Article 2 · Regulation (EU) 2023/2667

Contents

Article 2Amendments to Regulation (EC) No 767/2008#

Regulation (EC) No 767/2008 is amended as follows:

(1)Article 2a is amended as follows:

(a)paragraph 1 is amended as follows:

(i)in the first subparagraph, the following point is inserted:

(fa)EU Visa Application Platform (EU VAP);’;

(ii)the following subparagraphs are added:‘The EU VAP shall share and re-use as much as technically possible the hardware and software components of the EES web service and the ETIAS website and the application for mobile devices.The EU VAP shall be developed so as to enable the Member States which do not yet apply the Schengen acquis in full to seamlessly connect with it and smoothly use the EU VAP as soon as a Council decision in accordance with Article 3(2) of the 2003 Act of Accession or Article 4(2) of the 2005 Act of Accession has been taken.’;

(b)the following paragraphs are added:‘6.The EU VAP shall consist of the following components:

(a)a public website and an app for mobile devices;

(b)temporary storage capacity;

(c)a secure account service;

(d)a verification tool for applicants;

(e)a web service for visa holders;

(f)an email service;

(g)a payment tool;

(h)a tool for managing appointments (the appointment tool);

(i)an external service provider gateway;

(j)a configuration module for eu-LISA, central authorities and consulates;

(k)software to generate and read encrypted 2D barcode;

(l)a secure web service enabling the components of the EU VAP to communicate;

(m)a helpdesk function to be managed by eu-LISA;

(n)read-only copy of VIS database.;

(o)a functionality allowing the applicant to print documents;

(p)a chatbot;

(q)a secured communication infrastructure for Member States to access the EU VAP.

7.A Member State which does not yet apply the Schengen acquis in full may request eu-LISA to introduce links to the relevant national application procedure of the Member State concerned through the inclusion of a Uniform Resource Locator (URL) in the website referred to in paragraph 6 point (a).’;

(2)Article 4 is amended as follows:

(a)point 2 is replaced by the following:

2.“digital visa” means the visa issued in digital format referred to in Article 26a of Regulation (EC) No 810/2009 in accordance with Regulation (EC) No 1683/95;’;

(b)the following points are added:

24.“read-only copy of VIS database” means a subset of VIS data relevant for the purpose of this Regulation with exception of biometric data;

25.“chatbot” means software that simulates human conversation through interaction by text or voice.’;

(3)the following Chapter is inserted:‘CHAPTER IaEU VISA APPLICATION PLATFORM (EU VAP)Article 7aInformation available on the EU VAP1.The EU VAP shall provide general information to the public as referred to in Article 47 of Regulation (EC) No 810/2009.The Commission and the Member States shall be responsible for providing the information, in accordance with their respective responsibilities set out in paragraphs 3, 4 and 5 of this Article.2.The EU VAP shall display the entry conditions laid down in Article 6 of Regulation (EU) 2016/399.3.eu-LISA shall be responsible for publishing and updating the following general public information on the EU VAP upon receiving the following information from the Commission or the Member States:

(a)the visa requirements, including visa lists, visa waiver agreements, waivers for diplomatic and service passports, and cases of possible suspension of visa-free travel, under Articles 3, 4, 5, 7 and 8 of Regulation (EU) 2018/1806 of the European Parliament and of the Council^note and Annexes I and II to that Regulation; as well as information under Directive 2004/38/EC of the European Parliament and of the Council^note, an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens, and the Agreement on the withdrawal of the United Kingdom of Great Britain and Northern Ireland from the European Union and the European Atomic Energy Community^note (“EU-UK Withdrawal Agreement”);

(a)locations of consulates and their territorial competence referred to in Article 6 of Regulation (EC) No 810/2009;

(a)access rights of external service providers, including for the appointment tool;

(a)the visa fee shall be waived;

(a)the application has been lodged within the period referred to in Article 9(1) of Regulation (EC) No 810/2009, if applicable;

(a)verify and perform quality checks and pre-checks on the data uploaded in the temporary storage capacity, in particular the electronic copy of the travel document;

(a)for an issued, confirmed or extended visa: the data contained on the digital visa in accordance with the Annex to Regulation (EC) No 1683/95 and with the rules for filling in the data fields of the digital visa established under the procedure referred to in Article 27(1) of Regulation (EC) No 810/2009;

(a)the status of their application;

(a)costs related to the development by eu-LISA of the EU VAP and of its interconnection with the national visa information systems, under strict cost control and monitoring,

(b)the amount of the visa fees as referred to in Article 16 of Regulation (EC) No 810/2009 and the amount of reduced or higher fees as applicable, such as:

(i)in the case of a visa facilitation agreement, or a readmission-related measure stemming from Article 25a of that Regulation;

(ii)where Directive 2004/38/EC applies;

(iii)in the case of an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens, and

(iv)where the EU-UK Withdrawal Agreement applies;

(b)representation agreements or arrangements referred to in Article 8 of Regulation (EC) No 810/2009;

(b)the available appointments in the appointment tool and contact details of consulates and external service providers.

(b)in the visa application form, the applicant shall not be required to provide the following personal data:

(i)current occupation;

(ii)employer and employer’s address and telephone number; or for students, name and address of educational establishment;

(iii)surname and first name of the inviting person(s) in the Member State(s), if not applicable, name of hotel(s) or temporary accommodation(s) in the Member State(s);

(iv)name and address of inviting company/organisation;

(v)means of how the cost of travelling and living during the applicant’s stay is to be covered;

(b)all the required fields of the application form are filled in;

(b)upload the biometric identifiers and check whether biometric identifiers are already available;

(b)for the refusal of a visa: the data listed in Article 32 of Regulation (EC) No 810/2009 and Article 12 of this Regulation;

(b)the status and validity of their visa.

(b)costs related to the operation, including maintenance, by eu-LISA, of the EU VAP,

(c)where applicable, harmonised lists of supporting documents, adopted in accordance with Article 14(5a) of Regulation (EC) No 810/2009;

(c)use of external service providers and their locations referred to in Article 43 of Regulation (EC) No 810/2009;

(c)the applicant shall be able to submit documents establishing that he or she is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other; the applicant shall not be requested to submit supporting documents as referred to under Article 14 of Regulation (EC) No 810/2009 or proof of possession of adequate and valid travel medical insurance in accordance with Article 15 of that Regulation;

(c)proof is provided of holding a travel document in accordance with Article 12 of Regulation (EC) No 810/2009;

(c)upload supporting documents, if needed;

(c)for an annulled or revoked visa: the data listed in Article 34 of Regulation (EC) No 810/2009 and Article 13 of this Regulation.

(c)costs related to necessary adaptations by the Member States to existing national visa information systems.

(d)where applicable, travel medical insurance requirements, in accordance with Article 15 of Regulation (EC) No 810/2009.

(d)supporting documents referred to in Article 14 of Regulation (EC) No 810/2009, as well as those applicable pursuant to Directive 2004/38/EC and the EU-UK Withdrawal Agreement;

(d)by way of derogation from Article 7d(7), the automated admissibility pre-check shall only verify whether:

(i)all the required fields of the application form are filled in;

(ii)proof is provided of holding a valid passport in accordance with Directive 2004/38/EC or with an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens;

(iii)the biometric data of the applicant have been collected, if applicable;

(d)the biometric data of the applicant have been collected, if applicable;

(d)use the appointment tool to indicate available appointments, if applicable;

(e)optional visa waivers referred to in Article 6 of Regulation (EU) 2018/1806;

(e)where a visa is issued, in the notification laid down in Article 7g, the applicant shall receive a reminder that the family member of a citizen exercising the right to free movement who is in possession of a visa only has a right to enter if that family member is accompanied by or joining the Union citizen or other third-country national exercising his or her right to free movement.

(e)the visa fee has been collected, if applicable.

(e)forward the application to the consulate or the central authorities for further processing.

(f)optional visa fee waivers referred to in Article 16(5) Regulation (EC) No 810/2009.

Where a Member State provides the information, eu-LISA shall configure the EU VAP upon confirmation of this information from the Commission.4.The central authorities shall be responsible for entering the following elements into EU VAP:5.The consulate or the central authorities of the competent Member State shall be responsible for entering the following elements into the EU VAP:6.The EU VAP shall include a chatbot. The chatbot shall be designed to dialogue with its users by providing answers on the visa application procedure, the rights and obligations of applicants and visa holders, the entry conditions for third-country nationals, contact details, and data protection rules.Article 7bApplication form1.Without prejudice to Article 9(1b) of Regulation (EC) No 810/2009, each applicant shall submit an application referred to in Article 11 of that Regulation, using the EU VAP.2.The EU VAP shall provide each applicant with the information as referred to in Articles 37 and 38.3.Without prejudice to Article 7c, if applicable, the applicant shall provide the data in the application form as set out in Annex I of Regulation (EC) No 810/2009.All such data shall be recorded and stored in the temporary storage capacity in accordance with the data retention periods set out in Article 7d.4.The EU VAP shall contain a secure account service. The secure account service shall enable the applicant to keep the data provided for subsequent applications, but only if the applicant freely and explicitly consents to such storage, within the meaning of Article 4, point (11), of Regulation (EU) 2016/679.The secure account service shall enable the applicant to submit the application in several steps.5.The alphabetic characters in the data provided by the applicant in accordance with paragraph 3 shall be Latin alphabet characters.6.On submission of the application, the EU VAP shall collect the IP address from which the application was submitted and add it to the data of the application file.7.The Commission shall adopt delegated acts in accordance with Article 48a to supplement this Regulation by setting out simplified application forms in the EU VAP to be used in the procedures for confirmation of valid visas in a new travel document under Article 32a of Regulation (EC) No 810/2009 or for extension of visas under Article 33 of that Regulation, respectively, where those procedures are carried out using the EU VAP.Article 7cSpecific provisions on the use of the EU VAP1.A third-country national who is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, may lodge an application for a visa without using the EU VAP and shall be entitled to lodge the application in person at the consulate or at the external service providers premises, as that third-country national chooses.2.Where a third-country national who is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, applies for a visa using the EU VAP, the application process shall be carried out in accordance with Directive 2004/38/EC or with an agreement between the Union and its Member States, on the one hand, and a third country on the other, that provides the right to free movement equivalent to that of Union citizens.3.In particular, the EU VAP shall be designed so as to ensure that the following specific rules apply:4.Paragraphs 1 and 2 shall also apply where a third-country national who is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, requires a visa extension or a confirmation of the visa in a new travel document. The visa extension fee and the visa confirmation fee shall be waived.5.Paragraphs 1 to 4 shall apply mutatis mutandis to family members of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made.Article 7dApplication process using the EU VAP1.Upon submission of the application form pursuant to Article 7b the EU VAP shall determine the type of visa applied for and conduct an automated competence pre-check to pre-determine the competent Member State on the basis of the number of days for the applicant’s intended stay and the Member State of first entry, provided by the applicant. However, the applicant may indicate that his or her application be processed by another Member State according to the main purpose of stay. This shall not preclude the manual verification of the competence by the Member States in accordance with Article 18(3) of Regulation (EC) No 810/2009.The EU VAP shall enable applicants to indicate whether they are legally present, but not residing in a jurisdiction, as referred to in Article 6(2) of Regulation (EC) No 810/2009.2.Applicants shall be able to use the EU VAP to submit an electronic copy of the travel document in digital format, as well as supporting documents and proof of travel medical insurance in digital format, as applicable, pursuant to Regulation (EC) No 810/2009 or Directive 2004/38/EC or an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens.3.Where applicable, the applicant shall be able to use the secure payment tool referred to in Article 7e to pay the visa fee through the EU VAP.4.The EU VAP shall be able to check the read-only copy of VIS database to verify whether the applicant’s biometric identifiers were taken in the last 59 months and whether the applicant has already applied with the same travel document.Where the applicant’s biometric identifiers were taken in the last 59 months and the applicant has already applied with the same travel document the EU VAP shall inform that applicant that no visit to the consulate or an external service provider is required to lodge the application.Where the applicant’s biometric identifiers were not taken in the last 59 months or where the applicant has not already applied with the same travel document the EU VAP shall inform that applicant of the need to arrange a visit to the consulate or an external service provider, as required, to lodge the application.5.If a visit to consulate or external service provider is required pursuant to Regulation (EC) No 810/2009, a Member State may decide to use the appointment tool referred to in Article 7e for that purpose.6.The applicant shall submit the application, including the declaration of the authenticity, completeness, correctness and reliability of data.7.After the applicant submits the application via the EU VAP, the EU VAP shall conduct an automated admissibility pre-check.The automated admissibility pre-check shall verify whether:8.If the application is admissible according to the automated admissibility pre-check, the EU VAP shall send a notification to the consulate or the central authorities of the Member State concerned with the combined result of the automated competence and admissibility pre-checks.If the application is not admissible according to the automated admissibility pre-check, the EU VAP shall inform the applicant of which part of the application file is missing.The EU VAP shall be designed so as to ensure that Article 19(4) of Regulation (EC) No 810/2009 can apply, in order to allow applications to be considered admissible.9.Following the notification referred to in paragraph 8 of this Article, the consulate or the central authorities of the Member State concerned shall perform a manual verification of the competence, in accordance with Article 18(3) of Regulation (EC) No 810/2009, and subsequently if needed, a manual verification of admissibility in accordance with Article 19 of that Regulation.10.If the competent consulate or the central authorities of the competent Member State accept the application submitted via the EU VAP the data shall be transferred to the national system from temporary storage. The data shall be immediately deleted from temporary storage, with the exception of contact data linked to the secure account service.11.If, after the verification, the notified consulate or central authorities of the Member State find that they are not competent and the application is not re-submitted to the competent consulate or central authorities, Article 18(4) of Regulation (EC) No 810/2009 shall apply.12.The competent consulate or the central authorities of the competent Member State may use the secure account service to communicate with the applicants.13.In relation to the data transferred to the Member State referred to in paragraphs 10 and 11 of this Article, that Member State shall designate a competent authority which is to be considered as the data controller for the purposes of Article 4, point (7), of Regulation (EU) 2016/679 and which shall have central responsibility for the processing of data by that Member State.Article 7ePayment tool and appointment tool1.A secure payment tool shall be used to pay the visa fee to the competent Member State via the EU VAP.2.The appointment tool may be used by Member States or external service providers.Where the appointment tool is used, the Member State shall be responsible for setting the available appointments.Article 7fExternal service provider gateway1.External service providers shall have access to the EU VAP using the external service provider gateway only to:2.An authentication scheme, reserved exclusively for external service providers, shall be set up by Member States in order to allow access by the duly authorised staff members to the gateway for the purposes of this Article. When setting up the authentication scheme, information security risk management and the principles of data protection by design and by default shall be taken into account.3.External service providers shall not have access to the VIS.Article 7gNotification of decisions1.Once the competent authority has taken a decision on an application or on an issued visa and has made such a decision available in the secure account in accordance with paragraph 2, the EU VAP shall send the applicant or visa holder an electronic message, as defined in Regulation (EC) No 810/2009.2.The competent authorities shall notify applicants and visa holders of decisions taken pursuant to points (a), (b) and (c) by making those decisions available in the respective secure accounts of the applicants and visa holders. Such notification shall include the following data:Article 7hVerification tool1.The verification tool shall allow applicants and visa holders to check the following:2.The verification tool shall be based on the secure account service referred to in Article 7b(4).3.The EU VAP shall offer a web-service functionality for applicants and other entities, such as employers or universities or local authorities, to verify the digital visa without the secure account service.Article 7iCosts of the development and implementation of the EU VAP1.The development and implementation of the EU VAP shall comprise the following costs:2.Costs under paragraph 1, points (a) and (b), shall be borne by the general budget of the Union.3.Member States may use the Instrument for Financial Support for Border Management and Visa Policy, which is part of the Integrated Border Management Fund, as established by the Regulation (EU) 2021/1148 of the European Parliament and of the Council^note to finance the costs referred to in paragraph 1, point (c), in accordance with the eligibility rules and co-financing rates set out in Regulation (EU) 2021/1148.Article 7jData protection responsibilities1.Each Member State shall designate a competent authority as data controller in accordance with this Article. Member States shall communicate those authorities to the Commission, eu-LISA and the other Member States.All the competent authorities designated by Member States shall be joint controllers in accordance with Article 26 of Regulation (EU) 2016/679 for the purposes of processing of personal data in the EU VAP.2.eu-LISA shall be a processor in accordance with Article 28 of Regulation (EU) 2016/679 for the purposes of processing of personal data in the EU VAP. eu-LISA shall ensure that the EU VAP is operated in accordance with this Regulation.

(4)in Article 9, the first paragraph is amended as follows:

(a)in point (4), the following points are added:

(o)if applicable, the fact that the applicant applies as a family member of a UK national who is a beneficiary of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made;

(p)email address and mobile phone number;

(q)IP address from which the application form was submitted;

(r)in the case of an application filled in by a duly authorised person other than the applicant on the EU VAP: email address, postal address and telephone number of that person, if available.’;

(b)point (7) is replaced by the following:

7.an electronic copy of the biographic data page of the travel document and, if applicable, the data uploaded in accordance with Article 12(6), second subparagraph, of Regulation (EC) No 810/2009.’;

(5)in Article 9b, the following paragraph is added:‘5.Paragraphs 1 to 4 shall apply mutatis mutandis to family members of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made.’;

(6)in Article 10, paragraph 1 is amended as follows:

(a)the following point is inserted:

(db)if applicable, the information indicating that the visa has been issued with limited territorial validity pursuant to Article 25(1)(a), of Regulation (EC) No 810/2009;’;

(b)point (e) is replaced by the following:

(e)number of the visa;’;

(c)points (j) and (k) are deleted;

(d)the following points are added:

(m)if applicable, the status of the person indicating that the third-country national is a member of the family of a UK national who is a beneficiary of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made;

(n)national entries in the “comments” section.’;

(7)the following Article is inserted:‘Article 12aData to be added for a visa confirmed1.Where a decision has been taken to confirm a visa, the visa authority that has taken the decision shall add the following data to the application file:

(a)status information;

(b)authority that confirmed the visa;

(c)place and date of the decision;

(d)new travel document data, including number, issuing country and authority, issuing date, expiry date;

(e)confirmation number;

(f)an electronic copy of the biographic data page of the new travel document and, if applicable, the data uploaded in accordance with Article 12(6), second subparagraph, of Regulation (EC) No 810/2009.

2.Where a decision has been taken to confirm a visa, the EU VAP shall immediately retrieve and export from the VIS into the EES the data listed in Article 19(1) of Regulation (EU) 2017/2226.’;

(8)in Article 14(1), point (d) is replaced by the following:

(d)number of the extended visa;’;

(9)in Article 15(2), point (f) is replaced by the following:

(f)the number of the visa, long-stay visa or residence permit and the date of issue of any previous visa, long-stay visa or residence permit;’;

(10)Article 18 is amended as follows:

(a)in paragraph 1, point (b) is replaced by the following:

(b)the number of the visa sticker or the number of the visa;’;

(b)paragraph 3 is replaced by the following:‘3.By way of derogation from paragraph 2 of this Article, where a search is launched in the EES pursuant to Article 23(2) or (4) of Regulation (EU) 2017/2226, the competent border authority may search the VIS without making use of the interoperability with the EES, where specific circumstances so require, in particular, where it is technically impossible, on a temporary basis, to consult the EES data or in the event of a failure of the EES.’;

(11)the following Article is inserted:‘Article 18eFall-back procedures in the case of a technical impossibility to access data at the external borders1.Where it is technically impossible to proceed with the consultation referred to in Article 18 because of a failure of any part of the VIS, eu-LISA shall notify the border authorities of the Member States.2.Where it is technically impossible to perform the search referred to in Article 18 because of a failure of the national border infrastructure in a Member State, the border authorities of that Member State shall notify the eu-LISA. eu-LISA shall then inform the Commission.3.In cases referred to in paragraphs 1 and 2 of this Article, the border authorities shall follow their national contingency plans. Member States shall adopt their national contingency plans using the model contingency plans referred to in Article 45(2), point (o), as a basis, to be adapted as necessary at the national level. The national contingency plan may authorise the border authorities to derogate temporarily from the obligation to consult the VIS as referred to in Article 8 of Regulation (EU) 2016/399.’;

(12)in Article 19, paragraph 1 is replaced by the following:‘1.For the sole purpose of verifying the identity of the visa holder, the authenticity of the visa or whether the conditions for entry to, stay or residence on the territory of the Member States are fulfilled, the authorities competent for carrying out checks within the territory of the Member States as to whether the conditions for entry to, stay or residence on the territory of the Member States are fulfilled, shall have access to search with the number of the visa in combination with verification of fingerprints of the visa holder, or the number of the visa.Where the identity of the visa holder cannot be verified with fingerprints, the competent authorities may also carry out the verification with the facial image.’;

(13)in Article 20(2), point (d) is replaced by the following:

(d)the data entered in respect of any visa issued, refused, confirmed, annulled, revoked or extended referred to in Articles 10 to 14.’;

(14)in Article 21(2), point (d) is replaced by the following:

(d)the data entered in respect of any visa issued, confirmed, annulled, revoked or extended referred to in Articles 10, 12a, 13 and 14;’;

(15)in Article 22(2), point (e) is replaced by the following:

(e)the data entered in respect of any visa issued, refused, confirmed, annulled, revoked or extended referred to in Articles 10, 12, 12a, 13 and 14;’;

(16)in Article 22c, the following point is added:

(h)national entries in the “comments” section;’;

(17)in Article 22f(1), point (d) is replaced by the following:

(d)the number of the visa;’;

(18)in Article 22o, paragraph 3 is amended as follows:

(a)point (c) is replaced by the following:

(c)number of the visa or number of the long-stay visa or residence permit and the date of expiry of the validity of the visa, long-stay visa or residence permit, as applicable;’;

(b)the following points are added:

(f)IP address from which the application was submitted;

(g)email address used for the application.’;

(19)in Article 22r, paragraph 3 is amended as follows:

(a)point (c) is replaced by the following:

(c)number of the visa or number of the long-stay visa or residence permit and the date of expiry of the validity of the visa, long-stay visa or residence permit, as applicable;’;

(b)the following points are added:

(f)IP address from which the application was submitted;

(g)email address used for the application;’;

(20)in Article 26, the following paragraphs are added:‘11.The infrastructures supporting the EU VAP referred to in Article 2a shall be hosted in eu-LISA technical sites. Those infrastructures shall be geographically distributed to provide the functionalities laid down in this Regulation in accordance with the conditions of security, data protection and data security.eu-LISA shall ensure that the future use of the EU VAP, provided for in Article 2a, by Member States which do not apply the Schengen acquis in full is taken into account in the development of the EU VAP. This concerns in particular the storage capacity of the EU VAP and interface with national visa information system.12.eu-LISA shall be responsible for the technical development of the EU VAP referred to in Article 2a. eu-LISA shall define the technical specifications of the EU VAP. Those technical specifications shall be adopted by eu-LISA’s Management Board, provided that the Commission has communicated a favourable opinion on those technical specifications.13.eu-LISA shall develop and implement the EU VAP as soon as possible after the entry into force of Regulation (EU) 2023/2667 of the European Parliament and of the Council^note and the adoption by the Commission of:

(a)the implementing acts provided for in Article 45(2), points (g) to (r) of this Regulation; and

(a)chairmanship;

(b)the delegated acts provided for in Article 7b(7) of this Regulation.

(b)meeting venues;

(c)the preparation of meetings;

(d)the admission of experts to meetings;

(e)communication plans ensuring the provision of full information to non-participating members of eu-LISA’s Management Board.

14.eu-LISA shall be responsible for the operational management of the EU VAP.The operational management of the EU VAP shall consist of all the tasks necessary to keep the EU VAP functioning 24 hours a day, 7 days a week in accordance with this Regulation. It shall consist, in particular, of the maintenance work and technical developments necessary to ensure that the EU VAP functions at a satisfactory level of operational quality.The VIS Advisory Group referred to in Article 49a of this Regulation and in Article 27(1), point (b), of Regulation (EU) 2018/1726 of the European Parliament and of the Council^note shall provide the Management Board of eu-LISA with expertise relating to the EU VAP.During the designing and development phase of the EU VAP, a Programme Management Board composed of a maximum of ten members shall be established. It shall be composed of seven members appointed by eu-LISA’s Management Board from among its members or alternate members, the Chair of the VIS Advisory Group, a member representing eu-LISA appointed by its Executive Director and one member appointed by the Commission.The Programme Management Board shall meet regularly and at least once per quarter. It shall ensure the adequate management of the design and development phase of the EU VAP and ensure consistency between central and national EU VAP projects.The Programme Management Board shall submit written reports every month to eu-LISA’s Management Board on the progress of the project. The Programme Management Board shall have no decision-making power nor any mandate to represent the members of eu-LISA’s Management Board.eu-LISA’s Management Board shall establish the rules of procedure of the Programme Management Board which shall include in particular rules on:The chairmanship of the Programme Management Board shall be held by a Member State which is fully bound under Union law by the legislative instruments governing the development, establishment, operation and use of all the large-scale IT systems managed by eu-LISA.All travel and subsistence expenses incurred by the members of the Programme Management Board shall be paid by eu-LISA and Article 10 of the eu-LISA Rules of Procedure shall apply mutatis mutandis. eu-LISA shall provide the Programme Management Board with a secretariat.

(21)in Article 45(2), the following points are added:

(g)for laying down requirements concerning the format of the personal data referred to in Article 7b(3) and 7b(6) to be inserted in the online application form, in accordance with Article 7b, as well as parameters and verifications to be implemented for ensuring the completeness of the application and the coherence of those data;

(h)for laying down the technical requirements concerning the format of supporting documents, travel medical insurance and copy of travel document in digital format to be provided via the EU VAP, in accordance with Articles 7c and 7d;

(i)for laying down the requirements of the secure account service, including the arrangements for access and authentication, the retention period for data stored therein and for uncompleted applications or applications which do not pass the competence and admissibility check, in accordance with Article 7b;

(j)for laying down the requirements concerning the payment tool, including the procedures for reimbursing applicants, in accordance with Article 7e;

(k)for laying down the requirements concerning the appointment tool referred to in Article 7e(2), including the procedure for confirming of appointments, and the link to existing appointment tools or information on walk-in appointments to be configured by the consulates or external service providers, in accordance with Article 7e, as well as the technical arrangements to ensure that any family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, or of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement in the host State, as defined in the EU-UK Withdrawal Agreement, for which the visa application is made can benefit from an accelerated procedure;

(l)for laying down the authentication scheme for external service provider staff members using the external service provider gateway, in accordance with Article 7f;

(m)for laying down technical specifications of the notifications, including details on their format and printable versions, in accordance with Article 7g;

(n)for laying down detailed rules on the conditions for the operation of the web service and the data protection and security rules applicable to the web service, in accordance with Article 7h, including unique identifiers for applicants;

(o)for laying down model contingency plans regarding fall-back procedures for the cases of a technical impossibility to access data at the external borders referred to in Article 18e(1) and (2), including the procedures to be followed by border authorities, in accordance with Article 18e;

(p)for laying down the technical specifications and functionalities of the chatbot hosted by the EU VAP in accordance with Article 7a(6);

(q)for specifying the responsibilities and the relationships between Member States as joint controllers for the processing of the personal data in EU VAP;

(r)for specifying the relationship between the joint controllers and the processor, and the responsibilities of the processor.’;

(22)in Article 48a(2), (3) and (6), the references to ‘Article 9, Article 9h(2), Article 9j(2) and Article 22b(18)’ are replaced by references to ‘Article 7b(7), Article 9, Article 9h(2), Article 9j(2) and Article 22b(18)’;

(23)Article 50 is amended as follows:

(a)the following paragraph is inserted:‘3a.After the date of start of operations of the EU VAP referred to in Article 2a(1), point (fa), the report on the technical functioning of the VIS referred to in paragraph 3 of this Article shall also include the technical functioning of the EU VAP.’;

(b)paragraphs 6 and 7 are replaced by the following:‘6.Member States shall provide eu-LISA and the Commission with the information necessary to draft the reports referred to in paragraphs 3, 4, 5 and 8.7.eu-LISA shall provide the Commission with the information necessary to produce the overall evaluation referred to in paragraphs 5 and 8.’;

(c)the following paragraph is added:‘8.Three years after the date of start of operations of the EU VAP referred to in Article 2a(1), point (fa), of this Regulation, the Commission shall evaluate the operation of the EU VAP. That evaluation shall include an examination of the results achieved against objectives and of the implementation of Regulation (EC) No 810/2009 and this Regulation.The Commission shall transmit the evaluation referred to in paragraph 1 to the European Parliament and the Council. On the basis of the evaluation, the Commission shall submit, where necessary, appropriate legislative proposals.’.