Keeping of logs by eu-LISA and Member States
Article 46
1. eu-LISA shall keep logs of all data processing operations within the EES. Those logs shall include the following: (a) the purpose of access referred to in Article 9(2); (b) the date and time; (c) the data transmitted as referred to in Articles 16 to 19; (d) the data used for interrogation as referred to in Articles 23 to 27; and (e) the name of the authority entering or retrieving the data. 2. For the consultations listed in Article 8, a log of each data processing operation carried out within the EES and the VIS shall be kept in accordance with this Article and Article 34 of Regulation (EC) No 767/2008. eu-LISA shall ensure, in particular, that the relevant log of the concerned data processing operations is kept when the competent authorities launch a data processing operation directly from one system to the other. 3. In addition to paragraphs 1 and 2, each Member State shall keep logs of the staff duly authorised to process the EES data. 4. Such logs may be used only for data protection monitoring, including checking the admissibility of a request and the lawfulness of data processing, and for ensuring data security pursuant to Article 43. Those logs shall be protected by appropriate measures against unauthorised access and erased one year after the retention period referred to in Article 34 has expired, unless they are required for monitoring procedures which have already begun.