authorities of the Member States or the Agency to include that information because it has not been provided by the organisation or the reporter, the data field may be completed with the value ‘unknown’. However, with a view to ensuring that the appropriate information is transmitted, use of that ‘unknown’ value should, to the best extent possible, be avoided, and the report should, where possible, be completed with the information later. 1. COMMON MANDATORY DATA FIELDS When entering, in their respective databases, information on every occurrence mandatorily reported and, to the best extent possible, every occurrence voluntarily reported, organisations, Member States and the Agency must ensure that occurrence reports recorded in their databases contain at least the following information: (1) Headline — Headline (2) Filing Information — Responsible Entity — File Number — Occurrence Status (3) When — UTC Date (4) Where — State/Area of Occurrence — Location of Occurrence (5) Classification — Occurrence Class — Occurrence Category (6) Narrative — Narrative Language — Narrative (7) Events — Event Type (8) Risk classification 2. SPECIFIC MANDATORY DATA FIELDS 2.1. Aircraft-related data fields When entering, in their respective databases, information on every occurrence mandatorily reported and, to the best extent possible, every occurrence voluntarily reported, organisations, Member States and the Agency must ensure that occurrence reports recorded in their databases contain at least the following information: (1) Aircraft Identification — State of Registry — Make/Model/Series — Aircraft serial number — Aircraft Registration — Call sign (2) Aircraft Operation — Operator — Type of operation (3) Aircraft Description — Aircraft Category — Propulsion Type — Mass Group (4) History of Flight — Last Departure Point — Planned Destination — Flight Phase (5) Weather — Weather relevant 2.2. Data fields relating to air navigation services When entering, in their respective databases, information on every occurrence mandatorily reported and, to the best extent possible, every occurrence voluntarily reported, organisations, Member States and the Agency must ensure that occurrence reports recorded in their databases contain at least the following information: (1) ATM relation — ATM contribution — Service affected (effect on ATM service) (2) ATS Unit Name 2.2.1. Separation Minima Infringement/Loss of Separation and Airspace Infringement-related data fields When entering, in their respective databases, information on every occurrence mandatorily reported and, to the best extent possible, every occurrence voluntarily reported, organisations, Member States and the Agency must ensure that occurrence reports recorded in their databases contain at least the following information: (1) Airspace — Airspace type — Airspace class — FIR/UIR name 2.3. Aerodrome-related data fields When entering, in their respective databases, information on every occurrence mandatorily reported and, to the best extent possible, every occurrence voluntarily reported, organisations, Member States and the Agency must ensure that occurrence reports recorded in their databases contain at least the following information: (1) Location Indicator (ICAO indicator of the airport) (2) Location on the aerodrome 2.4. Aircraft damage or personal injury-related data fields When entering, in their respective databases, information on every occurrence mandatorily reported and, to the best extent possible, every occurrence voluntarily reported, organisations, Member States and the Agency must ensure that occurrence reports recorded in their databases contain at least the following information: (1) Severity — Highest Damage — Injury Level (2) Injuries to persons — Number of injuries on ground (fatal, serious, minor) — Number of injuries on aircraft (fatal, serious, minor)

ANNEX II INTERESTED PARTIES (a) List of interested parties which may receive information on the basis of a case-by-case decision under Article 11(4) or on the basis of a general decision under Article 11(6): 1. Manufacturers: designers and manufacturers of aircraft, engines, propellers and aircraft parts and appliances, and their respective associations; designers and manufacturers of air traffic management (ATM) systems and constituents; designers and manufacturers of systems and constituents for air navigation services (ANS); designers and manufacturers of systems and equipment used on the air side of aerodromes 2. Maintenance: organisations involved in the maintenance or overhaul of aircraft, engines, propellers and aircraft parts and appliances; in the installation, modification, maintenance, repair, overhaul, flight checking or inspection of air navigation facilities; or in the maintenance or overhaul of aerodrome air side systems, constituents and equipment 3. Operators: airlines and operators of aircraft and associations of airlines and operators; aerodrome operators and associations of aerodrome operators 4. Air navigation services providers and providers of ATM-specific functions 5. Aerodrome service providers: organisations in charge of ground handling of aircraft, including fuelling, loadsheet preparation, loading, de-icing and towing at an aerodrome, as well as rescue and firefighting, or other emergency services 6. Aviation training organisations 7. Third-country organisations: governmental aviation authorities and accident investigation authorities from third countries 8. International aviation organisations 9. Research: public or private research laboratories, centres or entities; or universities engaged in aviation safety research or studies (b) List of interested parties which may receive information on the basis of a case-by-case decision under Article 11(4) and (5): 1. Pilots (on a personal basis) 2. Air traffic controllers (on a personal basis) and other ATM/ANS staff carrying out safety-related tasks 3. Engineers/technicians/air traffic safety electronics staff/aviation (or aerodrome) managers (on a personal basis) 4. Professional representative bodies of staff carrying out safety-related tasks