Contents
THE EUROPEAN COMMISSION,Having regard to the Treaty on the Functioning of the European Union,Having regard to Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHAnote, and in particular Article 39(5) thereof,Whereas:
(1)Regulation (EU) 2019/817, together with Regulation (EU) 2019/818 of the European Parliament and of the Councilnote establishes a framework to ensure interoperability between the EU information systems in the field of borders, visa, police and judicial cooperation, asylum and migration.
(2)That framework includes a number of components and tools supporting interoperability, including a central repository for reporting and statistics (‘the central repository’). The central repository stores anonymised data extracted from the underlying EU information systems, the shared biometric matching service, the common identity repository and the multi-identity detector, in order to provide cross-system statistical data and analytical reporting for policy, operational and data quality purposes.
(3)In order to enable the central repository to to fulfill its role, Commission Delegated Regulation (EU) 2021/2223note lays down detailed rules on the operation of the central repository, including specific standards for the processing of personal data, and security rules.
(4)Following the adoption of Regulations (EU) 2021/1134note, and (EU) 2025/12note of the European Parliament and of the Council, Delegated Regulation (EU) 2021/2223 should be modified to incorporate statistical data derived from these new Regulations, which will be stored in the central repository.
(5)Delegated Regulation (EU) 2021/2223 should therefore be amended accordingly.
(6)Given that Regulation (EU) 2019/817 builds upon the Schengen acquis, in accordance with Article 4 of Protocol No 22 on the Position of Denmark, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, Denmark notified the implementation of Regulation (EU) 2019/817 in its national law. It is therefore bound by this Regulation.
(7)This Regulation does not constitute a development of the provisions of the Schengen acquis in which Ireland takes part in accordance with Council Decision 2002/192/ECnote. Ireland is therefore not taking part in the adoption of this Regulation and is not bound by it or subject to its application.
(8)As regards Iceland and Norway, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement concluded by the Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning the association of those two States with the implementation, application and development of the Schengen acquisnote, which fall within the area referred to in Article 1, point A of Council Decision 1999/437/ECnote.
(9)As regards Switzerland, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquisnote, which fall within the area referred to in Article 1, point A of Decision 1999/437/EC, read in conjunction with Article 3 of Council Decision 2008/146/ECnote.
(10)As regards Liechtenstein, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Protocol between the European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquisnote which fall within the area referred to in Article 1, point A of Decision 1999/437/EC read in conjunction with Article 3 of Council Decision 2011/350/EUnote.
(11)As regards Cyprus, this Regulation constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 3(1) of the 2003 Act of Accession.
(12)The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Councilnote and delivered an opinion on 5 June 2025,
HAS ADOPTED THIS REGULATION:
Article 1#
Delegated Regulation (EU) 2021/2223 is amended as follows:
(1)in Article 1, point 1 is replaced by the following:
(1)“statistical data” means the data, which is anonymised and used solely for the purpose of producing statistical reports pursuant to Regulation (EC) No 767/2008 of the European Parliament and of the Councilnote, Regulations (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1860, (EU) 2018/1861, (EU) 2018/1862, (EU) 2019/816, and Regulations (EU) 2024/982note, (EU) 2024/1358note, (EU) 2025/12note and (EU) 2025/13note, of the European Parliament and of the Council;
notenotenotenotenote
(2)Article 2 is amended as follows:
(a)the following paragraph 3a is inserted:‘3a.The central repository shall contain statistics necessary to prepare reports on the technical functioning of the systems in accordance with the Regulations referred to in Article 1(1).’;
(b)in paragraph 5, the following points are added:
(f)reports pursuant to Article 17 of Regulation (EC) No 767/2008;
(g)statistics pursuant to Article 45a(1) of Regulation (EC) No 767/2008;
(h)reports pursuant to Article 45a of Regulation (EC) No 767/2008, containing the following statistics on the records kept in the Visa Information System:
(i)daily reports and statistics, and quarterly customised reports in accordance with Article 45a(4) of Regulation (EC) No 767/2008, on airport transit visas, short-stay visas;
(ii)quarterly statistics on the long-stay visas applied for, issued, refused, withdrawn, revoked, annulled and extended, and on the residence permits applied for, issued, refused, withdrawn, revoked, annulled and renewed, in accordance with Article 45a(5) of Regulation (EC) No 767/2008;
(iii)regular statistics for ensuring the monitoring by eu-LISA of the development and the functioning of the Visa Information System referred to in Articles 45a(3) and 50(1) of Regulation (EC) No 767/2008;
(i)reports pursuant to Article 9j(2) of Regulation (EC) No 767/2008, containing the following statistics:
(i)statistics generated by the EES indicating abnormal rates of overstayers and refusals of entry for a specific group of visa holders;
(ii)statistics generated by the VIS in accordance with Article 45a of Regulation (EC) No 767/2008 indicating abnormal rates of refusals of visa applications due to an irregular migration, security or public health risk associated with a specific group of visa holders;
(j)statistics generated by the VIS in accordance with Article 45a of Regulation (EC) No 767/2008 and the EES indicating correlations between information collected through the application form and overstaying by visa holders or refusals of entry;
(k)reports pursuant to Article 38 of Regulation (EU) 2025/12, containing the following statistics:
(i)quarterly statistics on the functioning of the router and on compliance of air carriers with the obligations set out in Regulation (EU) 2025/12;
(ii)statistical information necessary for the reporting referred to in Article 45 of Regulation (EU) 2025/12 and for generating statistics in accordance with Article 38(5) of Regulation (EU) 2025/12;
(iii)regular statistics for ensuring the monitoring by eu-LISA of the development and the functioning of the router in accordance with Article 38(8) of Regulation (EU) 2025/12.’;
(c)paragraph 6 is replaced by the following:‘6.The technical reports referred to in paragraph 3 shall contain statistics on the usage of the system, availability, incidents, performance capacity, biometric accuracy, data quality and, where applicable, pending transactions.’;
(3)in Article 6, paragraph 1 is replaced by the following:‘1.Access to the central repository by duly authorised staff shall be granted and managed in accordance with Article 45a of Regulation (EC) No 767/2008, Article 63 of Regulation (EU) 2017/2226, Article 84 of Regulation (EU) 2018/1240, Article 16 of Regulation (EU) 2018/1860, Article 60 of Regulation (EU) 2018/1861, Article 32 of Regulation (EU) 2019/816, Article 72 of Regulation (EU) 2024/982, Article 12 of Regulation (EU) 2024/1358, Article 38 of Regulation (EU) 2025/12, Article 39 of Regulation (EU) 2025/13.’.
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.