Decision of the EEA Joint Committee No 146/2025 of 13 June 2025 amending Annex XIII (Transport) to the EEA Agreement [2025/1840]
Date: 2025-06-13
Institutions: EEA Joint Committee
Subjects: European Economic Area, air safety, air traffic, application of EU law, aviation security, civil aviation, information security, organisation, revision of an agreement, risk management




L_202501840EN.000101.fmx.xml












Official Journal of the European Union


EN
L series













2025/1840


2.10.2025







            DECISION OF THE EEA JOINT COMMITTEE No 146/2025
of 13 June 2025
         
amending Annex XIII (Transport) to the EEA Agreement [2025/1840]


THE EEA JOINT COMMITTEE,

Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98 thereof,

Whereas:







(1)


Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (1) is to be incorporated into the EEA Agreement.












(2)


Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664, and for competent authorities covered by Commission Regulations (EU) No 748/2012, (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340 and (EU) No 139/2014, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 and amending Commission Regulations (EU) No 1178/2011, (EU) No 748/2012, (EU) No 965/2012, (EU) No 139/2014, (EU) No 1321/2014, (EU) 2015/340, and Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 (2) is to be incorporated into the EEA Agreement.












(3)


Annex XIII to the EEA Agreement should therefore be amended accordingly,





HAS ADOPTED THIS DECISION:



Article 1
Annex XIII to the EEA Agreement is amended as follows:






1.


The following indent is added in points 66ne (Commission Regulation (EU) No 1178/2011), 66nf (Commission Regulation (EU) No 965/2012), 66nj (Commission Regulation (EU) 2015/340), 66q (Commission Regulation (EU) No 1321/2014) and 66xg (Commission Implementing Regulation (EU) 2017/373):






‘—



32023 R 0203: Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 (OJ L 31, 2.2.2023, p. 1).’














2.


The following indents are added in points 66nh (Commission Regulation (EU) No 139/2014) and 66p (Commission Regulation (EU) No 748/2012):






‘—



32022 R 1645: Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 (OJ L 248, 26.9.2022, p. 18),










—



32023 R 0203: Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 (OJ L 31, 2.2.2023, p. 1).’














3.


The following is added in point 66zbe (Commission Implementing Regulation (EU) 2021/664):

                              ‘, as amended by:






—



32023 R 0203: Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 (OJ L 31, 2.2.2023, p. 1).’
                                 














4.


The following points are inserted after point 66zbf (Commission Delegated Regulation (EU) 2024/1403):






‘66zbg.



32022 R 1645: Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18).










66zbh.



32023 R 0203: Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664, and for competent authorities covered by Commission Regulations (EU) No 748/2012, (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340 and (EU) No 139/2014, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 and amending Commission Regulations (EU) No 1178/2011, (EU) No 748/2012, (EU) No 965/2012, (EU) No 139/2014, (EU) No 1321/2014, (EU) 2015/340, and Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 (OJ L 31, 2.2.2023, p. 1).’










Article 2
The texts of Delegated Regulation (EU) 2022/1645 and Implementing Regulation (EU) 2023/203 in the Icelandic and Norwegian languages, to be published in the EEA Supplement to the Official Journal of the European Union, shall be authentic.


Article 3
This Decision shall enter into force on 14 June 2025, provided that all the notifications under Article 103(1) of the EEA Agreement have been made (*1).


Article 4
This Decision shall be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European Union.




Done at Brussels, 13 June 2025.


For the EEA Joint Committee


The President

Nicolas VON LINGEN
            





(1)  
            OJ L 248, 26.9.2022, p. 18.

(2)  
            OJ L 31, 2.2.2023, p. 1.

(*1)  No constitutional requirements indicated.


ELI: http://data.europa.eu/eli/dec/2025/1840/oj
ISSN 1977-0677 (electronic edition)