Authentication scheme and access management
1. With the exception of access to watchlist entries, which shall be accessed in accordance with Commission Implementing Decision laying down measures for the application of Regulation (EU) 2018/1240 of the European Parliament and of the Council as regards the technical specification of ETIAS watchlist and of the impact assessment tool ( 11 ) , data stored in the ETIAS Central System shall be accessed, by users from the ETIAS Central Unit, the ETIAS National Units and Europol, through the software referred to in Article 6(2), point (m) of Regulation (EU) 2018/1240 (‘the software’).
2. When developing the software, eu-LISA shall:
(a)
establish an authentication scheme to log-into the software;
(b)
make available standard permissions, roles and job profiles to the ETIAS Central Unit, ETIAS National Units and Europol.
3. The software shall provide the ETIAS Central Unit, ETIAS National Units and Europol with the technical means:
(a)
to create new roles and amend or erase existing ones;
(b)
to set-up access credentials enabling the users to carry out data processing operations in accordance with assigned roles;
(c)
to regulate, within their organisations, the assignment and management of standard roles to users.
4. The roles created or amended by the ETIAS Central Unit, ETIAS National Units and Europol shall only be visible to ETIAS Central Unit, the ETIAS National Unit or to Europol respectively.
5. The software shall prevent the assignment of incompatible roles to users. It shall ensure that users having several job profiles are able to use only one job profile at a time, and are able to switch between job profiles without having to log out.
6. The ETIAS Central Unit, ETIAS National Units and Europol shall be responsible for assigning job profiles via the software to users within their organisation. Each job profile, role or permission may be assigned to several users within the same organisation.
7. Users may use pseudonyms. Those pseudonyms shall be traceable to the users’ official identities at national level or within Europol.
8. The authentication scheme, and the standard permissions, roles and job profiles referred to in paragraph 2, and the prevention of the assignment of incompatible roles, as referred to in paragraph 4 of this Article, shall be part of the technical specifications provided for in Article 73(3) of Regulation (EU) 2018/1240.
General software functionalities
1. The software shall have at least the following functionalities supporting users for the purpose of accessing, amending and erasing data:
(a)
the possibility to use a pre-determined set of filters to customise the display of data for each job profile logged into the software;
(b)
the automatic saving of data added to the application file or draft amendments of data in the application file, where applicable, and logging out of the user after a pre-established period of inactivity;
(c)
the possibility to block access to a hit by another user for a limited period of time, including marking of such blocked hits visible to other users;
(d)
the option to save progress on the processing of an application by the ETIAS Central Unit or ETIAS National Units;
(e)
the option to mark and record, at any time, a possible data inaccuracy or processing in contravention of Regulation (EU) 2018/1240 by the ETIAS Central Unit or the ETIAS National Units;
(f)
enabling communication and information exchange between users from the ETIAS Central Unit, the ETIAS National Units and Europol;
(g)
automatically deleting temporary notes referred to in Article 5(1), point (f) of this Decision at the time of completion of the manual processing by the ETIAS Central Unit and ETIAS National Units;
(h)
preventing temporary notes referred to in Article 5(1), point (f) of this Decision from being visible to users other than those of the same Unit or Europol;
(i)
allowing the ETIAS Central Unit to process Europol requests referred to in Article 5(1), point (m) of this Decision;
(j)
the possibility to facilitate the retrieval of data when requested by data subjects, including templates for responding to the data subject with, where relevant, an overview of the changes made to the data, a selection of the personal data, or justifications referred to in Article 64(3) and (4) of Regulation (EU) 2018/1240;
(k)
where a travel authorisation is amended on the basis of a request from an authorisation holder in accordance with Article 64 of Regulation (EU) 2018/1240, enabling users to notify a travel authorisation holder that an amended travel authorisation has been issued.
2. eu-LISA shall describe the details of the general software functionalities in the technical specifications referred to in Article 73(3) of Regulation (EU) 2018/1240.
Specific software functionalities
1. The software shall have at least the following specific functionalities supporting users when they access data in accordance with Chapters III, IV and VI of Regulation (EU) 2018/1240:
(a)
a functionality displaying application files based on the time remaining until the next step of the manual processing, as the default display, as well as other filters, available for customising the display per user, for displaying the application files:
(i)
time of entry to the manual processing phase;
(ii)
any necessary consultation requests and the time remaining until the deadline for providing opinions expires (sorted by default with those consultation requests for which least time remains until the deadline);
(iii)
the next step of the manual processing to be performed by an ETIAS National Unit consulted or responsible for the application;
(iv)
the type of hit or background question triggering the manual processing;
(v)
the type of application (that is to say humanitarian grounds or international obligations, or normal);
(vi)
applications marked for special attention or ad hoc handling;
(vii)
for the ETIAS National Unit of the Member State responsible, the type of opinion received from consulted ETIAS National Units or Europol, including whether or not received within the deadline;
(b)
a functionality to calculate and clearly display the time remaining, as well as warnings on deadlines for the manual processing of applications, including when the ETIAS National Units or Europol are consulted;
(c)
a functionality providing the ETIAS Central Unit, ETIAS National Units and Europol with a management dashboard giving an overview of the state of play of manual processing related operations;
(d)
a functionality providing the option to mark an application for specific attention or ad hoc handling;
(e)
a functionality providing the option to request a notification of the decision taken by the ETIAS National Unit of the Member State responsible regarding an application on which an ETIAS National Unit was consulted;
(f)
a functionality enabling the ETIAS Central Unit and ETIAS National Units to add or delete temporary notes on the application file;
(g)
functionalities supporting ETIAS National Units in manually processing applications pursuant to Article 26 and Article 28 of Regulation (EU) 2018/1240, as follows:
(i)
for hits referred to in Article 26(3) of Regulation (EU) 2018/1240, a functionality making automatically available a file for extraction with the following data from the application file: ‘surname (family name)’, ‘first name(s) (given name(s))’, ‘surname at birth’, ‘date of birth’, ‘place of birth’, ‘current nationality’, ‘country of birth’, ‘the type, number and country of issue of the travel document’, enabling retrieving the record, file or alert having triggered the hit in the queried EU information systems and where additional information related to the hit in an EU information system referred to in that Article is stored in a national system or a database, to consult that national system or a database supporting the assessment of the risks identified in that paragraph;
(ii)
for hits referred to in Article 26(4) of Regulation (EU) 2018/1240, a functionality making automatically available a file for extraction with the following data from the application file: answers provided by the applicant under Article 17(4) and (6) of that Regulation, ‘surname (family name)’, ‘first name(s) (given name(s))’, ‘surname at birth’, ‘date of birth’, ‘place of birth’, ‘current nationality’, ‘country of birth’, ‘the type, number and country of issue of the travel document’, enabling retrieval in the relevant national systems or databases information related to the hit and supporting the assessment of the risks identified in that paragraph;
(iii)
for hits referred to in Article 26(5) of Regulation (EU) 2018/1240, a functionality making automatically available a file for extraction with the following data from the application file: ‘surname (family name)’, ‘first name(s) (given name(s))’, ‘surname at birth’, ‘date of birth’, ‘place of birth’, ‘current nationality’, ‘country of birth’, ‘type, number and country of issue of the travel document’ and ‘the national identifier’ of the watchlist entry, enabling retrieval in the relevant national systems or databases information related to the hit and supporting the assessment of the risk identified in that paragraph;
(iv)
for hits referred to in Article 26(6) of Regulation (EU) 2018/1240, a functionality making automatically available a file for extraction with the following data from the application file ‘surname (family name)’, ‘first name(s) (given name(s))’, ‘surname at birth’, ‘date of birth’, ‘place of birth’, ‘current nationality’, ‘country of birth’ and ‘type, number and country of issue of the travel document’ enabling retrieval in the relevant national systems or databases information related to the hit and supporting the assessment of the risks identified in that paragraph;
(v)
a functionality enabling users from the ETIAS National Units to upload the result of the assessment of the risks referred to in the second subparagraph of Article 26(7) of Regulation (EU) 2018/1240;
(h)
a functionality enabling the extraction of the relevant data required for national appeal procedures, where such procedures have been initiated and recording in the ETIAS Central System that an appeal procedure was initiated, accompanied with the corresponding national appeal reference numbers and the outcome of that procedure;
(i)
a functionality enabling the extraction of the additional information or documentation referred to in Article 27(2) and (8) of Regulation (EU) 2018/1240 and the uploading and storing of translations of that documentation in the application file;
(j)
a functionality enabling follow up on the outcome of national appeals pursuant to Article 37(3), Article 40(3) and Article 41(7) of Regulation (EU) 2018/1240, including amendment or erasure of data in the ETIAS Central System, or where relevant issue of a new travel authorisation;
(k)
a functionality to assign application files and limit or enable their visibility to specific users within the same ETIAS National Unit or within the ETIAS Central Unit, in order to enable coordination among users;
(l)
a functionality enabling Europol to extract data transmitted to it by the ETIAS Central Unit as referred to in Article 29(2) of Regulation (EU) 2018/1240;
(m)
a functionality enabling the ETIAS Central Unit to have access to the ETIAS Central System to process Europol requests for consultation of data stored in the ETIAS Central System, without viewing the search parameters of the Europol request or the search results, and to notify Europol of the transmission of the data pursuant to Article 53 of Regulation (EU) 2018/1240;
(n)
a functionality enabling Europol to extract a file containing the data resulting from the request for consultation referred to in point (m);
(o)
a functionality to assign consultation requests to specific users within Europol;
(p)
a functionality enabling users from the ETIAS Central Unit or from the ETIAS National Units to work on different hits simultaneously within the same application file and to coordinate for the consolidation of an opinion in cases where more than one hit is identified for that Unit on one application file;
(q)
a functionality ensuring that only one user, within the ETIAS Central Unit or an ETIAS National Unit, can work on the same hit, at the same time, in an application file;
(r)
a functionality enabling the manual retrieval of an issued travel authorisation for the purposes of annulment and revocation.
2. The functionality referred to in point (q) shall enable users to see hits on which it is not possible to work at a given time. Users with appropriate access credentials shall be able to view the content of the hit at all times.
3. eu-LISA shall describe the details of the specific software functionalities referred to in paragraph 1, the format of the data in the extracted files referred to in paragraph 1, points (g), (l), (m) and (n) of this Article and the technical approach for keeping of records of all data processing operations referred to in Article 26(7) of Regulation (EU) 2018/1240 in the technical specifications provided for in Article 73(3) of that Regulation.
