Commission Implementing Regulation (EU) 2024/2106of 31 July 2024amending Implementing Decision C(2021) 5052 laying down technical details for European search portal user profiles, pursuant to Article 8(2) of Regulation (EU) 2019/817 of the European Parliament and of the Council

Commission Implementing Regulation (EU) 2024/2106 of 31 July 2024 amending Implementing Decision C(2021) 5052 laying down technical details for European search portal user profiles, pursuant to Article 8(2) of Regulation (EU) 2019/817 of the European Parliament and of the Council THE EUROPEAN COMMISSION, Having regard to the Treaty on the Functioning of the European Union, Having regard to Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA OJ L 135, 22.5.2019, p. 27. , and in particular Article 8(2) thereof, Whereas: (1) Regulation (EU) 2019/817, together with Regulation (EU) 2019/818 of the European Parliament and of the Council Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum and migration and amending Regulations (EU) 2018/1726, (EU) 2018/1862 and (EU) 2019/816 (OJ L 135, 22.5.2019, p. 85). establishes a framework to ensure interoperability between the EU information systems in the field of borders, visa, police and judicial cooperation, asylum and migration. (2) The framework includes a number of interoperability components, including a European search portal. The European search portal facilitates the fast, seamless, efficient, systematic and controlled access by Member State authorities and Union agencies to the EU information systems, to Europol data and to the International Criminal Police Organisation (Interpol) databases, insofar as this access is needed to perform their tasks and in accordance with their access rights. (3) To enable the use of the European search portal, it is necessary to create user profiles for each category of user of the European search portal and for the purposes of the queries. To ensure uniform application, it is necessary to establish technical details for the profiles. (4) In order to enable central systems and interoperability components to launch a query through the European search portal for the purposes laid down in Union law, Commission Implementing Decision C(2021) 5052 Commission Implementing Decision of 9 November 2021 laying down technical details for European search portal user profiles, pursuant to Article 8(2) of Regulation (EU) 2019/817 of the European Parliament and of the Council (C(2021) 5052). lays down the profiles for the users of the European search portal. (5) Following the adoption of Regulation (EU) 2021/1134 of the European Parliament and of the Council Regulation (EU) 2021/1134 of the European Parliament and of the Council of 7 July 2021 amending Regulations (EC) No 767/2008, (EC) No 810/2009, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1860, (EU) 2018/1861, (EU) 2019/817 and (EU) 2019/1896 of the European Parliament and of the Council and repealing Council Decisions 2004/512/EC and 2008/633/JHA, for the purpose of reforming the Visa Information System (OJ L 248, 13.7.2021, p. 11).

, which reformed the Visa Information System and Regulations (EU) 2021/1150, (EU) 2021/1151, (EU) 2021/1152 which established the conditions for accessing other EU information systems for the purposes of the European Travel Information and Authorisation System, Implementing Decision C(2021) 5052 should be amended to introduce provisions stemming from these Regulations. In order to ensure consistency between both Implementing Decisions, it would also be necessary to amend Commission Implementing Decision C(2021) 5053 Commission Implementing Decision of 5 November 2021 laying down technical details for European search portal user profiles, pursuant to Article 8(2) of Regulation (EU) 2019/818 of the European Parliament and of the Council (C(2021) 5053). . (6) It is also necessary to lay down the user profiles enabling access to Europol data by Member State authorities and Union Agencies. (7) Each link stored in the multiple-identity detector has its own unique single identification number. Therefore, when searching for information related to a link, the single identification number should be used to retrieve the relevant information. (8) Given that Regulation (EU) 2019/817 builds upon the Schengen acquis, in accordance with Article 4 of Protocol No 22 on the Position of Denmark, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, Denmark notified the implementation of Regulation (EU) 2019/817 in its national law. It is therefore bound by this Regulation. (9) This Regulation constitutes a development of the provisions of the Schengen acquis in which Ireland does not take part and falls outside the scope of the measures provided for in Council Decision 2002/192/EC Council Decision 2002/192/EC of 28 February 2002 concerning Ireland’s request to take part in some of the provisions of the Schengen acquis (OJ L 64, 7.3.2002, p. 20). . Ireland is therefore not taking part in the adoption of this Regulation and is not bound by it or subject to its application. (10) As regards Iceland and Norway, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement concluded by the Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning the association of those two States with the implementation, application and development of the Schengen acquis OJ L 176, 10.7.1999, p. 36. , which fall within the area referred to in Article 1, point A of Council Decision 1999/437/EC Council Decision 1999/437/EC of 17 May 1999 on certain arrangements for the application of the Agreement concluded by the Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning the association of those two States with the implementation, application and development of the Schengen acquis (OJ L 176, 10.7.1999, p. 31). . (11) As regards Switzerland, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquis

OJ L 53, 27.2.2008, p. 52. , which fall within the area referred to in Article 1, point A of Decision 1999/437/EC, read in conjunction with Article 3 of Council Decision 2008/146/EC Council Decision 2008/146/EC of 28 January 2008 on the conclusion, on behalf of the European Community, of the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquis (OJ L 53, 27.2.2008, p. 1). . (12) As regards Liechtenstein, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Protocol between the European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquis OJ L 160, 18.6.2011, p. 21. which fall within the area referred to in Article 1, point A of Decision 1999/437/EC read in conjunction with Article 3 of Council Decision 2011/350/EU Council Decision 2011/350/EU of 7 March 2011 on the conclusion, on behalf of the European Union, of the Protocol between the European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquis, relating to the abolition of checks at internal borders and movement of persons (OJ L 160, 18.6.2011, p. 19). . (13) As regards Cyprus, this Regulation constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 3(1) of the 2003 Act of Accession. (14) The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39). and delivered an opinion on 19 September 2023. (15) The measures provided for in this Regulation are in accordance with the opinion of the Interoperability Committee, HAS ADOPTED THIS REGULATION:

Article 1

The Annex to Implementing Decision C(2021) 5052 is amended in accordance with the Annex to this Regulation.

Article 2

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in the Member States in accordance with the Treaties. Done at Brussels, 31 July 2024. For the Commission The President Ursula von der Leyen

Annex

ANNEX Pursuant to Article 18(1) of Regulation (EU) 2019/818, only the following data will be made available: surname (family name), first names (given names), date of birth, place of birth (town and country), nationality or nationalities, gender, previous names, if applicable, where available pseudonyms or aliases, as well as, where available, information on travel documents.

Article 26(1)(d) of Regulation (EU) 2019/817 and Article 26(1)(a) of Regulation (EU) 2019/818. Data of EES and VIS stored in CIR. Data of EES and VIS stored in CIR. Data from the relevant EU information systems stored in CIR. Data from the relevant EU information systems stored in CIR. Data from the relevant EU information systems stored in CIR. Access is automatically given when accessing identity data related to a red link in any of the EU information systems. There is no specific query needed for this purpose. Access is automatically given when accessing identity data related to a white link in any of the EU information systems to which the user has access. There is no specific query needed for this purpose. Access is automatically given when accessing identity data related to a green link in any of the EU information systems to which the user has access. There is no specific query needed for this purpose. ETIAS watchlist and specific risk indicators are not covered as part of Article 20(2). Subject to the participation of Interpol databases in the interoperability framework, which is subject to the conclusion of an agreement between EU and Interpol on data protection, pursuant to Regulation (EU) 2019/817 and Regulation (EU) 2019/818. ETIAS watchlist and specific risk indicators are not covered as part of Article 20(2). Subject to the participation of Interpol databases in the interoperability framework, which is subject to the conclusion of an agreement between EU and Interpol on data protection, pursuant to Regulation (EU) 2019/817 and Regulation (EU) 2019/818. No reply to be provided. ETIAS watchlist is not covered by this profile. ETIAS watchlist is not covered by this profile. ETIAS watchlist is not covered by this profile. ETIAS watchlist is not covered by this profile. The SIS profile related to a border check is linked to the EES profile related to a border check and the user profile will be the same. Regulation (EU) 2016/399 of the European Parliament and of the Council of 9 March 2016 on a Union Code on the rules governing the movement of persons across borders (Schengen Borders Code) (OJ L 77, 23.3.2016, p. 1). Purpose of querying through the ESPCategory of ESP userEU Member State(s), Schengen Associated Countries or Union agencyData to be used for queryingSystem, component, database to be queried through the ESPSystem, component, database to provide a reply to the userData to be provided in the replyPursuant to Article 7(2), 2nd sentence of Regulation (EU) 2019/817 and Article 7(2), 2nd sentence of Regulation (EU) 2019/8181Identification in the territory pursuant to Article 20 of Regulation (EU) 2019/817 and Article 20 of Regulation (EU) 2019/818Police authoritiesEU Member States and Schengen Associated Countries applying Regulation (EU) 2019/817 and (EU) 2019/818

Article 20(4): biometric data CIRCIR Pursuant to Article 18(1) of Regulations (EU) 2019/817 and (EU) 2019/818:

1. EES: Article 16(1)(a) to (d), Article 17(1)(a) to (c), Article 18(1) and (2) of Regulation (EU) 2017/2226
2. ETIAS: Article 17(2)(a) to (e) of Regulation (EU) 2018/1240
3. VIS: points (4)(a) to (ca) and points (5) and (6) of Article 9 and in points (d) to (g), (j) and (k) of Article 22a(1) of Regulation (EC) No 767/2008
4. ECRIS-TCN: Article 5(1)(b) and (2) and 5(1)(a) of Regulation (EU) 2019/816 2Prevention, detection or investigation of terrorist offences or other serious criminal offences pursuant to Article 22(1) of Regulation (EU) 2019/817 and Article 22(1) of Regulation (EU) 2019/818EU Member States’ and Schengen Associated Countries’ designated authorities for the prevention, detection or investigation of terrorist offences or other serious criminal offencesEU Member States and Schengen Associated Countries subject to their variable geometry participation in the EU information systemsAny combination of biometric, identity or travel document data searchable in CIRCIRCIR Match or no match reply In case of match(es), reference to the EU information system(s) as referred to in Article 22(2) of Regulation (EU) 2019/817 and Article 22(2) of Regulation (EU) 2019/818 that contains data about the person EuropolEuropolAny combination of biometric, identity or travel document data searchable in CIRCIRCIR3 Launching multiple-identity detection pursuant to Article 27(1) and (2) of Regulation (EU) 2019/817 and 27(1) and (2) of Regulation (EU) 2019/818) when creating or updating a file in any underlying EU information system CIR SIS Central System EU Member States and Schengen Associated Countries applying Regulation (EU) 2019/817 and Regulation (EU) 2019/818EES: data referred to in Article 27(3)(a) and (2) and (4) Regulation (EU) 2019/817 CIR Central SIS CIR MID Central SIS In case of a yellow link, the MID will notify the authority responsible for the manual verification, pursuant to Article 29(1) and (2) of Regulation (EU) 2019/817 and Article 29(1) and (2) of Regulation (EU) 2019/818) & indicate the single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818 In the case of no yellow link to be manually verified by the authority triggering the MID process, the MID will notify that no action is required from this authority ETIAS: data referred to in Article 27(3)(c) and (2) and (4) Regulation (EU) 2019/817SIS (Regulation (EU) 2018/1861): data referred to in Article 27(3)(d) and (2) and (4) of Regulation (EU) 2019/817 SIS (Regulation (EU) 2018/1860): data referred to in Article 27(3)(e) and (2) and (4) of Regulation (EU) 2019/817SIS (Regulation (EU) 2018/1862): data referred to in Article 27(3)(a) and (2) and (4) of Regulation (EU) 2019/818ECRIS-TCN: data referred to in Article 27(3)(b) and (2) and (4) of Regulation (EU) 2019/818VIS: data referred to in Article 27(3)(b) and (2) and (4) of Regulation (EU) 2019/817Manual verification of different identities pursuant to Article 21(1) of Regulation (EU) 2019/817 and Article 21(1) of Regulation (EU) 2019/8184Retrieval of data to manually verify yellow links created after creating or updating an individual file in the EES in accordance with Article 14 of Regulation (EU) 2017/2226

Border authority Immigration authority VISA authority SIRENE Bureau of the Member State that created an alert referred to in Article 26, Article 32, Article 34, or Article 36 of Regulation (EU) 2018/1862, where there is a match against such alert EU Member States and Schengen Associated CountriesSingle identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR MID Central SIS Articles 21(1) and 29(3) and (6) of Regulation (EU) 2019/817 and Articles 21(1) and 29(3) and (5) of Regulation (EU) 2019/818, Article 34(1)(g) of Regulation (EU) 2018/1861, and Article 44(1)(f) of Regulation (EU) 2018/1862: linked data contained in the relevant identity confirmation file.Single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules. 5Retrieval of data to manually verify yellow links created after creating or updating an application file in ETIAS in accordance with Article 19 of Regulation (EU) 2018/1240 ETIAS Central Unit ETIAS National Unit SIRENE Bureau of the Member State that created an alert referred to in Article 26, Article 32, Article 34, or Article 36 of Regulation (EU) 2018/1862, where there is a match against such alert EU Member States and Schengen Associated Countries, European Border and Coast Guard Agency Single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR MID Central SIS Articles 21(1) and 29(3) and (6) of Regulation (EU) 2019/817 and Articles 21(1) and 29(3) and (5) Regulation (EU) 2019/818), and Article 34(1)(g) of Regulation (EU) 2018/1861, and Article 44(1)(f) of Regulation (EU) 2018/1862: linked data contained in the relevant identity confirmation file.Single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules6Retrieval of data to manually verify yellow links created after creating or updating an alert on a person in SIS in accordance with Article 3 of Regulation (EU) 2018/1860, Chapter V of Regulation (EU) 2018/1861 and Chapters VI to IX of Regulation (EU) 2018/1862SIRENE Bureau of the Member State when creating or updating a SIS alert in accordance with Regulation (EU) 2018/1860, Regulation (EU) 2018/1861, or Regulation (EU) 2018/1862EU Member States and Schengen Associated CountriesSingle identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR MID Central SIS Articles 21(1) and 29(3) and (6) of Regulation (EU) 2019/817 and Articles 21(1) and 29(3) and (5) of Regulation (EU) 2019/818) (depending on the SIS alert): linked data contained in the relevant identity confirmation fileSingle identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules

7Retrieval of data to manually verify yellow links created after creating or modifying a data record in ECRIS-TCN in accordance with Article 5 or 9 of Regulation (EU) 2019/816 Central authority of the convicting Member State when creating or updating a data record pursuant to Article 26 of Regulation (EU) 2019/818 regarding authorities with a right to access MID SIRENE Bureau of the Member State that created an alert referred to in Article 26, Article 32, Article 34, or Article 36 of Regulation (EU) 2018/1862, where there is a match against such alert EU Member States except for Ireland and DenmarkSingle identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR MID Central SIS Articles 21(1) and 29(3) and (6) of Regulation (EU) 2019/817 and Articles 21(1) and 29(3) and (5) of Regulation (EU) 2019/818), and Article 34(1)(g) of Regulation (EU) 2018/1861, and Article 44(1)(f) of Regulation (EU) 2018/1862: linked data contained in the relevant identity confirmation file.Single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules 8Retrieval of data to manually verify yellow links created after creating or updating an application file in VIS in accordance with Regulation (EC) No 767/2008 Visa authorities and authorities competent to decide on an application for a long-stay visa or residence permit VIS designated authorities referred to in Articles 9d and 22b of Regulation (EC) No 767/2008 only for yellow links created between data in VIS and ECRIS-TCN SIRENE Bureau of the Member State that created an alert referred to in Article 26, Article 32, Article 34, or Article 36 of Regulation (EU) 2018/1862, where there is a match against such alert EU Member States and Schengen Associated CountriesSingle identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR MID Central SIS Articles 21(1) and 29(3) and (6) of Regulation (EU) 2019/817 and Articles 21(1) and 29(3) and (5) of Regulation (EU) 2019/818), and Article 34(1)(g) of Regulation (EU) 2018/1861, and Article 44(1)(f) of Regulation (EU) 2018/1862: linked data contained in the relevant identity confirmation file.Single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules Pursuant to Article 21(2) of Regulation (EU) 2019/817 and Article 21(2) of Regulation (EU) 2019/8189Retrieval of red links for the purposes of combating identity fraud pursuant to Article 21(2) of Regulation (EU) 2019/817 and Article 21(2) of Regulation (EU) 2019/818Member State authorities and Union Agencies having access to at least one EU information system included in the CIR or to SIS EU Member States and Schengen Associated Countries

Union Agencies Single identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR MID Identity confirmation file referred to in Article 34 of Regulation (EU) 2019/817 and Regulation (EU) 2019/818; Linked data from the corresponding EU information systems in accordance with Article 21(2) of Regulation (EU) 2019/817 and Article 21(2) of Regulation (EU) 2019/818 Pursuant to Article 69 of Regulation (EU) 2019/817 and Article 65 of Regulation (EU) 2019/81810Retrieval of data to manually verify yellow links during the transitional period of the multiple-identity detectorETIAS Central UnitEuropean Border and Coast Guard AgencySingle identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR Central SIS MID Identity confirmation file referred to in Article 34 of Regulation (EU) 2019/817 and Regulation (EU) 2019/818; Linked data from the corresponding EU information systems Single identification number as referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules 11Retrieval of data to manually verify yellow links during the transitional period of the multiple-identity detectorSIRENE Bureau of the Member States creating an alert other than an alert created under Article 3 of Regulation (EU) 2018/1860, Articles 24 and 25 of Regulation (EU) 2018/1861EU Member States and Schengen Associated CountriesSingle identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MID CIR Central SIS MID Identity confirmation file referred to in Article 34 of Regulation (EU) 2019/817 and Regulation (EU) 2019/818; Linked data from the corresponding EU information systems Single identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818MIDMIDArticles 21 and 26(2), (3), (4) and 29(6): links according to access rights rules12Access for the purpose of rectification and erasure of links created during the transitional period of the multiple-identity detector ETIAS Central Unit SIRENE Bureau of the Member States creating an alert other than an alert created under Article 3 of Regulation (EU) 2018/1860, Articles 24 and 25 of Regulation (EU) 2018/1861 European Border and Coast Guard Agency EU Member States and Schengen Associated Countries Single identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818 or alphanumeric dataMID CIR Central SIS MID Identity confirmation file referred to in Article 34 of Regulation (EU) 2019/817 and Regulation (EU) 2019/818; Linked data from the corresponding EU information systems Pursuant to Articles 48 and 49 of Regulation (EU) 2019/817 and Articles 48 and 49 of Regulation (EU) 2019/81813Access to facilitate the exercise of the rights of access to, rectification, erasure or restriction of processing of personal data.

Member States and Schengen Associated Countries ETIAS Central Unit EU Member States and Schengen Associated Countries European Border and Coast Guard Agency Single identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818 or alphanumeric dataMID CIR Central SIS MID Identity confirmation file referred to in Article 34 of Regulation (EU) 2019/817 and Regulation (EU) 2019/818; Linked data from the corresponding EU information systems Pursuant to Articles 31(3), 32(7) and 33(5) of Regulation (EU) 2019/817 and Articles 31(3), 32(7) and 33(5) of Regulation (EU) 2019/81814Access for the purpose of rectification and erasure of links Member States and Schengen Associated Countries having access to links according to access rights laid down in Regulations (EU) 2019/817 and (EU) 2019/818 ETIAS Central Unit EU Member States and Schengen Associated Countries European Border and Coast Guard Agency Single identification number referred to in Article 34(c) of Regulation (EU) 2019/817 and Regulation (EU) 2019/818 or alphanumeric dataMID CIR Central SIS MID Identity confirmation file referred to in Article 34 of Regulation (EU) 2019/817 and Regulation (EU) 2019/818; Linked data from the corresponding EU information systems Pursuant to Article 26 of Regulation (EU) 2019/817 and Article 26 of Regulation (EU) 2019/81815Access to red links pursuant to Article 26(2) of Regulation (EU) 2019/817 and Article 26(2) of Regulation (EU) 2019/818All ESP users having access to at least one EU information system included in the CIR or to SISEU Member States, Schengen Associated Countries and Union agenciesN/AMIDMID The red link(s) and the reference to the EU information systems in which the linked data are held, pursuant to Article 34(a) and (b) of Regulation (EU) 2019/817 and Article 34(a) and (b) of Regulation (EU) 2019/818 &

Article 34(1)(g) of Regulation (EU) 2018/1861, and Article 44(1)(f) of Regulation (EU) 2018/1862 16Access to white links pursuant to Article 26(3) of Regulation (EU) 2019/817 and Article 26(3) of Regulation (EU) 2019/818All ESP users having access to the two systems between which a white link was createdEU Member States, Schengen Associated Countries and Union agenciesN/AMIDMIDThe white link referred to in Article 33 of Regulation (EU) 2019/817 and Article 33 of Regulation (EU) 2019/81817Access to green links pursuant to Article 26(4) of Regulation (EU) 2019/817 and Article 26(4) of Regulation (EU) 2019/818All ESP users having access to the two systems between which a green link was created and a query to those systems revealed a match with the two sets of linked dataEU Member States, Schengen Associated Countries and Union agenciesN/AMIDMIDThe green link referred to in Article 31 of Regulation (EU) 2019/817 and Article 31 of Regulation (EU) 2019/818 Pursuant to Article 7(2) of Regulation (EU) 2019/817 – ETIAS18ETIAS automated processing pursuant to Article 20 of Regulation (EU) 2018/1240ETIAS Central SystemThe European Border and Coast Guard AgencyData referred to in Article 17(2)(a), (aa), (b), (c), (d), (f), (g), (j), (k), (m) and Article 17(8) of Regulation (EU) 2018/1240 ETIAS VIS EES Central SIS ECRIS-TCN Eurodac Interpol SLTD Interpol TDAWN Europol data ETIAS VIS EES Central SIS ECRIS-TCN Eurodac Interpol SLTD Interpol TDAWN Europol data Hits triggered, data that triggered the hit and unique reference number of the record that triggered the hit to be included in the ETIAS application file in accordance with Regulation (EU) 2018/124019Verification of hits resulting from ETIAS automated processing pursuant to Articles 22, 25a and 26 of Regulation (EU) 2018/1240 ETIAS Central Unit ETIAS National Unit(s) EU Member States, Schengen Associated Countries and European Border and Coast Guard AgencyHits triggered, data that triggered the hit and unique reference number of the record that triggered the hit in accordance with Regulation (EU) 2018/1240 Central SIS ETIAS VIS EES ECRIS-TCN Eurodac Interpol SLTD Interpol TDAWN Europol data Central SIS ETIAS VIS EES ECRIS-TCN Eurodac Interpol SLTD Interpol TDAWN Europol data Articles 11(8) and 22(2) of Regulation (EU) 2018/1240: ETIAS application file, linked ETIAS application files (and links to the relevant files in other systems as well as Member State responsible for the data that triggered the hit or Europol. See Article 26(1) of Regulation (EU) 2018/1240: ETIAS application file, linked ETIAS application files and links to the relevant files in other systems as well as Member States responsible for the data that triggered the hit or Europol Data referred to in article 25a(1) and (2) of Regulation (EU) 2018/1240 20ETIAS automated checks pursuant to Article 23 of Regulation (EU) 2018/1240ETIAS Central SystemThe European Border and Coast Guard AgencyData referred to in Article 17(2)(a), (aa), (b) and (d) of Regulation (EU) 2018/1240Central SISCentral SISHits triggered, data that triggered the hit and unique reference number of the record that triggered the hit to be included in the ETIAS application file in in accordance with Regulation (EU) 2018/124021Verification of hits resulting from ETIAS automated checks pursuant to Article 23 of Regulation (EU) 2018/1240ETIAS Central UnitThe European Border and Coast Guard AgencyHits triggered, data that triggered the hit and unique reference number of the record that triggered the hit in accordance with Regulation (EU) 2018/1240Central SISCentral SISData referred to in Articles 11(8) and 23(2) of Regulation (EU) 2018/124022Verification of hits resulting from ETIAS automated checks pursuant to Article 23 of Regulation (EU) 2018/1240ETIASEU Member States, Schengen Associated Countries and European Border and Coast Guard AgencyData referred to in Article 23(3) of Regulation (EU) 2018/1240 including the unique reference number of the record that triggered the hit in accordance with Regulation (EU) 2018/1240Central SISN/ANotification to the SIRENE Bureau containing data referred in Article 23(3) of Regulation (EU) 2018/124023ETIAS access pursuant to Article 13(1) of Regulation (EU) 2018/1240

ETIAS National Units ETIAS Central Unit EU Member States, Schengen Associated Countries and the European Border and Coast Guard AgencyData pursuant to each specific access type, in accordance with Regulation (EU) 2018/1240ETIASETIASAs provided for in the specific legal basis for each specific purpose 24ETIAS access pursuant to Article 13(2) of Regulation (EU) 2018/1240Border authoritiesEU Member States, Schengen Associated CountriesData pursuant to each specific access type, in accordance with Regulation (EU) 2018/1240ETIASETIASAs provided for in the specific legal basis for each specific purpose25ETIAS access pursuant to Article 13(4) of Regulation (EU) 2018/1240Immigration authoritiesEU Member States, Schengen Associated CountriesData pursuant to each specific access type, in accordance with Regulation (EU) 2018/1240ETIASETIASAs provided for in the specific legal basis for each specific purpose26ETIAS access pursuant to Article 50(2) of Regulation (EU) 2018/1240Central access pointEU Member States and Schengen Associated CountriesData referred to in Article 52(2) and (3) of Regulation (EU) 2018/1240ETIASETIASData referred to in Article 52(4) of Regulation (EU) 2018/124027ETIAS access pursuant to Article 53 of Regulation (EU) 2018/1240EuropolEuropolData referred to in Article 52(2) and (3) of Regulation (EU) 2018/1240ETIASETIASData referred to in Article 53(4) of Regulation (EU) 2018/124028Verification of conditions for the retention of application files pursuant to Article 24(6)(c)(ii) and Article 54(1)(b) of Regulation (EU) 2018/1240ETIASThe European Border and Coast Guard AgencyThe unique reference numbers, referred to in Article 11(8) of Regulation (EU) 2018/1240, or the identity or travel document data EES VIS ECRIS-TCN Eurodac Central SIS Europol data Interpol SLTD Interpol TDAWN EES VIS ECRIS-TCN Eurodac Central SIS Europol data Interpol SLTD Interpol TDAWN Conditions for data retention fulfilled/not fulfilled.29Revocation of a travel authorisation pursuant to Article 41(3) of Regulation (EU) 2018/1240ETIASEU Member States, Schengen Associated CountriesData pursuant to each specific access type, in accordance with Regulation (EU) 2018/1240Central SISCentral SISNotification 30Revocation of a travel authorisation pursuant to Article 41(5) of Regulation (EU) 2018/1240ETIASEU Member States, Schengen Associated CountriesData pursuant to each specific access type, in accordance with Regulation (EU) 2018/1240EESEESNotificationPursuant to Article 7(2) of Regulation (EU) 2019/817 – EES31Border check pursuant to Article 23 of Regulation (EU) 2017/2226Border authorityEU Member States (except for those which do not operate the EES) and Schengen Associated Countries

Article 16(1)(a), (b), (c) and Article 17(1)(a) of Regulation (EU) 2017/2226 (travel document MRZ data) EES VIS ETIAS EES VIS ETIAS In case of a match, confirmation of a match and the information contained in the reply to EES from the ETIAS or VIS32EES access pursuant to Article 9(2) of Regulation (EU) 2017/2226Competent national authoritiesEU Member States (except for those which do not operate the EES) and Schengen Associated CountriesData pursuant to each specific access type, in accordance with Regulation (EU) 2017/2226EESEESAs provided for in the specific legal basis for each specific purpose33EES access pursuant to Article 29(3) of Regulation (EU) 2017/2226Central Access PointEU Member States (except for those which do not operate the EES) and Schengen Associated CountriesData pursuant to each specific access type, in accordance with Regulation (EU) 2017/2226EESEESAs provided for in the specific legal basis for each specific purpose34EES access pursuant to Article 30 of Regulation (EU) 2017/2226Europol Central Access PointEuropolData pursuant to each specific access type, in accordance with Regulation (EU) 2017/2226EESEESAs provided for in the specific legal basis for each specific purpose Pursuant to Article 7(2) of Regulation (EU) 2019/818 – ECRIS-TCN35ECRIS-TCN access pursuant to Regulation (EU) 2019/816 ECRIS-TCN central authority Europol Eurojust EPPO EU Member States Europol Eurojust EPPO Data pursuant to each specific access type, in accordance with Regulation (EU) 2019/816ECRIS-TCNECRIS-TCNAs provided for in the specific legal basis for each specific purposePursuant to Article 7(2) of Regulation (EU) 2019/817 – revised VIS36VIS automated processing: queries of information systems and databases for the purpose of Article 9a of the revised VIS Regulation (EC) No 767/2008VIS Central SystemEU Member States and Schengen Associated Countries issuing short stay visasData in Article 9(4), (5), (6) of the revised VIS Regulation Central SIS EES ETIAS Eurodac ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN Central SIS EES ETIAS Eurodac ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN As provided for in the revised VIS Regulation (EC) No 767/2008 depending on the type of the hit 37VIS automated processing: queries of information systems and databases for the purpose of Article 22b of the revised VIS Regulation (EC) No 767/2008VIS Central SystemEU Member States and Schengen Associated Countries issuing long stay visas and residence permitsData in Article 22a(1)(d), (e), (f), (g), (i), (j), (k) of the revised VIS Regulation Central SIS EES ETIAS VIS ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN Central SIS EES ETIAS VIS ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN As provided for in the revised VIS Regulation (EC) No 767/2008 depending on the type of the hit38Verification of hits resulting from VIS automated processing pursuant to Articles 9c, 9d and 9e Visa authorities VIS designated authorities The ETIAS National Units EU Member States and Schengen Countries issuing short stay visasAs provided for in the revised VIS Regulation (EC) No 767/2008 depending on the type of the hit

Central SIS EES ETIAS Eurodac ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN Central SIS EES ETIAS Eurodac ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN (Temporary) access to the data in the other EU Information Systems and other databases according to the revised VIS Regulation (EC) No 767/2008 39Verification of hits resulting from VIS automated processing pursuant to Article 22b Competent visa or immigration authority VIS designated authorities ETIAS National Units EU Member States and Schengen Countries issuing long stay visas and residence permitsAs provided for in the revised VIS Regulation (EC) No 767/2008 depending on the type of the hit Central SIS EES ETIAS VIS ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN Central SIS EES ETIAS VIS ECRIS-TCN Europol data Interpol SLTD Interpol TDAWN (Temporary) access to the data in the other EU Information Systems and other databases according to the revised VIS Regulation (EC) No 767/200840Access pursuant to Article 15 of revised Regulation (EC) No 767/2008 for the purpose of examining applicationsCompetent visa authorityEU Member States and Schengen Associated Countries with VIS accessData pursuant to each specific access type, in accordance with Regulation (EC) No 767/2008 VIS EES VIS EES As provided for in the specific legal basis for each specific purpose41VIS access pursuant to Article 6 of revised Regulation (EC) No 767/2008 Visa authorities Authorities competent to collect or decide on an application for a long-stay visa or residence permit Duly authorised staff of the national authorities of each Member State and of the Union bodies which are competent for the purposes laid down in Article 6(2) of the revised VIS Regulation EU Member States and Schengen Associated Countries with VIS accessData pursuant to each specific access type, in accordance with Regulation (EC) No 767/2008VISVISAs provided for in the specific legal basis for each specific purpose 42Access pursuant to Article 45e of the revised VIS RegulationTeams deployed by the European Border and Coast Guard AgencyTeams deployed by European Border and Coast Guard AgencyData pursuant to each specific access type, in accordance with Regulation (EC) No 767/2008VISVISAs provided for in the specific legal basis for each specific purpose43Access pursuant to Article 22l, 22o and 22p of the revised VIS Regulation Central Access Point(s) Designated authorities EU Member States and Schengen Associated Countries with VIS accessData pursuant to each specific access type, in accordance with Regulation (EC) No 767/2008VISVISAs provided for in the specific legal basis for each specific purpose44Access pursuant to Article 22m and 22r of the revised VIS RegulationEuropol Central Access PointEuropolData pursuant to each specific access type, in accordance with Regulation (EC) No 767/2008VISVISAs provided for in the specific legal basis for each specific purposePursuant to 7(3) of Regulation (EU) 2019/817 and Article 7(3) of Regulation (EU) 2019/818 – Central SIS use (may clause)45Border check in accordance with Article 6(1) of Regulation (EU) 2016/399 (Schengen Borders Code)Border authorityEU Member States and Schengen Associated Countries applying the Schengen Border CodeAlphanumeric and dactyloscopic dataCentral SISCentral SISList of potential matches and in case of a match, data stored in SIS in respect of that alert

Article 44 of Regulation (EU) 2018/1862 EU Member States and Schengen Associated Countries with SIS accessAlphanumeric data and dactyloscopic dataCentral SISCentral SISList of potential matches and in case of a match, data stored in SIS in respect of that alertPursuant to Article 7(4) Regulation (EU) 2019/817 and Article 7(4) of Regulation (EU) 2019/818 (SIS use by Union agencies shall clause)47Access to data in SIS by the teams deployed by the European Border and Coast Guard Agency pursuant to Article 17(3) of Regulation (EU) 2018/1860, to Article 36 of Regulation (EU) 2018/1861 and to Article 50 of Regulation (EU) 2018/1862Teams deployed by the European Border and Coast Guard AgencyTeams deployed by the European Border and Coast Guard AgencyAlphanumeric and dactyloscopic dataCentral SISCentral SISList of potential matches and in case of a match, data stored in SIS in respect of that alert48Access to data in SIS by Europol pursuant to Article 17(2) of Regulation (EU) 2018/1860, Article 35 of Regulation (EU) 2018/1861 and Article 48 of Regulation (EU) 2018/1862EuropolEuropolAlphanumeric and dactyloscopic dataCentral SISCentral SISList of potential matches and in case of a match, data stored in SIS in respect of that alert 49Access to data in SIS by Eurojust pursuant to Article 49 of Regulation (EU) 2018/1862National members of Eurojust and assistants of the national members of EurojustNational members of Eurojust and assistants of the national members of EurojustAlphanumeric and dactyloscopic dataCentral SISCentral SISList of potential matches and in case of a match, data stored in SIS in respect of that alertPursuant to Article 7(5) Regulation (EU) 2019/818 (access to Europol data may clause)50Access to Europol data pursuant to Article 20 of Regulation (EU) 2016/794Europol staffEuropolData pursuant to each specific access type, in accordance with Regulation (EU) 2016/794Europol dataEuropol dataAs provided for in the specific legal basis for each specific purpose51Access to Europol data pursuant to Article 20 of Regulation (EU) 2016/794Member States having access to Europol data for the purposes of points (a) and (b) of Article 18(2) of Regulation (EU) 2016/794Member StatesData pursuant to each specific access type, in accordance with Regulation (EU) 2016/794Europol dataEuropol dataAs provided for in the specific legal basis for each specific purposeMember States having access to Europol data for the purposes of points (a), (b) and (c) of Article 18(2) of Regulation (EU) 2016/794Member StatesData pursuant to each specific access type, in accordance with Regulation (EU) 2016/794Europol dataEuropol dataAs provided for in the specific legal basis for each specific purpose52Access to Europol data pursuant to Article 21 of Regulation (EU) 2016/794EurojustEurojustData pursuant to each specific access type, in accordance with Regulation (EU) 2016/794Europol dataEuropol dataAs provided for in the specific legal basis for each specific purpose