Contents
- THE EUROPEAN COMMISSION, Having regard to the Treaty on th…
- 1 The information referred to in Article 54(3) of Regulation…
- 2 This Decision shall enter into force on the twentieth day…
- TEMPLATE FOR THE ANNUAL REPORT TO THE EUROPEAN DATA PROTECTION BOARD UNDER aRTICLE 54(3) OF REGULATION (EU) 2018/1861 AND ARTICLE 68(3) OF REGULATION (EU) 2018/1862
THE EUROPEAN COMMISSION,Having regard to the Treaty on the Functioning of the European Union,Having regard to Regulation (EU) 2018/1861 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, and amending the Convention implementing the Schengen Agreement, and amending and repealing Regulation (EC) No 1987/2006note, and in particular Article 54(3) thereof,Having regard to Regulation (EU) 2018/1862 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA, and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EUnote, and in particular Article 68(3) thereof,Whereas:
(1)Regulations (EU) 2018/1861 and (EU) 2018/1862 lay down new rules on the establishment, operation and use of the Schengen Information System. The new Regulations increase the effectiveness and strengthen the technical and operational efficiency of the Schengen Information System and extend its use by introducing new alert categories and functionalities. In addition, Regulation (EU) 2018/1860 of the European Parliament and of the Councilnote established a new type of alert on the return of third-country nationals.
(2)Regulation (EU) 2018/1861 constitutes the legal basis for the Schengen Information System in respect of matters falling within the scope of Chapter 2 of Title V of Part Three of the Treaty on Functioning of the European Union (TFEU) and Regulation (EU) 2018/1862 constitutes the legal basis for the Schengen Information System in respect of matters falling within the scope of Chapters 4 and 5 of Title V of Part Three of the TFEU. The fact that the legal basis for the Schengen Information System consists of separate instruments does not affect the principle that the Schengen Information System constitutes one single information system that should operate as such.
(3)Directive (EU) 2016/680 of the European Parliament and of the Councilnote and Regulation (EU) 2016/679 of the European Parliament and of the Councilnote, together with Regulations (EU) 2018/1861 and (EU) 2018/1862, set out the rights of data subjects regarding the processing of their personal data in relation to the use of the Schengen Information System by the national competent authorities, as well as the procedures for exercising such rights.
(4)The national independent supervisory authorities referred to in Directive (EU) 2016/680 and Regulation (EU) 2016/679 monitor the lawfulness of the processing of personal data by the Member States in relation to their use of the Schengen Information System.
(5)In accordance with Regulations (EU) 2018/1861 and (EU) 2018/1862, Member States are to report annually to the European Data Protection Board on the exercise of the rights of data subjects in accordance with a template to be developed by the Commission.
(6)In order to ensure that the annual reports from Member States provide for a consistent overview of the functioning of remedies available to data subjects, the template should set out the data to be collected under Regulations (EU) 2018/1861 and (EU) 2018/1862, concerning the exercise of the rights of data subjects for access, rectification and erasure of their personal data stored in the Schengen Information System, as well as on remedies before national courts and the mutual recognition of judgments.
(7)By virtue of Article 19 of Regulation (EU) 2018/1860, Article 54(3) of Regulation (EU) 2018/1861 is also applicable to alerts on the return of third-country nationals. Therefore, Member States should also include in their annual reports to the European Data Protection Board the exercise of the rights of data subjects concerning that alert category.
(8)In accordance with Articles 1 and 2 of Protocol No 22 on the position of Denmark, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, Denmark did not take part in the adoption of Regulation (EU) 2018/1861 and Regulation (EU) 2018/1862 and is not bound by them or subject to their application. However, given that Regulation (EU) 2018/1861 and Regulation (EU) 2018/1862 build upon the Schengen acquis, Denmark, in accordance with Article 4 of that Protocol, notified on 26 April 2019 its decision to implement Regulation (EU) 2018/1861 and Regulation (EU) 2018/1862 in its national law. Denmark is therefore bound under international law to implement this Decision.
(9)Ireland is taking part in this Decision to the extent that it concerns Regulation (EU) 2018/1862 in accordance with Article 5(1) of Protocol No 19 on the Schengen acquis integrated into the framework of the European Union, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union and Article 6(2) of Council Decision 2002/192/ECnote, read in conjunction with Council Implementing Decision (EU) 2020/1745note.
(10)As regards Iceland and Norway, this Decision constitutes a development of provisions of the Schengen acquis within the meaning of the Agreement concluded by the Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning these States’ association with the implementation, application and development of the Schengen acquisnote, which fall within the area referred to in Article 1, point (G) of Council Decision 1999/437/ECnote.
(11)As regards Switzerland, this Decision constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquisnote, which fall within the area referred to in Article 1, point (G), of Decision 1999/437/EC read in conjunction with Article 3 of Council Decision 2008/146/ECnote and Article 3 of Council Decision 2008/149/JHAnote.
(12)As regards Liechtenstein, this Decision constitutes a development of the provisions of the Schengen acquis within the meaning of the Protocol between the European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquisnote, which fall within the area referred to in Article 1, point (G), of Decision 1999/437/EC read in conjunction with Article 3 of Council Decision 2011/350/EUnote and Article 3 of Council Decision 2011/349/EUnote.
(13)As regards Bulgaria and Romania, this Decision constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 4(2) of the 2005 Act of Accession and should be read in conjunction with Council Decisions 2010/365/EUnote and (EU) 2018/934note.
(14)As regards Croatia, this Decision constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 4(2) of the 2011 Act of Accession and should be read in conjunction with Council Decision (EU) 2017/733note.
(15)Concerning Cyprus, this Decision constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 3(2) of the 2003 Act of Accession.
(16)The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Councilnote and delivered an opinion on 11 July 2022,
HAS ADOPTED THIS DECISION:
Article 1#
The information referred to in Article 54(3) of Regulation (EU) 2018/1861 and Article 68(3) Regulation (EU) 2018/1862 shall be provided in accordance with the template set out in the Annex to this Decision.
Article 2#
This Decision shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
TEMPLATE FOR THE ANNUAL REPORT TO THE EUROPEAN DATA PROTECTION BOARD UNDER aRTICLE 54(3) OF REGULATION (EU) 2018/1861 AND ARTICLE 68(3) OF REGULATION (EU) 2018/1862
To be provided annually by each Member State by 31 March of the year following the year at issue.
The data shall be entered in a table containing the following structure and fields.
| ANNUAL REPORTTo the European Data Protection Board in accordance withArticle 54(3) of Regulation (EU) 2018/1861 and Article 68(3) of Regulation (EU) 2018/1862 | |||||
|---|---|---|---|---|---|
| Member State: | |||||
| Reporting period per calendar year: | |||||
| Completed access requestsnote | Alert on the data subject under Regulation (EU) 2018/1860 | Alert on the data subject under Regulation (EU) 2018/1861 | Alert on the data subject under Regulation (EU) 2018/1862 | No alert on the applicant in the Schengen Information System (SIS) | |
| 1a. | The number of access requests submitted to the data controller | ||||
| 1b. | The number of cases where access to the data was grantednote | ||||
| 2a. | The number of access requests submitted to the supervisory authoritynote | ||||
| 2b. | The number of cases where access to the data was grantednote | ||||
| Completed rectification requestsnote | Alert on the data subject under Regulation (EU) 2018/1860 | Alert on the data subject under Regulation (EU) 2018/1861 | Alert on the data subject under Regulation (EU) 2018/1862 | No alert on the applicant in the SIS | |
| 3a. | The number of requests for the rectification of inaccurate data submitted to the data controller | ||||
| 3b. | The number of cases where the data were rectified | ||||
| 4a. | The number of requests for the rectification of inaccurate data submitted to the supervisory authoritynote | ||||
| 4b. | The number of cases where the data were rectified (Optionalnote) | ||||
| Completed erasure requestsnote | Alert on the data subject under Regulation (EU) 2018/1860 | Alert on the data subject under Regulation (EU) 2018/1861 | Alert on the data subject under Regulation (EU) 2018/1862 | No alert on the applicant in the SIS | |
| 5a. | The number of requests for the erasure of unlawfully stored data submitted to the data controller | ||||
| 5b. | The number of cases where the data were erased | ||||
| 6a. | The number of requests for the erasure of unlawfully stored data submitted to the supervisory authoritynote | ||||
| 6b. | The number of cases where the data were erased (Optionalnote) | ||||
| Completed court casesnote | Alert on the data subject under Regulation (EU) 2018/1860 | Alert on the data subject under Regulation (EU) 2018/1861 | Alert on the data subject under Regulation (EU) 2018/1862 | ||
| 7a. | The number of court proceedings initiated | ||||
| 7b. | The number of cases where the court ruled in favour of the applicant | ||||
| Please include any observations on cases of mutual recognition of final decisions handed down by the courts or authorities of other Member States on alerts entered by the issuing Member State(Please add as many lines as needed.) | |||||
| Article 54(3) of Regulation (EU) 2018/1861 | Article 68(3) of Regulation (EU) 2018/1862 | ||||
| 1. | 1. | ||||
| 2. | 2. | ||||
| 3. | 3. |
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.