2001/912/EC: Decision of the European Central Bank of 8 November 2001 on certain conditions regarding access to the Counterfeit Monitoring System (CMS) (ECB/2001/11)

• Articles: 10

Article 1

Definitions

The definitions contained in Regulation (EC) No 1338/2001 shall apply in this Decision.

Article 2

Counterfeit Monitoring System

1. The Counterfeit Currency Database (CCD) is renamed as the Counterfeit Monitoring System (CMS). All references to the CCD contained in any previous legal acts are now deemed to be made to the CMS.

2. The CMS consists of a central database containing all technical and statistical information on counterfeiting, both on euro banknotes and coins, whether originated in the Member States or in third countries. The CMS includes, inter alia, browsing and editing applications and facilities for the downloading and uploading of data and networks linking the different users of the CMS to the CMS.

3. The organisation and management of the CMS are the competence of the Executive Board of the ECB, which takes account for these purposes of the views of the Banknote Committee.

Article 3

Access to the data of the Counterfeit Monitoring System

1. Apart from the access of the NCBs to the CMS, access to the relevant data of the CMS is granted to the other competent national authorities, including the National Analysis Centres (NACs) and the Coin National Analysis Centres (CNACs), as regards data related to coins, in accordance with Regulation (EC) No 1338/2001. For this purpose, the conditions established in Articles 5 to 9 of this Decision apply.

2. Access by the European Commission, the European Technical and Scientific Centre (ETSC) and Europol to the relevant data of the CMS is granted in accordance with Regulation (EC) No 1338/2001. The procedures for this access are specified in bilateral arrangements and agreements with the ECB, as appropriate.

3. Subject to any agreements concerning monetary relations between the Community and third parties, the ECB may grant access to the relevant data of the CMS to the designated authorities or centres of these third parties.

4. In addition to paragraph 3 above and on the basis of Article 9 of Regulation (EC) No 1338/2001, the ECB may grant access to the relevant data of the CMS to the designated authorities or centres of third countries. They may also be provided with ad hoc data of the CMS when this is deemed necessary by the Counterfeit Analysis Centre (CAC) of the ECB.

Article 4

Introduction of data into the Counterfeit Monitoring System by National Analysis Centres and Coin National Analysis Centres

The introduction by any and all NACs into the CMS of data relating to counterfeit euro banknotes which are discovered and the sending of every new type of suspected counterfeit euro banknotes to the CAC of the ECB takes place in accordance with Regulation (EC) No 1338/2001 and with the relevant manual of procedures approved by the Governing Council of the ECB with the contribution of the General Council of the ECB. Those NACs that are not an NCB or which have not been established within an NCB are consulted on the manual of procedures. The necessary adaptations of the manual of procedures regarding the introduction of data related to coins by the ETSC and the CNACs into the CMS will also take place.

Article 5

National Counterfeit Centres

1. The task of administering access to the CMS referred to in Article 3 in the Member States is performed by an NCC established in each NCB. This NCC also facilitates communication regarding all CMS-related matters in the Member States. The role of security administrator is created within each NCC in connection with these tasks.

2. Upon agreement of the ECB, the NCC authorises the different levels of access to the CMS referred to in Article 3, in accordance with paragraph one above. For this purpose, the necessary users names and the different categories of users and different levels of access among these users are created and established by the security administrator of the NCC referred to above.

Article 6

Compliance with the security standards of the Counterfeit Monitoring System

The minimum security standards to be followed by all authorities or centres (NAC and/or CNAC) where there are users of the CMS and by such users, in connection with access to the CMS, are adopted by the Governing Council of the ECB with the contribution of the General Council of the ECB. They are notified to the NCCs.

Article 7

Confidentiality

1. Each authority or centre in which there are users of the CMS informs them of the confidential nature of the data of the CMS and of any limitations on access applicable to each of the users of that authority or centre and of the other authorities or centres, as these limitations are communicated to the latter by the security administrator of the relevant NCC from time to time. The relevant NCC may request that each authority or centre signs a confidentiality declaration in which it states that it has taken due notice of the content of this Decision. Each authority or centre consults with the relevant NCC on any relevant matter in connection with the confidentiality of the data of the CMS. The NCCs consult with the CAC of the ECB about the outcome of any such request or consultation.

2. The relevant NCC is consulted on communications containing CMS data addressed to the public, to credit institutions and to the manufacturers of relevant equipment. It also consults with the CAC of the ECB.

3. The ECB consults with the relevant NCC in connection with any suspension of access. Both the ECB and the relevant NCC may suspend access to the CMS of any users of the CMS when this is necessary to preserve the confidential nature of the data of the CMS. The relevant NCC consults with the authority or centre to which such users belong in order for the appropriate conditions for the utilisation of the CMS to be restored.

4. The minimum security standards mentioned in Article 6, as well as the manual of procedures mentioned in Article 4, once approved by the Governing Council, shall not be published due to their confidential nature.

Article 8

Monitoring

NCCs establish, in consultation with the relevant authorities or centres, procedures allowing the monitoring of their compliance with Articles 6 and Article 7 and the adoption of appropriate measures in connection therewith. These procedures also allow for the participation of the ECB in such monitoring. In consultation with the NCBs, the ECB also establishes procedures to monitor compliance by the NCCs with this Decision.

Article 9

Implementation

The Executive Board of the ECB shall take any measures to implement this Decision which are necessary for the efficiency and the security of the CMS, including any measures relating to the manual of procedures or the minimum security standards respectively mentioned in Articles 4 and 6. For these purposes, it shall take account of the views of the Banknote Committee. The Executive Board shall inform the Governing Council of any measures that it takes in application of this Article. In addition, the ECB may generally provide technical clarifications and specifications concerning the utilisation or the security of the CMS.

Article 10

Final provisions

This Decision shall enter into force on 1 December 2001.

This Decision shall be published in the Official Journal of the European Communities.

Done at Frankfurt am Main, 8 November 2001.

The President of the ECB

Willem F. Duisenberg

(1) OJ L 181, 4.7.2001, p. 6.

(2) OJ L 181, 4.7.2001, p. 11.