The position to be taken on the Union's behalf in the next meeting of the EEA Joint Committee or by exchange of letters shall be based on the draft act of the EEA Joint Committee attached to this Decision.

(4)It is appropriate to establish the position to be taken on the Union's behalf in the EEA Joint Committee, as the amendment will be binding on the Union,

(3)In application of article 9h(3) of the Protocol, amendments to Chapter 3 and to Annexes I and II to Protocol 10 are necessary to take into account the development of Union legislation on matters covered by this Chapter and Annexes I and II. Pursuant to article 9(h)3, if the decision cannot be adopted for simultaneous implementation, the amendments provided for in the draft decision submitted for the Contracting Parties' approval shall be applied from 15 March 2021, in compliance with the internal procedures of the Contracting Parties. This choice of date coincides with the first Release of the Import Control System 2, in which Norway has agreed to participate.

(2)Pursuant to Article 98 the Agreement, the EEA Joint Committee may adopt decision amending Chapter IIa and the Annexes to Protocol 10 during its next session or by exchange of letters,

(1)Protocol 10 to the EEA Agreement on the simplification of inspections and formalities in respect of the carriage of goods and on customs security measures (‘the Protocol’) was amended by the EEA by Joint Committee Decision and entered into force on 1 July 2009.

Having regard to the proposal from the European Commission,

Having regard to the Treaty on the Functioning of the European Union, and in particular Article(s) Article 207(4) TFEU in conjunction with Article 218(9) thereof,

on the position to be taken on behalf of the European Union in the EEA Joint Committee established by the Agreement on the European Economic Area as regards the amendment of Chapter IIa and Annexes I and II of Protocol 10 to the EEA Agreement, on simplification of inspections and formalities in respect of carriage of goods

As the act of the EEA Joint Committee will amend the Protocol 10 to the EEA Agreement on the simplification of inspections and formalities in respect of the carriage of goods, it is appropriate to publish it in the EEA Section of the Official Journal of the European Union after its adoption.

Norway will also contribute to the operational costs incurred by the European Commission to cover the yearly costs for the conformance testing, the maintenance of the infrastructure (hardware, software, hosting, licenses, etc.), of the ICS2 central components and of the related applications and services required for their operation and interconnection (quality assurance, helpdesk and IT Service Management). These operational costs are based on the 4% allocation formula but are not a fixed yearly rate. As such, the maximal operational costs are capped at EUR 450,000 per year.

Norway will contribute to each release of ICS2, hence paying a flat fee for the development costs incurred by the European Commission. For Release 1, these costs amount to EUR 520,000, for Release 2 EUR 550,000 and for Release 3 EUR 550,000, and are based on an allocation formula of 4%.

This incurs budgetary implications for Norway. The breakdown of costs are laid out in article 17 of Annex I and have been further communicated to Norway via a non-paper.

The proposed amendments relating to the amendment of the Agreement on customs security measures is based on the principle that Norway will join the ICS2 programme as of its first release on 15 March 2021. Further releases will take place in 2023 and 2024.

The legal basis of the proposed decision should be the first subparagraph of Article 207(4), in conjunction with Article 218(9) TFEU and Article 1(2) of Council Regulation No 2894/94.

Therefore, the substantive legal basis of the proposed decision is Article 207(4) TFEU.

The main objective and content of the envisaged act relate to common commercial policy.

The substantive legal basis for a decision under Article 218(9) TFEU and Article 1(2) of Council Regulation No 2894/94 depends primarily on the objective and content of the envisaged act in respect of which a position is taken on the Union's behalf concerning arrangements for implementing the Agreement on the European Economic Area. If the envisaged act pursues two aims or has two components and if one of those aims or components is identifiable as the main one, whereas the other is merely incidental, the decision under Article 218(9) TFEU must be founded on a single substantive legal basis, namely that required by the main or predominant aim or component.

Therefore, the procedural legal basis for the proposed decision is Article 218(9) TFEU, and taking into consideration Article 1(2) of Council Regulation No 2894/94 concerning arrangements for implementing the Agreement on the European Economic Area establishing that “The Community's position regarding EEA Joint Committee decisions which simply extend acts of Community legislation to the EEA, subject to any technical adjustments needed, shall be adopted by the Commission.”

The envisaged act does not supplement or amend the institutional framework of the Agreement.

The act which the EEA Joint Committee is called upon to adopt constitutes an act having legal effects.

The EEA Joint Committee is a body set up by an agreement, namely the EEA Agreement.

The concept of ‘acts having legal effects’ includes acts that have legal effects by virtue of the rules of international law governing the body in question..

Article 218(9) of the Treaty on the Functioning of the European Union (TFEU) provides for decisions establishing ‘the positions to be adopted on the Union’s behalf in a body set up by an agreement, when that body is called upon to adopt acts having legal effects, with the exception of acts supplementing or amending the institutional framework of the agreement.’

By mutual agreement, the amended Protocol shall then be implemented by the Contracting Parties.

The position to be taken by the EU within the EEA Joint Committee should be established by Council decision on the basis of a proposal from the Commission.

Article 92 of the Agreement provides that the Contracting Parties shall hold consultations in the EEA Joint Committee on any point of relevance to the Agreement. The Contracting Parties are to cooperate in good faith with a view to facilitating, at the end of the process, the decision-taking in the EEA Joint Committee. To that effect, the EEA Joint Committee established under the EEA Agreement should adopt a Decision agreeing to the amendment of Chapter IIa and Annexes I and II of Protocol 10. This is done by a EEA Joint Committee Decisison during a meeting of the EEA Joint Committee in which the EU is a represented party.

3.5.Position to be taken by the Union

In line with the reasoning behind this structural revision of Annex I, two new Titles have been created to cover:

In terms of the structure of the amended Protocol, there has been a need to split into two different Titles the sections of covering the Entry (Title I) and Exit (Title IV) of goods within Annex I on Entry and Exit Summary Declarations, mainly due to the more detailed provisions concerning Entry Summary Declarations (ENS) and ICS2.

The amendment of Article 24 of Commission Implementing Regulation (EU) 2015/2447 was adopted by the European Commission Customs Code Committee on 28 September 2020. The date of publication of the amendment has not yet been determined.

The latest amendments to Annex B of Commission Delegated Regulation (EU) 2015/2446 and Annex B of Commission Implementing Regulation (EU) 2015/2447 have yet to be formally adopted. As such, a placeholder has been left within the proposed amendment to this Agreement to update the footnotes once the amendments have been published (see Annex I, Article 2 of the amended Protocol).

·Article 24 regarding compliance for authorised economic operators replacing the existing article 2 Annex II of the Agreement;

–Commission Implementing Regulation (EU) 2019/2151 of 13 December 2019 establishing the work programme relating to the development and deployment of the electronic systems provided for in the Union Customs Code;

·Article 6(1), Articles 12, 16, 46, 47, and Articles 127 to 133 establish the legal basis for the development and deployment of ICS2;

·Article 127 regarding the relevant provisions for lodging of an entry summary declaration: form and content, use of electronic systems, lodging and waivers, time limits, registration, persons lodging, security and safety related risk analysis, multiple filing;

–Regulation (EU) No 952/2013 of the European Council and the Council of 9 October 2013 laying done the Union Customs Code:

The following legal texts have been used as the basis for the major amendments to the Protocol:

The main changes introduced in the draft amended Protocol are mainly based on the Union Customs Code Regulation (EU) No 952/2013 and its Implementing Acts Reg.(EU)2015/2447 and Delegating Acts.(EU) 2015/2446. These changes align the amended Protocol with the most recent EU legislation relevant to customs security measures, to entry and exit summary declarations (ENS and EXS), to the development and deployment of the relevant electronic systems, to authorised economic operators (AEO), to common risk analysis process and risk management framework in line with the most recent legislation related to the protection of personal data.

3.3.Proposed legal amendments to the Protocol in the context of the modernisation of the UCC

As such, the adhesion to the ICS2 programme entails technical and financial adaptations in relation to the Agreement, and most particularly amendments that reflect the modernisation of the Customs Union and its legislation.

On 7 October 2020, Norway confirmed to participate in the Import Control System 2 (ICS2), allowing for the participation of the partner country in the common framework of ICS2, which will be launched on 15 March 2021.

As an advance cargo information system, ICS2 will collect data about all goods entering the EU prior to their arrival. Economic Operators will have to declare safety and security data to ICS2, through a so-called Entry Summary Declaration. The obligation to start filing such declarations will not be the same for all Economic Operators. It will depend on the type of services that they provide in the international movement of goods and is linked to the three release dates of ICS2 (15 March 2021, 1 March 2023, and 1 March 2024).

The programme will help establish an integrated EU approach to reinforce customs risk management framework. This is a core delivery of the Union Customs Code and customs risk management strategy, in line with the action plan adopted by the Council in 2014 and the objectives of the Von der Leyen Commission for taking the Customs Union to the next level.

ICS2 is the first line of defence in terms of protecting the internal market and EU citizens. Through improved data-driven customs security processes it supports effective risk-based customs controls whilst facilitating free flow of legitimate trade across the EU external borders.

3.2.Proposed amendments to the Protocol in the context of Norwegian participation in ICS2 programme

It is in the context of the development of such a common framework for improved customs controls and following the modernisation of the Customs Union and its legislation that the Agreement has been amended. This should ensure the highest standard of security and control for goods crossing the borders and entering the customs territories of the EU and the Kingdom of Norway.

In order to increase security in the international trade of goods, the EU introduced new measures in 2006 designed to ensure higher standards in customs controls (IP/06/1821). These include rules and time limits for traders on the submission of information on goods before they are imported to or exported from the EU (electronic entry and exit declarations); an EU system of risk analysis and management; and a system to facilitate EU Authorised Economic Operators (AEOs). The EU and Norway also agreed to work towards a common framework for risk management, including the exchange of risk-related information as appropriate.

–Commission Implementing Regulation (EU) 2017/2089, which includes the responsibilities of the parties with regards to data protection and controllership;

The Protocol is based on Regulation (EU) No 952/2013 of the European Council and the Council of 9 October 2013 laying done the Union Customs Code and the following Implementing and Delegating Acts:

The Protocol previously amended in 2009 by Decision of the EEA Joint Committee underlines the special bilateral trade relations between the EU and Norway and the strong mutual interest that exists in implementing equivalent customs security measures. Protocol 10 to the Agreement was amended in the mutual interest of the European Community and the EFTA States to avoid unnecessary restrictions and to provide a set of provisions establishing equivalent customs security measures for the transport of goods coming from and going to third countries.

3.Position to be taken on the Union's behalf

Pursuant to article 103 of the Agreement, “If upon the expiry of a period of six months after the decision of the EEA Joint Committee such a notification has not taken place, the decision of the EEA Joint Committee shall be applied provisionally pending the fulfilment of the constitutional requirements unless a Contracting Party notifies that such a provisional application cannot take place. In the latter case, or if a Contracting Party notifies the non-ratification of a decision of the EEA Joint Committee, the suspension provided for in Article 102 (5) shall take effect one month after such a notification but in no event earlier than the date on which the corresponding EC act is implemented in the Community”.

The envisaged act will become binding on the parties in accordance with article 104 of the Agreement which provides that ‘Decisions taken by the EEA Joint Committee in the cases provided for in this Agreement shall, unless otherwise provided for therein, upon their entry into force be binding on the Contracting Parties which shall take the necessary steps to ensure their implementation and application’.

The purpose of the envisaged act is to ensure the highest standard of security and control for goods crossing the borders and entering the customs territories of the EU and Norway.

During its next meeting or by exchange of letters, the Joint Committee is to adopt a decision regarding the amendment of the Protocol (‘the envisaged act’).

In order to guarantee the legal security and the homogeneity of the EEA, the EEA Joint Committee should take a decision concerning an amendment to the Protocol in order to take into account the development of Union legislation. These amendments should be applied simultaneously with those introduced in Union legislation and with due respect for the internal procedures of the Contracting Parties.

The Joint Committee meets, in principle, at least once per month and its responsibility is to ensure the effective implementation and operation of the Agreement. To this end, it carries out exchanges of views and information and takes decisions in the cases provided for in the Agreement and relative to its Protocols. For that purpose, Protocol 10 can be amended by a decision of the EEA Joint Committee in accordance with Articles 93 (2), 99, 100, 102 and 103 of the Agreement.

The EEA Joint Committee is established by Article 92 of the EEA Agreement. The EEA Joint Committee consists of representatives of the Contracting Parties and can take decisions by agreement between the EU, on the one hand, and the EFTA States speaking with one voice, on the other.

The Agreement will also include a financing arrangement (Annex I, Title III), which covers the costs of the development and operational use of ICS2 by Norway and the functional details of ICS2, which are exposed in the technical arrangements (Annex I, Title II).

The proposed amendments to the Agreement are the result of negotiations which started in November 2019 and ended in October 2020 between the EU, Switzerland and Norway. The amendments to Chapter IIa of the Protocol are destined to take into account the development of the relevant EU legislation also in the area of Authorised Economic Operators (AEO) and the risk management and risk analysis framework. This will ensure an equivalent level of security at the external borders and will improve the security and safety of the common security area.

ICS2 therefore represents an essential EU customs instrument for improving the management of security and safety border controls at entry, supporting the EU’s customs pre-arrival security and safety programme. In order to maintain the same level of security at the external borders, Norway has agreed to join the ICS2 project and be operational by the starting of the first release of ICS on 15 March 2021. These provisions will also apply in an equivalent manner with the similar amendments to the customs security agreement between EU and Switzerland.

The Union Customs Code (UCC) has provided for measures included in the new ICS2 project that will substantially change the advance cargo customs operations for goods entering the EU and overall common risk management framework. The new programme will remodel the existing process in terms of IT, legal, customs risk management/controls and from trade operational perspectives. It will collect data about all goods entering the EU prior to their arrival. Economic Operators (EOs) will have to declare safety and security data to ICS2, through the Entry Summary Declaration (ENS). The obligation to start filing such declarations will not be the same for all EOs. It will depend on the type of services that they provide in the international movement of goods and is linked to the three release dates of ICS2 (15 March 2021, 1 March 2023, and 1 March 2024). Advance cargo information and risk analysis will enable early identification of threats and help customs authorities to intervene at the most appropriate point in the supply chain

Since 2016, the Commission has conducted preliminary discussions in view of updating the legislation of the Agreement and integrating Norway’s future participation in the EU’s new customs pre-arrival security and safety programme, Import Control System 2 (ICS2), which is a centralised system.

Currently, each Party has its own system for managing the entry summary declarations (in the EU, this is the Import Control system ICS) but there is no bridge between both systems.

The Protocol on the simplification of inspections and formalities in respect of the carriage of goods and on customs security measures (‘the Protocol) waives the obligation of traders to provide customs with an entry summary declaration prior to the import and export in bilateral trade between the EU and Norway. Meanwhile, in trade with third countries, Norway implements customs security measures equivalent to those in the EU. The Protocol entered into force on 1 July 2009 and has ensured both smooth trade flows between Norway and the EU and a high level of security in the supply chain.

2.1.The amendment of the Protocol on the simplification of inspections and formalities in respect of the carriage of goods and on customs security measures

This proposal concerns the decision establishing the position to be taken on the Union's behalf in the EEA Joint Committee in connection with the envisaged adoption of the amendment of Protocol 10 to the Agreement between the European Community and the European Economic Area (‘the EEA Agreement’) on the simplification of inspections and formalities in respect of the carriage of goods and on customs security measures, and applicable only to the EU and Norway.

on the position to be taken on behalf of the European Union in the EEA Joint Committee established by the Agreement on the European Economic Area as regards the amendment of Chapter IIa and Annexes I and II of Protocol 10 to the EEA Agreement, on simplification of inspections and formalities in respect of carriage of goods

EUROPEAN COMMISSION Brussels, 12.1.2021 COM(2021) 4 final ANNEX to the Proposal for a Council Decision on the position to be taken on behalf of the European Union in the EEA Joint Committee established by the Agreement on the European Economic Area as regards the amendment of Chapter IIa and Annexes I and II of Protocol 10 to the EEA Agreement, on simplification of inspections and formalities in respect of carriage of goods

















































ANNEX Doc. No. 20/00862-1 Case No. 20/00862 DECISION OF THE EEA JOINT COMMITTEE No […] of […] amending Protocol 10 to the EEA Agreement, on simplification of inspections and formalities in respect of carriage of goods THE EEA JOINT COMMITTEE, Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98 thereof, Whereas: (1)The relevant provisions of Council Regulation (EEC) No 2913/92 of 12 October 1992 establishing the Community Customs Code and Commission Regulation (EEC) No 2454/93 laying down provisions for the implementation of Council Regulation (EEC) No 2913/92 establishing the Community Customs Code have been replaced by the relevant provisions of Regulation (EU) No 952/2013 of the European Parliament and of the Council of 9 October 2013 laying down the Union Customs Code, Commission Delegated Regulation (EU) 2015/2446 of 28 July 2015 supplementing Regulation (EU) No 952/2013 of the European Parliament and of the Council as regards detailed rules concerning certain provisions of the Union Customs Code and Commission Implementing Regulation (EU) 2015/2447 of 24 November 2015 laying down detailed rules for implementing certain provisions of Regulation (EU) No 952/2013 of the European Parliament and of the Council laying down the Union Customs Code. (2)The legislation of the European Union on customs security measures has been amended, in particular by Commission Implementing Decision (EU) 2019/2151 of 13 December 2019 establishing the work programme relating to the development and deployment of the electronic systems provided for in the Union Customs Code. (3)The provisions of Protocol 10 to the EEA Agreement shall be aligned with the amendments to the legislation of the European Union, in order to guarantee an equivalent level of security. (4)Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), was incorporated into the Agreement by Decision of the EEA Joint Committee No 154/2018. (5)This Decision of the EEA Joint Committee should not apply to Iceland and Liechtenstein. However, subject to a new Decision, it could be opened to these countries. (6)Protocol 10 to the EEA Agreement should therefore be amended accordingly, HAS ADOPTED THIS DECISION: Article 1 Protocol 10 to the Agreement shall be amended as specified in the Annex to this Decision.

Article 2 (1)This Decision shall enter into force on , provided that all the notifications under Article 103(1) of the EEA Agreement have been made. It shall apply from 15 March 2021. (2)Pending the notifications referred to in paragraph 1, the European Union and Norway shall apply this Decision provisionally as from 15 March 2021. Article 3 This Decision shall be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European Union. Done at Brussels, For the EEA Joint Committee The President The Secretaries To the EEA Joint Committee

ANNEX 1. Articles 9a to 9g of Chapter IIa (CUSTOMS SECURITY MEASURES) of Protocol 10 to the Agreement shall be replaced by the following: CHAPTER IIa CUSTOMS SECURITY MEASURES Article 9a Definitions For the purposes of this Chapter: (a) “risk” shall mean the likelihood and the impact of an event occurring in connection with the entry, exit, transit, transfer and end-use of goods moved between the customs territory of one of the Contracting Parties and third countries and the presence of goods that are not in free circulation, which pose a threat to the security and safety of the Contracting Parties, to public health, to the environment or to consumers; (b) “risk management” shall mean the systematic identification of risk and implementation of all measures necessary for limiting exposure to risk. This includes activities such as collecting data and information, analysing and assessing risk, prescribing and taking action and regular monitoring and review of the process and its outcomes, based on sources and strategies defined by the Contracting Parties or internationally. (c) “items of correspondence” shall mean letters, postcards, braille letters and printed matter that are not liable to import or export duty; (d) “express consignment” shall mean a consignment conveyed by or under the responsibility of an integrated service of expedited/time-definite collection, transport, customs clearance and delivery of parcels whilst tracking the location of, and maintaining control over such items throughout the supply of the service. (e) “goods in postal consignment” shall mean goods other than items of correspondence, contained in a postal parcel or package and conveyed under the responsibility of or by an operator established in and designated by a Contracting Party to provide the international services governed by the Universal Postal Convention adopted on 10 July 1984 under the aegis of the United Nations Organisation, and conveyed in accordance with the provisions of the that Convention; (f) “customs declaration” shall mean the act whereby a person indicates, in the prescribed form and manner, a wish to place goods under a given customs procedure, with an indication, where appropriate, of any specific arrangements to be applied; (g) "temporary storage declaration" means the act whereby a person indicates, in the prescribed form and manner, that goods are in temporary storage; Article 9b General provisions concerning security and safety

1. The Contracting Parties undertake to set up and apply to the carriage of goods to and from third countries the customs security measures set out in this Chapter and thus to ensure an equivalent level of security and safety at their external borders. 2. The Contracting Parties shall refrain from applying the customs security measures set out in this Chapter to the carriage of goods between their customs territories. 3. The Contracting Parties shall consult prior to the conclusion any agreement with a third country in the areas covered by this Chapter in order to ensure consistency with this Agreement, particularly if the proposed agreement includes provisions that derogate from the customs security measures set out in this Chapter. Article 9c Declarations prior to the entry and exit of goods 1. For the purposes of security and safety, goods brought into the customs territories of the Contracting Parties from third countries shall be covered by an entry summary declaration with the exception of goods carried on means of transport only passing through the territorial waters or the airspace of the customs territories without a stop within these territories. 2. For the purposes of security and safety, goods exiting the customs territories of the Contracting Parties that are destined for third countries shall be covered by an exit summary declaration with the exception of goods carried on means of transport only passing through the territorial waters or the airspace of the customs territories without a stop within these territories. 3. The entry or exit summary declaration shall be lodged before the goods are brought into or leave the customs territories of the Contracting Parties. 4. Where there is an obligation to lodge an entry or exit summary declaration for goods entering or exiting the customs territories of the Contracting Parties but this declaration has not been lodged, one of the persons referred to in paragraphs 5 or 6 shall immediately lodge such declaration or, if permitted by the customs authorities, shall instead lodge a customs declaration or temporary storage declaration that shall contain at least the particulars required for an entry or exit summary declaration. In such circumstances, customs authorities shall carry out the risk analysis for security and safety purposes on those goods on the basis of the customs declaration or the temporary storage declaration. 5. Each Contracting Party shall determine the persons liable for lodging exit summary declarations as well as specify the authorities competent to receive them. 6. The entry summary declaration shall be lodged by the carrier. Notwithstanding the obligations of the carrier, the entry summary declaration may be lodged instead by one of the following persons: (a)the importer or consignee or other person in whose name or on whose behalf the carrier acts; (b)any person who is able to present the goods in question or have them presented at the customs office of first entry. In specific cases, where all the particulars of the entry summary declaration necessary for risk analysis for security and safety purposes cannot be obtained from the persons referred to in the first sub-paragraph, other persons holding those particulars and the appropriate rights to provide them may be required to provide those particulars. Each person submitting the particulars of the entry summary declaration shall be responsible for the particulars that he/she has submitted. 7. By derogation from paragraph 6, until the dates of the deployment of the electronic system referred to in Article 1(1) of Annex I, each Contracting Party shall determine the persons who are required to lodge the entry summary declaration, the means for lodging it, for exchanging information relating to it and for requesting its amendment and/or invalidation. 8. The customs authorities of the Contracting Parties may define the cases in which a customs declaration or temporary storage declaration can be used as an entry or an exit summary declaration, provided that: (a)the customs declaration or temporary storage declaration contains all the particulars required for an entry or exit summary declaration, and (b)the replacing declaration is lodged prior to the expiry of the time limit at the competent customs office for lodging the entry or exit summary declaration.

9. Annex I lays down: –the electronic system relating to the entry summary declaration, –the form and the particulars of the entry or exit summary declaration, –the exceptions from the obligation to lodge an entry or exit summary declaration, –the place where the entry or exit summary declaration shall be lodged, –the time limits for lodging the entry or exit summary declaration, –the technical arrangements for the electronic systems used to lodge the entry summary declaration, –the financing arrangement concerning the responsibilities, commitments and expectations upon the implementation and operation of the Import Control System 2, –any other provision necessary to ensure the application of this Article. Article 9d Authorised economic operator 1. A Contracting Party shall grant, subject to the criteria laid down in Annex II to this Agreement, the status of ‘authorised economic operator’ for security purposes to any economic operator established in its customs territory. Authorised economic operators shall enjoy facilitations in respect of security-related customs controls. Subject to the rules and conditions set out in paragraph 2, the status of authorised economic operator granted by a Contracting Party shall be recognised by the other Contracting Party, without prejudice to customs inspections, particularly with a view to implementing agreements with third countries providing for arrangements for the mutual recognition of the status of authorised economic operator. 2. Annex II lays down: –the rules for granting the status of authorised economic operator, and in particular the criteria for granting this status and the conditions for applying them, –the type of facilitations that shall be accorded, –the rules on the suspension, annulment and revocation of the status of authorised economic operator, –the arrangements for exchanges of information between the Contracting Parties on their authorised economic operators, –any other measure necessary for the application of this Article.

Article 9e Security and safety related customs controls and security and safety related risk management 1. Security and safety related customs controls other than random checks, shall be primarily based on risk analysis using electronic data processing techniques with the purpose of identifying and evaluating the risks and developing the necessary counter-measures, on the basis of criteria developed by the Contracting Parties. 2. Security and safety related customs controls shall be performed within a common risk management framework, based upon the exchange of risk information and risk analysis results between the customs authorities of the Contracting Parties. The customs authority of Norway through their participation in the Customs Code Committee referred to in Article 9.h.4 of Chapter 2.a, shall contribute to establishing common risk criteria and standards, control measures and priority control areas in relation to the particulars of the entry and exit summary declarations. Controls based upon such information and criteria shall be carried out without prejudice to other customs controls. 3. The Contracting Parties shall use a Common Risk Management System for exchanging risk-related information, information on the implementation of common risk criteria and standards, of common priority control areas and of customs crisis management, and risk analysis results and control results. 4. The Contracting Parties shall recognise the equivalence of their risk managements systems related to security and safety. 5. The EEA Joint Committee shall adopt any other measure necessary for the application of this Article. Article 9f Monitoring the implementation of customs security measures 1. The Joint Committee shall determine how the Contracting Parties are to monitor the implementation of this Chapter and to verify compliance with its provisions and those of the annexes to this Agreement. 2. The monitoring referred to in paragraph 1 may take the form of: –regular assessments of the implementation of this Chapter, and in particular of the equivalence of customs security measures, –a review to improve the way in which it is applied or to amend its provisions so that it better fulfils its objectives, –the organisation of thematic meetings between experts of both Contracting Parties and audits of administrative procedures, including on-the-spot visits. 3. The Joint Committee shall ensure that measures taken under this Article uphold the rights of economic operators. Article 9g Protection of professional secrecy and personal data The information exchanged by the Contracting Parties as part of the measures provided for in this Chapter shall enjoy the protection extended to professional secrecy and personal data as defined in the relevant laws applicable in the territory of the recipient Contracting Party. In particular, this information may not be further transferred to persons other than the competent authorities in the recipient Contracting Party, nor may it be used by those authorities for purposes other than those provided for in this Agreement.

2. ANNEX I of Protocol 10 to the Agreement shall be replaced by the following: ANNEX I ENTRY AND EXIT SUMMARY DECLARATIONS Title I Entry summary Declaration Article 1 Electronic System relating to the entry summary declaration 1. The electronic Import Control System 2 (ICS2) shall be used for: (a)submitting, processing and storing the particulars of the entry summary declarations and other information relating to those declarations, relating to risk analysis for customs security and safety purposes, including the support of aviation security, and relating to the measures that must be taken based on the results of that analysis; (b)exchanging information concerning the particulars of the entry summary declaration and results of risk analysis of entry summary declarations, concerning other information necessary to perform that risk analysis, and concerning measures undertaken on the basis of risk analysis, including recommendations on places of control and the results of those controls; (c)exchanging information for monitoring and evaluating the implementation of the common security and safety risk criteria and standards and of the control measures and priority control areas. 2. The development and release dates of the sequenced deployment of the electronic system referred to in this Annex are the dates set out in the UCC project Import Control System 2 (ICS2) in the Annex to Commission Implementing Decision (EU) 2019/2151. The Contracting Parties are expected to be ready at the same time for each release at the start of the deployment window. Where deemed appropriate, the Contracting Parties may allow the economic operators to gradually connect to the system until the end of the deployment window provided for each of the releases. The Contracting Parties shall publish the deadlines and instructions for economic operators on their website. 3. Economic operators shall use a harmonised trader interface, designed by the Contracting Parties in agreement with each other, for submissions, requests for amendments, requests for invalidations, processing and storage of the particulars of entry summary declarations and for the exchange of related information with the customs authorities. 4. The customs authorities of the Contracting Parties may allow that commercial, port or transport information systems are used for lodging the particulars of the entry summary declaration, provided such systems contain the necessary particulars and those particulars are available within the time limits referred to in Article 7. Article 2 Form and content of the entry summary declaration 1. The entry summary declaration, and the notification of arrival of a seagoing vessel or of an aircraft shall contain the particulars laid down in the following columns of Annex B of Commission Delegated Regulation (EU) 2015/2446: (a)F10 to F16;

(b)F20 to F33; (c)F40 to F45; (d)F50 and F51; (e)G2. The particulars of the entry summary declaration shall comply with the respective formats, codes and cardinalities set out in Annex B of Commission Implementing Regulation (EU) 2015/2447 and be completed in accordance with the notes in those Annexes. 2. The particulars of the entry summary declaration may be provided by the submission of more than one dataset by different persons. 3. The electronic system referred to in paragraph 1 shall be used for lodging a request for amendment or invalidation of an entry summary declaration or the particulars therein. Where different persons request an amendment or an invalidation of the particulars of the entry summary declaration, each of those persons shall only be permitted to request the amendment or the invalidation of the particulars that he/she submitted. 4. The customs authorities of the Contracting Party, who registered the entry summary declaration, shall immediately notify the person who lodged the request for amendment or invalidation of their decision to register it or reject it. Where the amendments to or invalidation of the particulars of the entry summary declaration are lodged by a person different from the carrier, the customs authorities shall also notify the carrier, provided that the carrier has requested to be notified and has access to the electronic system referred to in paragraph 1. 5. In accordance with Article 9c(8) of the Agreement, until the date of the deployment of release 3 of the system referred to in Article 1(1), the Contracting Parties may carry out the security and safety related risk analysis on the basis of the transit declaration lodged in the New Computerised Transit System (NCTS) in accordance with the Convention on a Common Transit Procedure, including the exchange of risk analysis related information between the involved Contracting Parties, for goods transported by sea, inland waterways, road and rail. NCTS is the electronic system that enables the communication between the Contracting Parties, and between the Contracting Parties and economic operators for the purposes of submitting customs declaration for transit including all the particulars required for an entry or exit summary declaration and the notifications relating to those goods. Before the deployment of the release 3 of the system referred to in Article 1(1) of this Annex, the Contracting Parties shall assess whether or not, after that date, the customs authorities may continue to carry out the risk analysis on the basis of the transit declaration containing the particulars of an entry summary declaration lodged in NCTS and shall modify this agreement if necessary. Article 3 Waiver from the obligation to lodge an entry summary declaration 1. An entry summary declaration shall not be required in respect of the following goods: (a)electrical energy; (b)goods entering by pipeline; (c)items of correspondence; (d)goods in postal consignments, as follows: (1)where the postal consignments are transported by air and have a Contracting Party as final destination, until the date set out for the deployment of release 1 of the electronic system referred to in Article 1(1);

(2)where the postal consignments are transported by air and have a third country or third territory as final destination, until the date set out for the deployment of release 2 of the electronic system referred to in Article 1(1); (3)where the postal consignments are transported by sea, inland waters, road or rail, until the date set out for the deployment of release 3 of the electronic system referred to in Article 1(1). (e)goods for which an oral customs declaration or simple crossing of the border is permitted under the rules laid down by the Contracting Parties, provided that they are not carried under a transport contract; (f)goods contained in travellers’ personal baggage; (g)goods covered by ATA or CPD Carnets provided they are not carried under a transport contract; (h)goods entitled to relief pursuant to the Vienna Convention of 18 April 1961 on Diplomatic Relations, the Vienna Convention of 24 April 1963 on Consular Relations, other consular conventions or the New York Convention of 16 December 1969 on Special Missions; (i)weapons and military equipment brought into the customs territory of one of the Contracting Parties by the authorities in charge of the military defence of the territory, in military transport or transport operated for the sole use of the military authorities; (j)the following goods brought into the customs territory of one of the Contracting Parties directly from offshore installations operated by a person established in the customs territory of one of the Contracting Parties: (1)goods which were incorporated in those offshore installations for the purposes of their construction, repair, maintenance or conversion; (2)goods which were used to fit or equip the said offshore installations; (3)provisions used or consumed on the said offshore installations; (4)non-hazardous waste from the said offshore installations; (k)goods in consignments the intrinsic value of which does not exceed EUR 22, provided that the customs authorities accept, with the agreement of the economic operator, to carry out risk analysis using the information contained in, or provided by, the system used by the economic operator, as follows: (1)where the goods are in express consignments, that are transported by air, until the date set out for the deployment of release 1 of the electronic system referred to in Article 1(1); (2)where the goods are transported by air in other than postal or express consignments, until the date set out for the deployment of release 2 of the electronic system referred to in Article 1(1); (3)where the goods are transported by sea, inland waterways, road or rail, until the date set out for the deployment of release 3 of the electronic system referred to in Article 1(1). (l)goods moved under cover of the NATO form 302 provided for in the Convention between the Parties to the North Atlantic Treaty regarding the Status of their Forces, signed in London on 19 June 1951, or under cover of the EU form 302 provided for in Article 1(51) of Commission Delegated Regulation (EU) 2015/2446. (m)goods brought to one of the Contracting Parties from Ceuta and Melilla, Heligoland, the Republic of San Marino, the Vatican City State, the municipality of Livigno and the Swiss customs exclaves of Samnaun and Sampuoir; (n)the following goods on board vessels and aircraft: (1)goods which have been supplied for incorporation as parts of or accessories in those vessels and aircraft;

(2)goods for the operation of the engines, machines and other equipment of those vessels or aircraft; (3)foodstuffs and other items to be consumed or sold on board; (o)products of sea-fishing and other products taken from the sea outside the customs territories of the Contracting Parties by their fishing vessels; (p)vessels, and the goods carried thereon, entering the territorial waters of one of the Contracting Parties with the sole purpose of taking on board supplies without connecting to any of the port facilities; (q)household effects as defined in the legislation of the respective Contracting Parties provided that they are not carried under a transport contract. 2. An entry summary declaration shall not be required in the cases provided for in an international agreement concluded between a Contracting Party and a third country on security, subject to the procedure laid down in Article 9b(3) of the Agreement. 3. An entry summary declaration shall not be required in cases where the goods temporarily leave the customs territories of the Contracting Parties during transport by sea or air between two points of those customs territories and without having stopped in a third country. Article 4 Place for lodging an entry summary declaration 1. The entry summary declaration shall be lodged at the customs office that is competent for customs supervision at the place in the customs territory of one of the Contracting Parties where the means of transport carrying the goods arrives or, where applicable, is destined to arrive, from a third country or a third territory hereafter referred to as the customs office of first entry. 2. Where the entry summary declaration is lodged by the submission of more than one dataset, or by the submission of the minimum dataset, the person submitting the partial or minimum dataset shall do so to the customs office that, according to his/her knowledge, should be the customs office of first entry. If that person does not know the place in the customs territories of the Contracting Parties at which the means of transport carrying the goods is expected to first arrive, the customs office of first entry may be determined based on the place to which the goods are consigned. 3. The customs authorities of the Contracting Parties may allow the entry summary declaration to be lodged at another customs office, provided that the latter immediately communicates or makes available electronically the necessary particulars to the customs office of first entry. Article 5 Registration of an entry summary declaration 1. The customs authorities shall register each submission of particulars of the entry summary declaration upon its receipt and shall immediately notify the declarant or its representative of its registration and shall communicate a Master Reference Number of the submission and the date of registration to that person. 2. From the date of the deployment of release 2 of the electronic system referred to in Article 1(1), the customs authorities shall immediately notify the carrier of the registration, provided that the carrier has requested to be notified and has access to that electronic system, where the entry summary declaration is lodged by a person other than the carrier. Article 6 Lodging of an entry summary declaration Where none of the waivers from the obligation to lodge an entry summary declaration in Article 10 of the Agreement and Article 3 applies, the particulars of the entry summary declaration shall be provided as follows: (a)for goods transported by air,

(1)express carriers shall lodge, for all consignments, the minimum dataset from the date of the deployment of release 1 of the electronic system referred to in Article 1(1); (2)postal operators shall lodge, for all consignments having a Contracting Party as final destination, the minimum dataset from the date of the deployment of release 1 of the electronic system referred to in Article 1(1); (3)by the submission of one or more than one dataset through the electronic system referred to in Article 1(1), from the date of the deployment of release 2 of that system; (b)for goods transported by sea, inland waterways, road and rail, by the submission of one or more than one dataset through the electronic system referred to Article 1(1), from the date of the deployment of release 3 of that system. Article 7 Time limits for lodging an entry summary declaration 1. Where the goods are brought into the customs territories of the Contracting Parties by sea, the entry summary declaration shall be lodged within the following time limits: (a)for containerised cargo, other than where point (c) or point (d) applies, at the latest 24 hours before the goods are loaded onto the vessel on which they are to be brought into the customs territories of the Contracting Parties; (b)for bulk or break bulk cargo, other than where point (c) or (d) applies, at the latest four hours before the arrival of the vessel at the first port of entry into the customs territories of the Contracting Parties; (c)at the latest two hours before arrival of the vessel at the first port of entry into the customs territories of the Contracting Parties in case of goods coming from any of the following: (1)Greenland; (2)the Faeroe Islands; (3)Iceland; (4)ports on the Baltic Sea, the North Sea, the Black Sea and the Mediterranean Sea; (5)all ports of Morocco; (d)for movement, other than where point (c) applies, between a territory outside the customs territories of the Contracting Parties and the French overseas departments, the Azores, Madeira or the Canary Islands, where the duration of the voyage is less than 24 hours, at the latest two hours before arrival at the first port of entry into the customs territories of the Contracting Parties. 2. Where the goods are brought into the customs territories of the Contracting Parties by air, the full particulars of the entry summary declaration shall be lodged as soon as possible and in any case within the following time limits: (a)for flights with a duration of less than four hours, at the latest by the time of the actual departure of the aircraft; (b)for other flights, at the latest four hours before the arrival of the aircraft at the first airport in the customs territories of the Contracting Parties. 3. From the date of the deployment of release 1 of the electronic system referred to in Article 1(1), postal operators and express carriers shall lodge at least the minimum dataset of the entry summary declaration as soon as possible and at the latest before the goods are loaded onto the aircraft on which they are to be brought into the customs territories of the Contracting Parties.

4. From the date of the deployment of release 2 of the electronic system referred to in Article 1(1), economic operators other than postal operators and express carriers shall lodge at least the minimum dataset of the entry summary declaration as soon as possible and at the latest before the goods are loaded onto the aircraft on which they are to be brought into the customs territories of the Contracting Parties. 5. From the date of the deployment of release 2 of the electronic system referred to in Article 1(1), where only the minimum dataset of the entry summary declaration has been provided within the time limits referred to in paragraphs 3 and 4, the other particulars shall be provided within the time limits specified in paragraph 2. 6. Until the date of the deployment of release 2 of the electronic system referred to in Article 1(1), the minimum dataset of the entry summary declaration lodged in accordance with paragraph 3 shall be considered as the full entry summary declaration for goods in postal consignments having a Contracting Party as final destination and for goods in express consignments with an intrinsic value not exceeding EUR 22. 7. Where the goods are brought into the customs territories of the Contracting Parties by rail, the entry summary declaration shall be lodged within the following time limits: (a)where the train voyage from the last train formation station located in a third country to the customs office of first entry takes less than two hours, at the latest one hour before arrival of the goods at the place for which that customs office is competent; (b)in all other cases, at the latest two hours before the arrival of the goods at the place for which the customs office of first entry is competent. 8. Where the goods are brought into the customs territories of the Contracting Parties by road, the entry summary declaration shall be lodged at the latest one hour before the arrival of the goods at the place for which the customs office of first entry is competent. 9. Where the goods are brought into the customs territories of the Contracting Parties by inland waterways, the entry summary declaration shall be lodged at the latest two hours before arrival of the goods at the place for which the customs office of first entry is competent. 10. Where the goods are brought into the customs territories of the Contracting Parties on a means of transport which is, itself, transported on an active means of transport, the time limit for lodging the entry summary declaration shall be the time limit applicable to the active means of transport. 11. The time limits referred to in paragraphs 1 to 10 shall not apply in the case of force majeure. 12. Subject to the procedure referred to in Article 9b(3) of the Agreement, the time limits mentioned in paragraphs 1 to 10 shall not apply where international agreements on security between a Contracting Party and third countries provide otherwise. Article 8 Security and safety related risk analysis and security and safety related customs controls relating to the entry summary declarations 1. Risk analysis shall be completed before the arrival of the goods at the customs office of first entry, provided that the entry summary declaration has been lodged within the time limits laid down in Article 7, unless a risk is identified or an additional risk analysis needs to be carried out. Without prejudice to the first subparagraph, a first risk analysis on goods to be brought into the customs territories of the Contracting Parties by air shall be carried out as soon as possible upon receipt of the minimum dataset of the entry summary declaration referred to in Article 7(3) and (4). 2. The customs office of first entry shall complete the risk analysis for security and safety purposes after the following exchange of information through the electronic system referred to in Article 1(1): (a)immediately after registration, the customs office of first entry shall make the particulars of the entry summary declaration available to the customs authorities of the Contracting Parties indicated in those particulars and to the customs authorities of the Contracting Parties that have recorded in the electronic system information relating to security and safety risks that matches particulars of that entry summary declaration; (b)within the time limits laid down in Article 7, the customs authorities of the Contracting Parties referred to in point (a) shall perform a risk analysis for security and safety purposes and, if they identify a risk, they shall make the results available to the customs office of first entry; (c)the customs office of first entry shall take into account the information on risk analysis results provided by the customs authorities of the Contracting Parties referred in point (a) to complete the risk analysis; (d)the customs office of first entry shall make the results of the completed risk analysis available to the customs authorities of the Contracting Parties that contributed to the risk analysis and to those that are potentially concerned by the movement of the goods;

(e)the customs office of first entry shall notify the completion of the risk analysis to the following persons, provided that they have requested to be notified and have access to the electronic system referred to in Article 1(1): –the declarant or his/her representative; –the carrier, if different from the declarant and his/her representative. 3. Where the customs office of first entry requires further information on the particulars of the entry summary declaration for the completion of the risk analysis, that analysis shall be completed after that information has been provided. For those purposes, the customs office of first entry shall request that information from the person that lodged the entry summary declaration or, where applicable, the person that submitted the particulars of the entry summary declaration. Where that person is different from the carrier, the customs office of first entry shall inform the carrier, provided that the carrier has requested to be notified and has access to the electronic system referred to in Article 1(1). 4. Where the customs office of first entry has reasonable grounds to suspect that goods brought by air could pose a serious aviation security threat, it shall require that the consignment, before being loaded on an aircraft bound for the customs territories of the Contracting Parties, be screened as High Risk Cargo and Mail in accordance with the EEA Agreement Annex XIII Part I point VI article 66h and 66hf laying down detailed measures for the implementation of the common basic standards on aviation security. The customs office of first entry shall notify the following persons, provided that they have access to the electronic system referred to in Article 1(1): (a)the declarant or his/her representative; (b)the carrier, if different from the declarant and his/her representative. Following that notification, the person who lodged the entry summary declaration, or where applicable, the person that submitted the particulars of the entry summary declaration shall provide the customs office of first entry with the results of that screening and with all other related relevant information. The risk analysis shall only be completed after that information has been provided. 5. Where the customs office of first entry has reasonable grounds to consider that goods brought by air or containerised cargo brought by sea, as referred to in Article 7(1)(a), would pose such a serious threat to security and safety that immediate action is required, it shall direct that the goods are not to be loaded on the relevant means of transport. The customs office of first entry shall notify the following persons, provided that they have access to the electronic system referred to in Article 1(1): (a)the declarant or his/her representative; (b)the carrier, if different from the declarant and his/her representative. That notification shall be made immediately after the detection of the relevant risk and, in the case of containerised cargo brought by sea as referred to in Article 7(1)(a), at the latest within 24 hours of the receipt of the entry summary declaration or, where applicable, of the particulars of the entry summary declaration by the carrier. The customs office of first entry shall also immediately inform the customs authorities of the Contracting Parties of that notification and make the relevant particulars of the entry summary declaration available to them. 6. Where a consignment has been identified as posing a threat of such nature that immediate action is required upon arrival of the means of transport, the customs office of first entry shall take that action upon arrival of the goods. 7. After completing the risk analysis, the customs office of first entry may recommend, through the electronic system referred to in Article 1(1), the most appropriate place and measures to carry out a control. The customs office competent for the place that has been recommended as the most appropriate for control shall decide on the control and shall make, through the electronic system referred to in Article 1(1), the results of that decision available to all the customs offices of the Contracting Parties potentially concerned by the movement of goods, at the latest at the moment of presentation of the goods at the customs office of first entry. 8. The customs offices shall make the results of their security and safety related customs controls available to other customs authorities of the Contracting Parties through the system referred to in Article 1(1) where:

(a)the risks are assessed by a customs authority as being significant and requiring customs control and the results of the control establish that the event triggering the risks has occurred; or (b)the control results do not establish that the event triggering the risks has occurred, but the customs authority concerned considers the threat to present a high risk elsewhere in the customs territories of the Contracting Parties; or (c)it is necessary for a uniform application of the rules in this agreement. The Contracting Parties shall exchange in the system referred to in Article 9e (3) of the Agreement the information on the risks mentioned under points a) and b). 9. Where goods for which the obligation to lodge an entry summary declaration is waived in accordance with Article 3(1) (c) to (f), (h) to (m), (o) and (q) are brought into the customs territories of the Contracting Parties, the risk analysis shall be carried out upon the presentation of the goods. 10. Goods presented to customs may be released as soon as the risk analysis has been carried out and the results of the risk analysis and, where required, the measures taken, allow such a release. 11. Risk analysis shall also be carried out if the particulars of the entry summary declaration are amended in accordance with Article 2 (3) and (4). In that case, without prejudice to the time limit laid down in the third subparagraph of paragraph 5 for containerised cargo brought by sea, the risk analysis shall be completed immediately upon receipt of the particulars unless a risk is identified or an additional risk analysis needs to be carried out. Article 9 Provision of particulars of an entry summary declaration by other persons 1. From the date set out for the deployment of release 2 of the electronic system referred to in Article 1(1), where for the same goods transported by air, one or more persons other than the carrier have concluded one or more transport contracts covered by one or more air waybills, the following rules apply: (a)the person issuing an air waybill shall inform the person who concluded a transport contract with him of the issuance of that air waybill; (b)in the case of a goods co-loading arrangement, the person issuing the air waybill shall inform the person with whom he entered into that arrangement of the issuance of that air waybill; (c)the carrier and any of the persons issuing an air waybill shall provide, in the particulars of the entry summary declaration, the identity of any person that did not make the particulars required for the entry summary declaration available to them; (d)if the person issuing the air waybill does not make the particulars required for the entry summary declaration available to his contractual partner who issues an air waybill to him, or to his contractual partner with whom he concluded a goods co-loading arrangement, the person who does not make the required particulars available shall provide those particulars to the customs office of first entry. 2. From the date set out for the deployment of release 2 of the electronic system referred to in Article 1(1), where the postal operator does not make the particulars required for the entry summary declaration of postal consignments available to the carrier that is obliged to lodge the rest of the particulars of the declaration through that system, the following rules apply: (a)the postal operator of destination, if the goods are consigned to the Contracting Parties, or the postal operator of the Contracting Parties of first entry, if the goods are transiting through the Contracting Parties, shall provide those particulars to the customs office of first entry; and (b)the carrier shall provide, in the particulars of the entry summary declaration, the identity of the postal operator that does not make the particulars required for the entry summary declaration available to him. 3. From the date set out for the deployment of release 2 of the electronic system referred to in Article 1(1), where the express carrier does not make the particulars required for the entry summary declaration of express consignments transported by air available to the carrier, the following rules apply: (a)the express carrier shall provide those particulars to the customs office of first entry; and (b)the carrier shall provide, in the particulars of the entry summary declaration, the identity of the express carrier that does not make the particulars required for the entry summary declaration available to him.

4. From the date set out for the deployment of release 3 of the electronic system referred to in Article 1(1), where, in the case of transport by sea or inland waterways, for the same goods, one or more additional transport contracts covered by one or more bills of lading have been concluded by one or more persons other than the carrier, the following rules apply: (a)the person issuing the bill of lading shall inform the person that concluded a transport contract with him about the issuance of that bill of lading; (b)in the case of a goods co-loading arrangement, the person issuing the bill of lading shall inform the person with whom he entered into that arrangement of the issuance of that bill of lading; (c)the carrier and any of the persons issuing a bill of lading shall provide, in the particulars of the entry summary declaration, the identity of any person that has concluded a transport contract with them and has not provided them with the particulars required for the entry summary declaration; (d)the person issuing the bill of lading shall provide, in the particulars of the entry summary declaration, the identity of the consignee indicated in the bill of lading as not having underlying bills of lading that has not made the particulars required for the entry summary declaration available to him; (e)if the person issuing the bill of lading does not make the particulars required for the entry summary declaration available to his contractual partner who issues a bill of lading to him, or to his contractual partner with whom he concluded a goods co-loading arrangement, the person who does not make the required particulars available shall provide those particulars to the customs office of first entry; (f)if the consignee indicated in the bill of lading that has no underlying bills of lading does not make the particulars required for the entry summary declaration available to the person issuing that bill of lading, he shall provide those particulars to the customs office of first entry. Article 10 Diversion of a sea-going vessel or an aircraft entering the customs territory of the Contracting Parties 1. From the date set out for the deployment window of release 2 of the electronic system referred to in Article 1(1), where an aircraft is diverted and has arrived in the first place at a customs office located in a country that was not indicated as a country of routing in the entry summary declaration, the actual customs office of first entry shall, through that system, retrieve the particulars of the entry summary declaration, the risk-analysis results and the control recommendations made by the expected customs office of first entry. 2. From the date set out for the deployment window of release 3 of the electronic system referred to in Article 1(1), where a sea-going vessel is diverted and has arrived in the first place at a customs office located in a country that was not indicated as a country of routing in the entry summary declaration, the actual customs office of first entry shall, through that system, retrieve the particulars of the entry summary declaration, the risk-analysis results and the control recommendations made by the expected customs office of first entry. Title II technical arrangements for the Import Control System 2 Article 11 Import Control System 2 1. The ICS2 shall support communication between the economic operators and the Contracting Parties for the purposes of fulfilment of entry summary declaration requirements, risk analysis by the Contracting Parties' customs authorities for security and safety purposes and customs measures aimed to mitigate these risks including security and safety related customs controls, and the communication between the Contracting Parties for the purpose of fulfilment of entry summary declaration requirements. 2. The ICS2 shall consist of the following common components developed at Union level: (a)a shared trader interface; (b)a common repository.

3. Norway shall develop a national entry system as a national component available in Norway. 4. Norway may develop a national trader interface as a national component available in Norway. 5. The ICS2 shall be used for the following purposes: (a)submitting, processing and storing the particulars of the entry summary declarations, requests for amendments and invalidations according to Article 10 of the Agreement and Annex I; (b)receiving, processing and storing the particulars of entry summary declarations extracted from the declarations referred in Article 10 of the Agreement and Annex I; (c)submitting, processing and storing of information regarding arrival and notifications of arrival of sea-going vessel or an aircraft according to Article 10 of the Agreement and Annex I; (d)receiving, processing and storing of information regarding presentation of goods to customs authorities of the Contracting Parties according to Article 10 of the Agreement and Annex I; (e)receiving, processing and storing of information regarding risk analysis requests and results, control recommendations, decisions on controls, and control results according to Articles 10 and 12 of the Agreement and Annex I; (f)receiving, processing, storing and communicating of the notifications and information to and from the economic operators according to Articles 10 and 12 of the Agreement and Annex I; (g)submitting, processing and storing of information by the economic operators requested by customs authorities of the Contracting Parties according to Articles 10 and 12 of the Agreement and Annex I. 6. The ICS2 shall be used to support the monitoring and evaluating by the Contracting Parties of the implementation of the common security and safety risk criteria and standards and of the control measures and priority control areas referred to in Article 12 of the Agreement. 7. The authentication and access verification of economic operators for the purposes of access to the common components of the ICS2 shall be effected using the UUM&DS system referred to in Article 13. 8. The authentication and access verification of Contracting Parties' officials for the purposes of access to the common components of the ICS2 shall be effected using the network services provided by the Union. 9. The harmonised trader interface shall be an entry point to the ICS2 for economic operators in accordance with Article 1. 10. The harmonised trader interface shall interoperate with the ICS2 common repository referred to in paragraphs 12 to 14. 11. The harmonised trader interface shall be used for submissions, requests for amendments, request for invalidations, processing and storage of the particulars of the entry summary declarations and notifications of arrival, as well as exchange of information between the Contracting Parties and economic operators. 12. The ICS2 common repository shall be used by the Contracting Parties for processing of the particulars of entry summary declarations, requests for amendment, requests for invalidation, notifications of arrival, information regarding presentation of goods, information regarding risk analysis requests and results, control recommendations, control decisions, and control results and information exchanged with economic operators. 13. The ICS2 common repository shall be used by the Contracting Parties for the purpose of statistics and evaluation, and for the exchange of entry summary declaration information between the Contracting Parties. 14. The ICS2 common repository shall interoperate with the harmonised trader interface, national trader interfaces where developed by the Contracting Parties, and with the national entry systems. 15. The customs authority of a Contracting Party shall use the common repository to consult a customs authority of the other Contracting Party in accordance with Article 10 and 12 of the Agreement and Annex I before completing the risk analysis for security and safety purposes. The customs authority of a Contracting Party shall also use the common repository to consult with the other Contracting Party on the recommended controls, decisions taken with regard to recommended controls and on the results of security and safety related customs controls in accordance with Article 10 and 12 of the Agreement and Annex I.

16. The national trader interface, where developed by the Contracting Parties, shall be an entry point to the ICS2 for economic operators in accordance with Article 1 where the submission is addressed to the Contracting Party operating the national trader interface. 17. With respect to submissions, amendments, invalidation, processing, storage of the particulars of the entry summary declarations and notifications of arrival, as well as exchange of information between the Contracting Parties and economic operators, economic operators may choose to use the national trader interface, where developed, or the harmonised trader interface. 18. The national trader interface, where developed, shall interoperate with the ICS2 common repository. 19. When Norway develops a national trader interface, it shall inform the Union thereof. 20. A national entry system shall be used by the customs authorities of the Contracting Parties for exchange of entry summary declaration particulars extracted from the declarations referred in Article 10 of the Agreement, exchange of information and notifications with the common repository for information regarding arrival of sea-going vessel or an aircraft, information regarding presentation of goods, processing of risk analysis requests, exchange and processing of information regarding risk analysis results, of control recommendations, of control decisions and of control results. 21. It shall also be used in the cases where a customs authority of a Contracting Party requests further information from the economic operators and receives information thereof. 22. The national entry system shall interoperate with the common repository. 23. The national entry system shall interoperate with systems developed at national level for retrieving information referred to in paragraph 20. Article 12 Functioning of the Import Control System 2 and Training in the use thereof 1. The common components shall be developed, tested, deployed and managed by the Union. The national components shall be developed, tested, deployed and managed by Norway. 2. Norway shall ensure that the national components are interoperable with the common components. 3. The Union shall perform the maintenance of the common components and Norway shall perform the maintenance of its national components. 4. The Contracting Parties shall ensure uninterrupted operation of the electronic systems. 5. The Union may change the common components of the electronic systems to correct malfunctions, to add new functionalities or alter existing ones. 6. The Union shall inform Norway of changes and updates to the common components. 7. Norway shall inform the Union of changes and updates to the national components that may have repercussions on the functioning of the common components. 8. The Contracting Parties shall make the information on the changes and updates to the electronic systems pursuant to paragraphs 6 and 7 publicly available. 9. In case of temporary failure of the ICS2 the business continuity plan determined by the Contracting Parties shall apply. 10. The Contracting Parties shall inform each other of the unavailability of the electronic systems resulting from a temporary failure.

11. The Union shall support Norway on the use and functioning of the common components of the electronic systems by providing the appropriate training material. Article 13 Uniform User Management and Digital Signature platform 1. A Uniform User Management and Digital Signature platform (hereafter referred to as "UUM&DS") shall enable the communication between the identity and access management systems of the Contracting Parties referred to in paragraph 6 for the purposes of providing secure authorised access to the electronic systems to the Contracting Parties' officials and economic operators. 2. The UUM&DS platform shall consist of the following common components: (a)an access management system; (b)an administration management system; 3. The UUM&DS platform shall be used to ensure the authentication and access verification of: (a)economic operators for the purposes of having access to ICS2; (b)the Contracting Parties' officials for the purposes of having access to the common components of the ICS2 and for the purposes of maintenance and management of the UUM&DS platform. 4. The Contracting Parties shall set up the access management system to validate the access requests submitted by economic operators within the UUM&DS platform by interoperating with the Contracting Parties' identity and access management systems referred to in paragraph 6. 5. The Contracting Parties shall set up the administration management system to manage the authentication and authorisation rules for validating the identification data of economic operators for the purposes of allowing access to the electronic systems. 6. The Contracting Parties shall set up an identity and access management system to ensure: (a)a secure registration and storage of identification data of economic operators; (b)a secure exchange of signed and encrypted identification data of economic operators. Article 14 Data Management and Ownership and Security 1. The Contracting Parties shall ensure that the data registered at national level corresponds to the data registered in the common components and is kept up to date. 2. By derogation of paragraph 1 the Contracting Parties shall ensure that the following data corresponds to and is kept up to date with data in the common repository of ICS2: (a)data registered at national level and communicated from the national entry system to the common repository;

(b)data received from the common repository to the national entry system. 3. The data in the ICS2 common components that is communicated to or registered in the shared trader interface by an economic operator may be accessed or processed by that economic operator. 4. The data in the ICS2 common components: (a)communicated to a Contracting Party by an economic operator through the harmonised trader interface into the common repository may be accessed and processed by that Contracting Party in the common repository. Where needed, that Contracting Party may also access this information registered in the harmonised trader interface; (b)communicated to or registered in the common repository by a Contracting Party may be accessed or processed by that Contracting Party; (c)referred in the above points (a) and (b) may also be accessed and processed by the other Contracting Party where the latter is involved in the risk analysis and/or control process to which the data relates in accordance with Article 10 and 12 of the Agreement and Annex I. (d)may be processed by the Commission in cooperation with the Contracting Parties for the purposes referred to in Article 1(1)(c) and Article 11(6) of Annex I. The results of such processing may be accessed by the Commission and the Contracting Parties. 5. The data in the ICS2 common component that is registered in the common repository by the Union may be accessed by the Contracting Parties. This data may be processed by the Union. 6. The Union shall be the system owner of the common components. 7. Norway shall be the system owners of its national components. 8. The Union shall ensure the security of the common components while Norway shall ensure the security of its national components. 9. For those purposes, the Contracting Parties shall take, at least, the necessary measures to: (a)prevent any unauthorised person from having access to installations used for the processing of data; (b)prevent the entry of data and any consultation, modification or deletion of data by unauthorised persons; (c)detect any of the activities referred to in points (a) and (b); 10. The Contracting Parties shall inform each other of any activities that might result in a breach or a suspected breach of the security of the electronic systems. 11. The Contracting Parties shall establish security plans concerning all systems. 12. The data registered in the components of the ICS2 shall be stored for a minimum of three years after its registration. The Contracting Parties may exceed this period where required by relevant national legislation. Article 15 Processing of personal data

For ICS2 and UUM&DS in relation to the processing of personal data therein, 1. Norway and the EU Member States shall act as controllers in compliance with the provision of Article 14 of the Agreement. 2. The Commission shall act as processor and shall comply with the obligations imposed on it in that respect pursuant to Regulation (EU) No 2018/1725 , except, where processing the data for monitoring and evaluating the implementation of the common security and safety risk criteria and standards and of the control measures and priority control area, the Commission shall act as a joint controller. Article 16 Participation in the development, maintenance and management of ICS2 The Union shall enable the experts from the EFTA State concerned to participate as observers for items concerning the development, maintenance and management of the ICS2 in meetings of the Customs Expert Group and the respective working groups. The Union shall decide on a case-by-case basis on the participation of the experts from the EFTA State concerned in meetings of the working groups in which only a limited number of EU Member States are represented and which report to the Customs Expert Group. TITLE III Article 17 Financing Arrangements concerning the responsibilities, commitments and expectations upon the implementation and operation of the Import Control System 2 Regarding the extension of the use of ICS2 to Norway, and in consideration of chapter IIa and Annex I of this agreement, these Financing Arrangements (hereinafter referred to as "the Arrangement") define the elements of collaboration between the Parties, related to the ICS2. (a)The Commission will develop, test, deploy, manage and operate the ICS2 central components consisting of a shared trader interface and a common repository (hereafter ICS2 central components), including the applications and services required for their operation and interconnection with the IT systems in Norway such as TAPAS, UUM&DS, CCN2ng middleware, and commits to make them available to Norway. (b)Norway will develop, test, deploy, manage and operate the ICS2 national components. (c)Norway and the Commission agree to share the development and one-off costs of ICS2 central components as well as the operational costs of ICS2 central components, related applications and services required for their operation and interconnection, as follows: (1)Part of the ICS2 development costs of central components will be invoiced by the Commission to Norway in accordance with letters d) and e). The development costs cover the software development of the central components and the acquisition and installation of the related infrastructure (hardware, software, hosting, licenses, etc.). The allocation formula concerns 4% of all costs for the mentioned services. (2)The maximum development costs will be capped at EUR 550,000 (five hundred and fifty thousand) per release. (3) Part of the ICS2 and TAPAS operational costs will be invoiced by the Commission to Norway in accordance with letters f), g) and h). The operational costs cover the conformance testing, the maintenance of the infrastructure (hardware, software, hosting, licenses, etc.), of the ICS2 central components and of the related applications and services required for their operation and interconnection (quality assurance, helpdesk and IT Service Management). The allocation formula concerns 4% of all costs for the mentioned services. (4) The operational costs related to the use of ICS2 for Norway shall not exceed the maximum amount of EUR 450,000 (four hundred and fifty thousand) per year. (5)The development and operational costs of national component(s) will be entirely borne by Norway. (6) Norway shall be kept informed of the planned evolution of the costs and shall be informed of the main elements for the development of ICS2 that might have an impact on these costs.

(d)Norway agrees to participate in the costs for the development and conformance testing of ICS2 central components incurred prior to the implementation of this agreement. For this purpose: (1)The Commission will inform Norway of the estimated amount of necessary contribution from the years prior to the implementation of this Agreement. (2)By 15/05 each year, starting from 15/05/2021, the Commission will request from Norway to pay its contribution to these prior costs in equal instalments over the first four years of use of ICS2. (e)Norway agrees to participate in the development costs of the ICS2 central components. For this purpose: (1)Norway agrees to pay its participation in the development costs of ICS2 release 1, release 2 and release 3 of the ICS2. (2)By 15/05 each year, starting from 15/05/2021, the Commission will request from Norway to pay its contribution to the development of the latest release on the basis of a duly-documented debit note issued by the Commission. (f) Norway agrees to participate in the operational costs of the ICS2 central components. For this purpose: (1)By 31/07 each year, starting from 31/07/2021, the Commission will inform Norway of the estimated operational costs for the following year and send to Norway the estimated amount of necessary contribution for the next year in writing. Norway will be informed in the same way and at the same time as the Commission informs each one of the other members of ICS2, as well as of the main aspects of the development of the ICS2. (2)By 15/05/2021 only, the Commission will request from Norway to pay its annual contribution for the operational costs of year 2020 amounting to EUR 110,000, as well as the estimated annual contribution for 2021 amounting to EUR 280,000. By 15/05 each year, starting from 15/05/2022, the Commission will request from Norway to pay its annual contribution for that year plus the amount of the balance (negative or positive) of the previous year on the basis of a duly-documented debit note issued by the Commission. (3) By 31/01 each year, starting from 31/01/2022, –The Commission will clear the accounts relating to the past annual costs of operating the ICS2 and TAPAS on the basis of the sum already paid by Norway as against actual costs incurred by the Commission and will provide Norway with a statement of account containing a breakdown of costs identifying the different services and the supply of software; and –provide Norway with the actual annual costs, i.e. real operational costs, for the past year. The Commission will calculate the actual and estimated costs in accordance with its contracts with contractors established under the current procedures for the award of contracts. The balance (negative or positive) between the actual costs and the estimated amount of the previous year will be calculated and communicated to Norway via a statement of account from the Commission. The statement of account will include the estimated annual amount for the contribution, plus the amount of the balance (negative or positive), resulting in a net amount that the Commission will invoice to Norway via the annual debit note. (g)The payment by Norway will take place after the issuing date of the debit note. All payments must be made to the Commission bank account indicated on the debit note, within 60 days. (h)If Norway pays the amounts provided for in letter c) later than the dates specified in letter g), the Commission may charge interest on the arrears (at the rate applied by the European Central Bank to its operations in euro, published in the ‘C’ series of the Official Journal, on the day on which the deadline for repayment expires, plus one and a half points). The same rate will apply to payments to be made by the Union. (i)In the case Norway requests specific adjustments to or new IT products for the ICS2 central components, applications or services, the initiation and completion of those developments is subject to a separate, mutual agreement regarding resource needs and development costs. (j)All training materials created and maintained by the Parties shall be shared with all parties free of charge via electronic means. Norway may copy, distribute, display and perform the work and make derivative works based on the shared training materials (1)only if they give the author the credits in the manner specified in the shared training material; (2)only for non-commercial purposes. (k)The Parties agree to acknowledge and fulfil their respective responsibilities in relation with the usage of the ICS2 central components as described in Annex I to this Agreement.

(l)In the event of serious misgivings as to the proper functioning of this Annex or the ICS2 either Party may suspend the application of this arrangement provided that the other Party has been notified in writing three months in advance. Title IV Exit summary Declaration Article 18 Form and content of the exit summary declaration 1. The exit summary declaration shall be lodged using a data processing technique. Commercial, port or transport documentation may be used, provided that it contains the necessary particulars. 2. The exit summary declaration shall contain the particulars laid down for such declaration in the columns A1 and A2 of Chapter 3 of Annex B of Commission Delegated Regulation (EU) 2015/2446 and comply with their respective formats, codes and cardinalities set out in Annex B of Commission Implementing Regulation (EU) 2015/2447. It shall be completed in accordance with the notes in those Annexes. The exit summary declaration shall be authenticated by the person who completed it. 3. The customs authorities shall allow the lodging of a paper-based exit summary declaration, or any other means replacing it as agreed between the customs authorities, only in one of the following circumstances: (a)where the customs authorities’ computerised system is not functioning; (b)where the electronic application of the person lodging the exit summary declaration is not functioning, provided that the customs authorities apply the same level of risk management as that applied to exit summary declarations made using a data processing technique. The paper-based exit summary declaration shall be signed by the person who completed it. Such paper-based exit summary declarations shall be accompanied, where necessary, by loading lists or other appropriate lists, and shall contain the particulars referred to in paragraph 2. 4. Each Contracting Party shall define the conditions and procedures according to which the person lodging the exit summary declaration may modify one or more of the particulars of the declaration after lodging it. Article 19 Waiver from the obligation to lodge an exit summary declaration 1. An exit summary declaration shall not be required in respect of the following goods: (a)electrical energy; (b)goods leaving by pipeline; (c)items of correspondence; (d)goods in postal consignments; (e)goods for which an oral customs declaration or a declaration by simple crossing the border is permitted in accordance with the legislation of the Contracting Parties with the exception of pallets, containers, means of transport, as well as spare parts, accessories and equipment for such items, when carried under a transport contract.

(f)goods contained in travellers’ personal luggage; (g)goods covered by ATA and CPD Carnets; (h)goods entitled to relief pursuant to the Vienna Convention on Diplomatic Relations of 18 April 1961, the Vienna Convention on Consular Relations of 24 April 1963 or other Consular conventions, or the New York Convention of 16 December 1969 on Special Missions; (i)weapons and military equipment brought out of the customs territory of a Contracting Party by the authorities in charge of the military defence of the Contracting Parties, in military transport or transport operated for the sole use of the military authorities; (j)the following goods brought out from the customs territory of a Contracting Party directly to offshore installations operated by a person established in a customs territory of the Contracting Parties: (1)goods to be used for construction, repair, maintenance or conversion of the offshore installations; (2)goods to be used to fit to or equip the offshore installations; (3)provisions to be used or consumed on the offshore installations; (k)goods moved under cover of the NATO form 302 provided for in the Convention between the Parties to the North Atlantic Treaty regarding the Status of their Forces, signed in London on 19 June 1951, or under cover of the EU form 302 provided for in Article 1(51) of Commission Delegated Regulation (EU) 2015/2446; (l)goods which are supplied for incorporation as part of or accessories in vessels or aircraft and for the operation of the engines, machines and other equipment of vessels or aircraft, as well as foodstuffs and other items to be consumed or sold on board; (m)household effects as defined in the legislation of the respective Contracting Parties provided that they are not carried under a transport contract; (n)goods dispatched from the customs territories of the Contracting Parties to Ceuta and Melilla, Heligoland, the Republic of San Marino, the Vatican City State, the municipalities of Livigno, and the Swiss customs exclaves of Samnaun and Sampuoir; (o)goods carried on vessels moving between ports of the Contracting Parties without any intervening call at any port outside the customs territories of the Contracting Parties; (p)goods carried on aircraft moving between airports of the Contracting Parties without any intervening call at any airport outside the customs territories of the Contracting Parties; 2. An exit summary declaration shall not be required in the cases provided for in an international agreement concluded between a Contracting Party and a third country on security, subject to the procedure laid down in Article 9b(3) of the Agreement. 3. An exit summary declaration shall not be required by the Contracting Parties for goods in the following situations: (a)where a vessel that transports the goods between ports of the Contracting Parties is to call at a port outside the customs territories of the Contracting Parties and the goods are to remain loaded on board the vessel during the call at the port outside the customs territories of the Contracting Parties; (b)where an aircraft that transports the goods between airports of the Contracting Parties is to call at an airport outside the customs territories of the Contracting Parties and the goods are to remain loaded on board the aircraft during the call at the airport outside the customs territories of the Contracting Parties; (c)where, in a port or airport, the goods are not unloaded from the means of transport which carried them into the customs territories of the Contracting Parties and which will carry them out of those territories; (d)where the goods were loaded at a previous port or airport in the customs territories of the Contracting Parties where an exit summary declaration was lodged or a waiver from the obligation to lodge a pre-departure declaration was applicable and remain on the means of transport that will carry them out of the customs territories of the Contracting Parties;

(e)where goods in temporary storage or placed under the free zone procedure are transhipped from the means of transport that brought them to that temporary storage facility or free zone under the supervision of the same customs office onto a vessel, airplane or railway that will carry them out of the customs territories of the Contracting Parties, provided that the following conditions are fulfilled: (1)the transhipment is undertaken within 14 days of the presentation of the goods in accordance with the legislation of the respective Contracting Party or in exceptional circumstances, within a longer period authorised by the customs authorities where the period of 14 days is not sufficient to deal with those circumstances; (2)information about the goods is available to the customs authorities; (3)the destination of the goods and the consignee do not change to the knowledge of the carrier; (f)where goods were brought into the customs territories of the Contracting Parties but they were rejected by the competent customs authority and were immediately returned to the country of export. Article 20 Place for lodging an exit summary declaration 1. The exit summary declaration shall be lodged with the competent customs office in the customs territory of the Contracting Party where the exit formalities for goods destined for third countries are carried out. However, a customs export declaration used as an exit summary declaration shall be lodged with the competent authority of the Contracting Party in whose customs territory the formalities related to the export to a third country are carried out. In either case, the competent office shall carry out the security and safety related risk analysis on the basis of the data included in the declaration as well as the security and safety customs controls that are deemed necessary. 2. When goods leave the customs territory of a Contracting Party to a third country through the customs territory of the other Contracting Party, and export formalities