1. Third-country nationals subjected to the screening pursuant to Article 5 or 7 shall undergo a security check to verify whether they might pose a threat to internal security. That security check may cover both the third-country nationals and the objects in their possession. The law of the Member State concerned shall apply to any searches carried out.

2. For the purpose of conducting the security check referred to in paragraph 1 of this Article, and to the extent that it has not been already done during the checks referred to in Article 8(3) of Regulation (EU) 2016/399Schengen Border Code, the relevant Union databases, in particular SISSchengen Information System, the Entry/Exit System established by Regulation (EU) 2017/2226Entry/Exit System Regulation (EES), the European Travel Information and Authorisation System established by Regulation (EU) 2018/1240European Travel Information and Authorisation System Regulation (ETIASEuropean Travel Information and Authorisation System), including the ETIAS watchlist referred to in Article 34 of Regulation (EU) 2018/1240European Travel Information and Authorisation System Regulation, the Visa Information System established by Decision 2004/512/EC (VIS) and the centralised system for the identification of Member States holding conviction information on third-country nationals and stateless persons established by Regulation (EU) 2019/816Centralised system for the identification of Member States holding conviction information Regulation (ECRIS-TCN), the Europol data processed for the purpose referred to in Article 18(2), point (a), of Regulation (EC) 2016/794Europol Regulation, and the Interpol databases shall be consulted as provided for in Article 16 of this Regulation. Relevant national databases may also be consulted for that purpose.

3. As regards the consultation of the EESEntry/Exit System, ETIASEuropean Travel Information and Authorisation System, with the exception of the ETIAS watchlist referred to in Article 34 of Regulation (EU) 2018/1240European Travel Information and Authorisation System Regulation, and VISVisa Information System pursuant to paragraph 2 of this Article, the retrieved data shall be limited to indicating refusals of entry, refusals, annulment or revocation of a travel authorisation, or decisions to refuse, annul or revoke a visa, a long-stay visa or a residence permit respectively, which are based on security grounds.

In the event of a hit in SISSchengen Information System, the screening authority carrying out the search shall have access to the data contained in the alert.

4. As regards the consultation of ECRIS-TCNCentralised system for the identification of Member States holding conviction information on third-country nationals and stateless persons, the data retrieved shall be limited to convictions related to terrorist offences and other forms of serious criminal offences referred to in Article 5(1), point (c), of Regulation (EU) 2019/816Centralised system for the identification of Member States holding conviction information Regulation.

5. If necessary, the Commission shall adopt implementing acts setting out the detailed procedure and specifications for retrieving data. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 19(2).