Two years after the start of operations of ETIAS and every two years thereafter , eu - LISA shall submit to the European Parliament , to the Council and to the Commission a report on the technical functioning of ETIAS Information System , including the security thereof , and statistical data concerning the ETIAS watchlist in accordance with the review procedure referred to in Article 35(5 ) and ( 6 ) .