EUROPEAN COMMISSION Brussels, 12.4.2017 COM(2017) 213 final REPORT FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT, THE EUROPEAN COUNCIL AND THE COUNCIL Sixth progress report towards an effective and genuine Security Union



I.INTRODUCTION This is the 6th monthly report on the progress made towards building an effective and genuine Security Union and covers developments under two main pillars: tackling terrorism, organised crime and cybercrime and the means that support them; and strengthening our defences and building resilience against those threats. On 7 April Stockholm became the latest victim of a terrorist attack when a truck was hijacked and driven deliberately through a busy pedestrian shopping street before crashing into a department store killing four people and injuring fifteen. This attack came less than three weeks after the 22 March attack on London and its Houses of Parliament where a vehicle and a knife were used to create carnage in a busy and symbolic location. The low-tech nature of both attacks, similar to those perpetrated in Nice and Berlin last year, once again highlights the challenge posed for Member States' authorities in countering such threats and also the importance of the ongoing work under the Security Union on soft target protection. This report provides an update on progress made on key Security Union legislative and non-legislative files. It also includes a particular focus on combating serious and organised crime – one of the three core areas of the 2015 European Agenda on Security. In the context of the work being done on the new EU Policy Cycle for serious international and organised crime for the years 2018 to 2021, this report sets out what in the Commission's view should be the future EU priorities on combating serious crime and organised crime. Organised crime is a key enabler of terrorism, helping terrorists to acquire weapons and financial means. Increasingly, the border between cybercrime and "traditional" crime is also disappearing as criminals harness the Internet both as a way of scaling up their activities and as a source of procuring means and finding new methods of committing crime. Terrorism, organised crime and cybercrime are thus interlinked areas, and supporting the fight against organised crime is a key priority for action at EU level under the Security Union. 1. Legislative initiatives The Directive (EU) 2017/541 on combating terrorism was published in the Official Journal on 31 March. The new rules will help prevent terrorist attacks by criminalising acts such as the financing of terrorism, undertaking training or travelling for terrorist purposes, as well as organising or facilitating such travel. They also strengthen the rights of the victims of terrorism, and include a catalogue of services to meet the specific needs of victims of terrorism. Member States must transpose the new rules into national law by 8 September 2018. The European Parliament voted in plenary on 14 March 2017 to approve the revision of the Firearms Directive. The proposal significantly broadens the range of prohibited weapons (Category A) taking the most dangerous weapons out of civilian hands. It also brings acoustic and deactivated weapons under the scope of the directive as well as enhances weapons' traceability through reinforced marking rules and information exchange amongst Member States. The Council is expected to give its final agreement on 25 April. The Member States will have 15 months to transpose the new rules into national law and 30 months to put in place data-filling systems for registering all information needed in order to trace and identify firearms. Trilogue discussions between the co-legislators were launched on 21 March 2017 on the Commission's proposal for targeted amendments to the 4th Anti Money Laundering Directive, proposed by the Commission on 5 July 2016. The proposal is designed to cover new means of terrorist financing such as virtual currencies and pre-paid cards and to increase transparency to help to combat money laundering. The Commission calls on the co-legislators to finalise negotiations as quickly as possible on this important proposal, which will help further reduce the means available to terrorists. In terms of strengthening controls at borders, on 7 April, the amendments of the Schengen Borders Code related to systematic checks at external borders, including for EU citizens, entered into force. This important legislation will increase security within Schengen without disrupting the flow of traffic. In some defined circumstances and based on a prior risk assessment to ensure that this does not lead to a security risk, Member States in situations where there is a disproportionate impact on the flow of traffic at specific land and sea borders can, by way of time limited derogation, decide to carry out targeted checks on EU citizens against databases at these borders. Risk assessments must be shared with the European Border and Coast Guard. With regard to initiatives related to border management, trilogue discussions between the co-legislators were launched on 23 March on the Commission's proposals to establish an EU Entry/Exit System to improve border management, combat irregular migration and strengthen internal security by recording the movements of third country nationals across the Schengen area external borders. The Commission calls on the co-legislators to make rapid progress to allow development work on the system starting this year thereby ensuring that it will be operational by early 2020. Technical discussions by each co-legislator are advancing well on the European Travel Information and Authorisation System (ETIAS). The Commission will continue actively to support the co-legislators and drive this forward. The proposal for the EU Entry/Exit System and ETIAS are legislative priorities under the Joint Declaration of the European Parliament, the Council and the Commission. The Institutions therefore agreed to give priority treatment to these files in the legislative process to ensure their swift delivery. Regarding the implementation of recently adopted legislative files, the Commission is continuing to support Member States in the swift implementation of the EU Passenger Name Record (PNR) Directive. On 8 March, the Commission held a fourth meeting on the implementation of the PNR Directive, which showed that several Member States are now in the process of adopting legislation or amending legislation in place prior to the adoption of the PNR Directive. The Commission will continue to monitor and support implementation. 2. Implementation of non-legislative actions The final meeting of the High Level Expert Group on Information Systems and Interoperability (HLEG) is scheduled for 25 April. As part of the process of concluding the work of the group, the subgroup on existing systems met in March to examine customs systems (use of / access to law enforcement information) and law enforcement access for SIS, VIS and Eurodac. In March, the Commission led an EU delegation including the current and future Council Presidencies, the EU Counter Terrorism Coordinator, the Head of the Europol Internet Referral Unit and the Director of the Radicalisation Awareness Network Centre of Excellence, to the United States for meetings with the major social media and internet companies to further the voluntary partnership with the EU and ensure follow-up to the initiatives agreed at the December 2016 EU Internet Forum. As previously reported, the EU Internet Forum set up in December 2015 forms a key part of the Commission's response to the increased abuse of the internet by terrorist organisations. A key deliverable was the presentation of the working prototype of the joint databases of hashes established by the internet companies, which allows companies to mark known terrorist content, to identify similar content, assess this content against their own policies and rapidly remove it irreversibly. The companies are now focusing on testing and enhancing scalability as well as identifying new, particularly smaller, companies that can be brought into the consortium, so as to maximise the impact and reach of the tool. The EU side also highlighted the importance of the companies adopting a more proactive response through automatic detection of abusive content. As part of the Commission's efforts to counter online radicalisation, a further EUR 10 million has been earmarked to support counter narrative campaigns online through the Civil Society Empowerment Programme, a key initiative under the EU Internet Forum. The programme was launched on 15-16 March bringing together 100 stakeholders. The Radicalisation Awareness Network (RAN) and its Centre of Excellence foster the exchange of expertise and best practice among front line practitioners working on prevention and anti-radicalisation. The RAN Centre of Excellence provides support to Member States, e.g. in designing prevention strategies and de-radicalisation programmes in prisons. As announced in the 2016 Communication on Radicalisation, in early 2017 the Commission launched the Network of Prevent Policy Makers pursuing two main objectives: (i) strengthening and institutionalising the exchange of expertise and experience on prevent approaches and prevention policies in Member States; and (ii) involving Member States more closely in RAN activities, by ensuring broader dissemination of RAN findings in a given Member State, ensuring optimal participation of national, regional or local experts at RAN events and identifying needs in Member States for RAN training, workshops and, counselling. The first meeting took place on 2 February 2017 and future meetings (on a quarterly basis) will focus on priority themes such as returnees, de-radicalisation and polarisation.

To help improve cross-border law enforcement cooperation, the Commission organised on 27 March a workshop dedicated to the practice of "cross-border hot pursuits". These are pursuits (typically by car) of suspects, which start in the internal border areas by law enforcement officers of one Member State and continue into the territory of a neighbouring Member State. This first workshop allowed a constructive discussion on the practical implementation of hot pursuit, and on avenues to facilitate this sensitive form of cross-border police cooperation. As regards aviation security, work has advanced on the risk assessment on threat and vulnerability regarding flights coming into the EU from third countries following work launched in January to develop a risk matrix combining threat assessment and detailed elements of vulnerability. This will pave the way for prioritisation and coordination of external capacity-building efforts in vulnerable third countries. While the EU has developed a robust aviation security framework, it is important to speed up the above mentioned processes to close potential security loopholes. The ban on certain electronic devices recently issued by the United States and the United Kingdom underlines the need to foster closer cooperation among Member States, while respecting their right to decide on the introduction of additional security measures on flights from third countries. To enhance such coordination, the Commission organised a classified expert meeting on 31 March with Member States, Australia, Canada and the United States. The objective of the so-called EU Policy Cycle is to ensure effective cooperation between Member States’ law enforcement agencies, EU Institutions and EU Agencies that should lead to coherent and robust operational action targeting the most pressing criminal threats facing the EU. It is an evidence-based process and begins with the presentation by Europol of the Serious and Organised Crime Threat Assessment (EU SOCTA), which delivers a set of recommendations of the main crime threats facing the EU. The EU SOCTA report is the basis for the discussion between Member States on priorities tackling the crime threats at EU level. The priorities are then adopted by the Justice and Home Affairs Council and are then reflected in cross-border operational activities at Member State level, notably through joint actions between Member States and EU Agencies with the support of the European Multidisciplinary Platform Against Criminal Threat. The Commission has provided and will continue to provide financial support for the implementation of the EU Policy Cycle and has allocated EUR 4 million for 2017 in addition to the EUR 9 million funding in 2015 and 2016. Overall, the current EU Policy Cycle (2013-2017) has been successfully implemented. An independent evaluation contracted by the Commission concluded that it had achieved its main objective of improving cooperation between Member States in the fight against serious and organised crime. The EU Policy Cycle has led to an improvement in the exchange of information, sharing of good practices and the launch of many joint investigations and operations by the Member States. It has also contributed to building relations and trust, including with third countries. The new Policy Cycle was launched by the presentation by Europol on 9 March 2017 of the EU SOCTA 2017 report. The report explores potential links between serious and organised crime and terrorism, namely that organised crime can feed terrorism through activity such as the trafficking of firearms and the production of false documentation or proceeds from drug smuggling. This was the approach proposed in the European Agenda on Security followed in the Communication delivering on the European Agenda on Security to fight against terrorism and pave the way towards an effective and genuine Security Union. The EU SOCTA 2017 recommends focusing on five priority crime threats: (1) cybercrime, (2) drug production, trafficking and distribution, (3) migrant smuggling, (4) organised burglaries and theft (organised property crime), and (5) trafficking in human beings. It also recommends addressing three cross-cutting issues that enable or enhance all types of serious and organised crime: (a) document fraud, (b) criminal finance including money laundering, and (c) online trade in illicit goods and services. Based on the EU SOCTA 2017, the Commission and the Council Presidency are preparing their suggestions for the crime tackling priorities of the new EU Policy Cycle for the years 2018 to 2021, to be discussed in the Standing Committee on operational cooperation on internal security, to be endorsed at the June 2017 Justice and Home Affairs Council. In view of setting the future EU priorities on combating serious crime and organised crime, the Commission supports the five priority crime threats identified by Europol (see sections 1 to 5 below). In addition to that, the Commission considers that particular attention and financial resources should also be dedicated at EU level to tackling the following three crime threats: (6) firearms trafficking, (7) VAT fraud and (8) environmental crime. These three areas should also be priority crime threats under the new EU Policy Cycle (see sections 6 to 8 below). A key issue highlighted in the EU SOCTA 2017 is the use of new technologies by criminals. For almost all types of organised crime, criminals are deploying and adapting technology with ever-greater skill and to ever-greater effect. There is much greater use of the internet for all types of illicit trade in goods and services. This requires law enforcement authorities to be equipped with adequate tools to fight this type of online criminality and to train and learn together. The European Union Agency for Law Enforcement Training has a crucial role to play in providing appropriate training, in line with policy priorities and identified threats, to front-line law enforcement officers. There is also an important external dimension of serious and organised crime. The EU SOCTA 2017 highlights that individuals from over 180 different nationalities – residing inside or outside the EU – are involved in organised crime activity inside the EU. 40% of suspects are not citizens of Member States. The key trafficking routes for organised crime threats originate from outside the EU. Action is underway to address organised crime threats externally. It is important to continue ensuring the linkages between EU internal security and external action when addressing serious and organised crime threats, including through Europol's cooperation with third countries. 1.Cybercrime Cyber-attacks are increasing in terms of intensity, volume and quality. By its very nature, cybercrime is international: victims, criminals and evidence are often located in different countries, under several jurisdictions. Member States have shown keen interest in the cyber-crime priority as demonstrated by the number of operational action plans set up in the areas of cyber-attacks, online child sexual exploitation and payment card fraud. At EU level, the European Cybercrime Centre at Europol (EC3) has made a significant contribution to the fight against cybercrime. Eurojust, through secondment of an expert and membership of the programme board, works closely with EC3. EC3 also hosts the Joint Cybercrime Action Taskforce . Its mission is to drive intelligence-led, coordinated action against key cybercrime threats through cross-border investigations and operations by its partners. Further steps include exploring possible solutions to remove obstacles to criminal investigations against cybercrime, by identifying specific initiatives on access to evidence and information. Cooperation to fight cybercrime must maintain its focus on identification and protection of victims building on the current victims' rights set out in EU law and current best practice. Cooperation against online child sexual exploitation must continue and be further strengthened. Concerning payment card fraud, it is necessary to widen existing law enforcement cooperation to a broader range of criminal activities which target non-cash means of payments. As announced in the Action Plan on strengthening the fight against terrorism financing the Commission is preparing to update the 2001 Framework Decision combating fraud and counterfeiting of non-cash means of payment. 2.Drug production, trafficking and distribution The illicit drugs market remains the largest criminal market in the EU. EU SOCTA 2017 shows that more than one third of the criminal groups active in the EU are involved in the production, trafficking or distribution of various types of drugs. The EU retail drug market is estimated to be worth at least EUR 24 billion a year. Drug trafficking also supports the informal economy and spills over into violence and other illegal activities and causes major social problems. The EU acts against drug trafficking under the EU Drugs Strategy 2013-2020, covering both the reduction of the supply and demand for drugs. The Commission proposed on 15 March a draft new EU Drug Action Plan for the period 2017-2020. To enable the EU to act more swiftly and more effectively on new psychoactive substances, the Council agreed in December 2016 on a general approach for a new legislative package to address new psychoactive substances and to bring harmful substances under control at EU level. Discussions between the co-legislators were launched on 1 March. 3.Migrant smuggling Migrant smuggling to the EU today is one of the fastest growing forms of organised crime. Migrant smuggling not only fuels irregular migration to the EU – thus affecting border security and undermining migration management – but also represents a serious form of crime, which increasingly exposes migrants to violence, exploitation and loss of life. The European Agenda on Migration and the EU Action Plan against Migrant smuggling identified the need to prioritise better prevention and fight against migrant smuggling, including reducing irregular migration and loss of life in the Mediterranean. The increased support to Europol, including the establishment of a dedicated European Migrant Smuggling Centre, is designed to help address these challenges. The one year activity report illustrates the comprehensive support it provides to European police and border control authorities in coordinating highly complex cross-border anti-smuggling operations. Eurojust has also designated judicial contact points at the Hotspots in Greece and Italy to channel relevant information and cases to Eurojust’s National Desks for judicial follow-up and coordination at EU level. The migrant smuggling is also an important action along the Central Mediterranean route proposed in the Joint Communication on 25 January 2017.