ANNEX 2

Cases of single event reporting and corresponding information

The reporting of single events in EUROSUR consists in linking different building blocks of information, listed below, that help describe the situation at EU external borders.

The first report shall contain the set of information collected to trigger the first reaction. Based on this first report the various parties to EUROSUR shall endeavour to complement this information as provided for in this annex.

1. SINGLE EVENT REPORTING OF UNAUTHORISED BORDER CROSSING, OR SUSPICION TO ATTEMPT AN UNAUTHORISED BORDER CROSSING

The national coordination centre shall report any event related to unauthorised border crossing. The report on unauthorised border crossing can be linked to facilitation or trafficking in human being as provided for in paragraph 2 and to search and rescue event in line with paragraph 8.

The first report on the event shall be sent no later than 24 hours after the event is detected.

The originators and the owners shall endeavour to report the following information as available.

1.1. Type of event

(a) attempt or actual illegal border crossing;

(b) open or clandestine crossing.

1.2. Circumstances of the event

(a) time and position;

(b) destination (entry or exit of Schengen or unknown);

(c) last country of embarkation (only applicable on entry for maritime and air border sections ports and airports);

(d) country of destination;

(e) purpose of illegal border-crossing;

(f) circumstances of detection: (1) during a check at border crossing point, (2) during a border surveillance operation, (3) other (secondary movement, pre-frontier area);

(g) attempts to hide from the border control;

(h) means of transport: (1) Flight (a report on the flight shall be linked to the report as provided for in paragraph 7) (2) Vessel (a report on the vessel shall be linked to the report as provided for in paragraph 1, or to the search and rescue case as provided for in paragraph 6) (3) Container (4) Lorry or commercial vehicle (5) Passenger car (6) Bus or coach (7) Train (8) Pedestrian.

1.3. Persons involved

(a) total numbers of persons involved;

(b) number of minors;

(c) number of persons in need of international protection;

(d) breakdown by nationalities (supposed/confirmed), citizenships;

(e) age group.

2. SINGLE EVENT REPORTING OF FACILITATION OR TRAFFICKING IN HUMAN BEINGS, OR SUSPICION TO ATTEMPT FACILITATION OR TRAFFICKING IN HUMAN BEINGS

The national coordination centre shall report any event of facilitation, or suspicion to attempt facilitation, and of trafficking, or suspicion to attempt trafficking of human beings.

The first report on the event shall be sent no later than 24 hours after the event is detected.

The event can be linked to an event related to unauthorised border crossing.

The originators and the owners shall endeavour to report the following information, as available:

2.1. Type of event

(a) facilitation, trafficking in human being;

(b) stage (suspicion, attempt, committed).

2.2. Circumstances of the event

(a) time and location;

(b) destination (entry or exit of Schengen or unknown);

(c) circumstances of detection: (1) during a check at border crossing point, (2) during a border surveillance operation, (3) other (secondary movement, pre-frontier area);

(d) means of transport: (1) Flight (a report on the flight shall be linked to the report as provided for in paragraph 7) (2) Vessel (a report on the vessel shall be linked to the report as provided for in paragraph 1, or to the search and rescue case as provided for in paragraph 6) (3) Container (4) Lorry or commercial vehicle (5) Passengers car (6) Bus or coach (7) Train (8) Pedestrian.

2.3. Perpetrators

(a) total numbers of persons involved;

(b) age groups:

(c) break down by nationalities (supposed/confirmed), and countries of origin;

(d) form of exploitation (sexual, labour, other).

2.4. Victims (if the event is not related to an unauthorised border crossing)

(a) total numbers of victims;

(b) number of minors;

(c) number of un-accompanied minors and number of persons in need of international protection;

(d) the breakdown of victims per transit countr(ies);

(e) breakdown by nationalities (supposed/confirmed) and countries of origin.

2.5. Motivation and modus operandi

(a) modus operandi;

(b) purpose of facilitation or targeted exploitation in the case of trafficking in human being.

3. SINGLE EVENT REPORTING OF TRAFFICKING, OR SUSPICION TO ATTEMPT TRAFFICKING OF GOODS

In addition to the indicators referred to in Annex 1 paragraph 4, the national coordination centre shall report single events of trafficking, or suspicion to attempt trafficking of goods in the following cases:

(1) The amounts seized are above the thresholds defined in Annex 3;

(2) The trafficking, or suspicion to attempt trafficking is linked to a potential terrorist activity or could pose a threat for the security of the Union or of its Member States;

(3) The trafficking, or suspicion to attempt trafficking entails a reaction from other Member States and the Agency or impacts border control measures;

(4) The trafficking, or suspicion to attempt trafficking of goods is linked to a specific modus operandi. In that case the reports shall be linked to risk analysis report describing it;

(5) The seizure of goods is abnormal, and could indicate a new criminal pattern.

The originators and the owners shall endeavour to report the following information as available.

3.1. Type of event

When describing the type of events the originator shall use the categories and subcategories of Annex 1 paragraph 4 and the units referred to in Annex 3 as appropriate.

3.2. Circumstances of the event

(a) time and position;

(b) destination (entry or exit of Schengen or unknown);

(c) circumstances of detection: (1) during a check at border crossing point, (2) during a border surveillance operation, (3) other (secondary movement, pre-frontier area);

(d) means of transport: (1) Flight (a report on the flight shall be linked to the report as provided for in paragraph 7) (2) Vessel (a report on the vessel shall be linked to the report as provided for in paragraph 1, or to the search and rescue case as provided for in paragraph 6) (3) Container (4) Lorry or commercial vehicle (5) Passenger car (6) Bus or coach (7) Train (8) Pedestrian (9) Freight or postal parcel;

(e) modus operandi or suspected modus operandi, including: (1) concealment type; (2) concealment details.

3.3. Type of goods

(a) category and subcategory in line with annex 1 paragraph 4;

(b) amount (estimated/seized);

(c) estimated value.

3.4. Persons involved

(a) total numbers of persons involved;

(b) role of the person;

(c) number of minors;

(d) break down by nationalities (supposed/confirmed).

4. SINGLE EVENT REPORTING OF DOCUMENT FRAUD

The national coordination centre shall report any single event related to document fraud or document criminality observed during a border control operation.

The first report on the event shall be sent no later than 24 hours after the event is detected.

The event can be linked to an event related to unauthorised border crossing, facilitation or trafficking in human beings, trafficking of goods, other forms of cross-border crime.

The originators and the owners report the following information as available.

4.1. Type of document fraud

4.2. Circumstances of the event

(a) time and position;

(b) destination (entry or exit of Schengen or unknown);

(c) circumstances of detection: (1) during a check at border crossing point, (2) during a border surveillance operation, (3) other (secondary movement, pre-frontier area);

4.3. Information on the person

(a) claimed nationality of person;

(b) gender;

(c) age group.

4.4. Information on the document

(a) document type and subtype (passport, id card, residence permit, visa, border stamp, other);

(b) nationality of document;

(c) document usage (presented, concealed, n.a.);

(d) border crossing point of embarkation;

(e) border crossing point of transit;

(f) border crossing point of destination;

(g) chip;

(h) border stamp.

5. SINGLE EVENT REPORTING ON OTHER FORMS OF CROSS-BORDER CRIME

In addition to the indicators referred to in Annex 1 paragraph 7 the national coordination centre shall report single events related to other crime in the following cases:

(1) The cross-border crime, or suspicion to attempt cross-border crime or the hit in the database or large-scale IT system is linked to a potential terrorist activity or could pose a threat for the security of the Union or of its Member States;

(2) The cross-border crime, or suspicion to attempt cross-border crime or the hit in the database or large-scale IT system entails a reaction from other Member States and the Agency or has an impact on border control measures;

(3) The cross-border crime, or suspicion to attempt cross-border crime is linked to a specific modus operandi. In that case the reports shall be linked to risk analysis report describing it.

The originators and the owners shall endeavour to report the following information as available:

5.1. Type of event

When describing the type of events the originator shall use the categories and subcategories of Annex 1 paragraph 7.

5.2. Circumstances of the event

(a) time and position;

(b) destination (entry or exit of Schengen or unknown);

(c) circumstances of detection: (1) during a check at border crossing point, (2) during a border surveillance operation, (3) other (secondary movement, pre-frontier area);

(d) means of transport: (1) Flight (a report on the flight shall be linked to the report as provided for in paragraph 7) (2) Vessel (a report on the vessel shall be linked to the report as provided for in paragraph 1, or to the search and rescue case as provided for in paragraph 6) (3) Container (4) Lorry or commercial vehicle (5) Passenger car (6) Bus or coach (7) Train (8) Pedestrian (9) Freight or postal parcel.

5.3. Persons involved

(a) total numbers of persons involved;

(b) role of the person;

(c) number of minors;

(d) break down by nationalities (supposed/confirmed).

6. SINGLE EVENT REPORTING OF VESSELS OF INTEREST

Information related to vessels of interest shall be reported:

(1) if the vessel detected is on the watch list of suspected vessels, in that case the reporting shall be linked to the corresponding watch list;

(2) if the vessel is involved in an event listed in this annex, in that case the report shall be linked to the corresponding event;

(3) if the vessel is deemed suspect by the originator, in that case the reporting shall be linked to a risk analysis report.

The first report on the vessel shall be sent no later than 24 hours after the first detection.

The originators and the owners shall endeavour to report the following information as available:

6.1. Position and status of the vessel

Information on the position of the vessel of interest comprises:

(a) the time of measurement, position and radius of uncertainty, heading and speed if the asset is moving;

(b) the status of the vessel (engines off, smoke detected, anchored etc.);

(c) the source of the measurement or detection (radar, positioning system, etc.);

(d) the previous known positions of the vessel before the event. The originators that can obtain information on the vessel shall seek to update its position using the information sources at their disposal as early as possible. The information on the position of a vessel of interest at sea, once detected, shall be updated at least every hour.

6.2. Type of vessel

Information on the type of the vessel shall help discriminate

(a) between passenger ship, sailing boat, motor yacht, fishing vessel, container ship, bulk carriers, oil tanker, general cargo ship, high-speed craft, mobile offshore drilling unit, special purpose ship;

(b) between the ship usage: either commercial work or leisure.

6.3. Ship identifiers

Information on the ship identifiers comprises:

(a) the flag;

(b) the name of the ship;

(c) International Maritime Organisation (IMO) number, Maritime Mobile Service Identity (MMSI) number and other visual and radio identifiers used to contact and characterize the vessels.

6.4. Passengers and cargo

Information on the passengers and cargo includes:

(a) number of crew members;

(b) breakdown by nationality of the crew members;

(c) number of passengers;

(d) breakdown by nationality of the passengers;

(e) type and amount/weight of cargo.

7. SINGLE EVENT REPORTING ON EXTERNAL FLIGHTS OF INTEREST

Information related to external flights of interest shall be reported:

(1) if the flight detected is on the watch list of suspicious flights, in that case the reporting shall be linked to the corresponding watch list;

(2) if the flight is involved in an event listed in this annex, in that case the report shall be linked to the corresponding event;

(3) if the vessel flight is deemed suspect by the originator; in that case the reporting shall be linked to a risk analysis report.

The first report on the flight shall be sent no later than 24 hours after the first detection.

The originators and the owners shall endeavour to report the following information as available.

7.1. Position of the aircraft of interest

Information on the position of the flight of interest comprises:

(a) time of measurement;

(b) position including altitude and volume of uncertainty;

(c) heading and speed;

(d) source of the measurement or detection (radar, positioning system, etc.).

The originators that can obtain information on the aircraft shall seek to update its position using the information sources at their disposal.

The information on the position of aircraft of interest in flight shall be updated in near real time.

7.2. Type of the aircraft of interest

Information on the type of the aircraft shall help distinguish between fixed or rotary wings, jet or propeller, piloted aboard or remotely, and if available could inform on the exact model.

7.3. Aircraft identifiers

Information on the aircraft identifiers comprises the different visual and radio identifiers used to contact and characterize the aircraft.

7.4. Information on the flight

Information on the flight comprises:

(a) the flight type (commercial private governmental etc.);

(b) the flight identifier, including the commercial flight identifiers;

(c) the place of departure;

(d) the destination;

(e) the reference to the flight plan.

7.5. Passengers and cargo

Information on the passengers and cargo includes:

(a) number of crew;

(b) breakdown by nationality of the crew members;

(c) number of passengers;

(d) breakdown by nationality of the passengers;

(e) type of cargo.

8. SINGLE EVENT REPORTING ON SEARCH AND RESCUE EVENTS

The national coordination centre shall report any event related to search and rescue in line with Article 21.

The reporting related to possible search and rescue event shall cover the duration of the event from the first detection of the vessel of interest or from the alert received regarding people in distress at sea until the completion of the border crossing event and the termination of the related search and rescue case.

The originators and the owners shall endeavour to report the following information as available.

8.1. Links to the reporting on the vessel in distress in line with paragraph 6

The report may also be linked to other vessels of interest involved in the search and rescue case such as mother ships.

8.2. Reporting on the status of the search and rescue case including

(a) the search and rescue phase (uncertainty, alert, distress, search and rescue operation ongoing, search and rescue operation concluded);

(b) the competent Maritime Rescue Coordination Centre;

(c) the foreseen place of safety or place of safety, when the search and rescue operation is completed.

8.3. Links to the reporting of paragraph 1 and paragraph 2 as appropriate