(1) in Article 4, point (20) is replaced by the following:
‘(20) “designated authorities” means the Member States’ designated authorities within the meaning of Article 5 of of the European Parliament and of the Council (*), Article 3(1), point (26), of of the European Parliament and the Council (**), Article 4, point (3a), of , and Article 3(1), point (21), of of the European Parliament and of the Council (***);
(*) Regulation (EU) 2024/1358 of the European Parliament and of the Council of 14 May 2024 on the establishment of “Eurodac” for the comparison of biometric data in order to effectively apply Regulations (EU) 2024/1351 and (EU) 2024/1350 of the European Parliament and of the Council and Council Directive 2001/55/EC and to identify illegally staying third-country nationals and stateless persons and on requests for the comparison with Eurodac data by Member States’ law enforcement authorities and Europol for law enforcement purposes, amending Regulations (EU) 2018/1240 and (EU) 2019/818 of the European Parliament and of the Council and repealing Regulation (EU) No 603/2013 of the European Parliament and of the Council (OJ L, 2024/1358, 22.5.2024, ELI: http://data.europa.eu/eli/reg/2024/1358/oj);”↩︎
(**) Regulation (EU) 2017/2226 of the European Parliament and of the Council of 30 November 2017 establishing an Entry/Exit System (EES) to register entry and exit data and refusal of entry data of third-country nationals crossing the external borders of the Member States and determining the conditions for access to the EES for law enforcement purposes, and amending the Convention implementing the Schengen Agreement and Regulations (EC) No 767/2008 and (EU) No 1077/2011 (EES Regulation) (OJ L 327, 9.12.2017, p. 20).”↩︎
(***) Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226 (OJ L 236, 19.9.2018, p. 1).’;”↩︎
(2) in Article 10(1), the introductory wording is replaced by the following:
‘Without prejudice to Article 51 of , Articles 12 and 18 of , Article 31 of and Article 40 of , shall keep logs of all data processing operations within the . Those logs shall include, in particular, the following:’;
(3) in Article 13(1), the first subparagraph is amended as follows:
(a) point (b) is replaced by the following:
‘(b) the data referred to in Article 5(1), point (b), and Article 5(3) of ;’;
(b) the following point is added:
‘(c) the data referred to in Article 17(1), points (a) and (b), Article 19(1), points (a) and (b), Article 21(1) points (a) and (b), Article 22(2), points (a) and (b), Article 23(2), points (a) and (b), Article 24(2), points (a) and (b) and Article 26(2), points (a) and (b) of .’;
(4) Article 14 is replaced by the following:
‘Article 14
Searching biometric data with the shared biometric matching service
In order to search the biometric data stored within the and , the and shall use the biometric templates stored in the shared . Queries with biometric data shall take place in accordance with the purposes provided for in this Regulation and in Regulations , , , , , and (EU) 2024/1358.’
;
(5) in Article 16(1), the first sentence is replaced by the following:
‘Without prejudice to Article 51 of , Articles 12 and 18 of and Article 31 of , shall keep logs of all data processing operations within the shared .’;
(6) in Article 18, paragraph 1 is replaced by the following:
‘1. The shall store the following data, logically separated according to the information system from which the data have originated:
(a) the data referred to in Article 17(1), points (a) to (f), (h) and (i), Article 19(1) points (a) to (f), (h) and (i), Article 21(1) points (a) to (f), (h) and (i), Article 22(2), points (a) to (f), (h) and (i), Article 23(2), points (a) to (f), (h) and (i), Article 24(2), points (a) to (f) and (h), Article 24(3), point (a), and Article 26(2), points (a) to (f), (h) and (i), of ;
(b) the data referred to in Article 5(1), point (b), and Article 5(3) of and the following data listed in Article 5(1), point (a) of that Regulation: surname (family name), first names (given names), date of birth, place of birth (town and country), nationality or nationalities, gender, previous names, if applicable, where available pseudonyms or aliases, as well as, where available, information on travel documents.’
;
(7) in Article 23, paragraph 1 is replaced by the following:
‘1. The data referred to in Article 18(1), (2) and 4) shall be deleted from the in an automated manner in accordance with the data retention provisions of and of .’
;
(8) in Article 24, paragraph 1 is replaced by the following:
‘1. Without prejudice to Article 51 of and Article 29 of , shall keep logs of all data processing operations within the in accordance with paragraphs 2, 3 and 4 of this Article.’
;
(9) in Article 26(1), the following points are added:
‘(c) the authorities competent to collect the data provided for in Chapter II of when transmitting data to Eurodac;
(d) the authorities competent to collect the data provided for in Chapter III of when transmitting data to Eurodac;
(e) the authorities competent to collect the data provided for in Chapter IV of when transmitting data to Eurodac;
(f) the authorities competent to collect the data provided for in Chapter V of when transmitting data to Eurodac;
(g) the authorities competent to collect the data provided for in Chapter VI of when transmitting data to Eurodac;
(h) the authorities competent to collect the data provided for in Chapter VIII of when transmitting data to Eurodac;’;
(10) Article 27 is amended as follows:
(a) in paragraph 1, the following point is added:
‘(c) a dataset is transmitted to Eurodac in accordance with Articles 17, 19, 21, 22, 23, 24 or 26 of ;’;
(b) in paragraph 3, the following point is added:
‘(c) surname(s); forename(s); name(s) at birth, previously used names and aliases; date of birth, place of birth, nationality(ies) and sex as referred to in Articles 17, 19, 21, 22, 23, 24 and 26 of ;’;
(11) in Article 29(1), the following points are added:
‘(c) the authorities competent to collect the data provided for in Chapter II of when transmitting data to Eurodac for matches that occurred when transmitting such data;
(d) the authorities competent to collect the data provided for in Chapter III of when transmitting data to Eurodac for matches that occurred when transmitting such data;
(e) the authorities competent to collect the data provided for in Chapter IV of for matches that occurred when transmitting such data;
(f) the authorities competent to collect the data provided for in Chapter V of for matches that occurred when transmitting such data;
(g) the authorities competent to collect the data provided for in Chapter VI of when transmitting data to Eurodac for matches that occurred when transmitting such data;
(h) the authorities competent to collect the data provided for in Chapter VIII of when transmitting data to Eurodac for matches that occurred when transmitting such data.’;
(12) in Article 39, paragraph 2 is replaced by the following:
‘2. shall establish, implement and host in its technical sites the containing the data and statistics referred to in Article 12 of , Article 74 of and Article 32 of logically separated by EU information system. Access to the shall be granted by means of controlled, secured access and specific user profiles, solely for the purpose of reporting and statistics, to the authorities referred to in Article 12 of , Article 74 of and Article 32 of .’
;
(13) in Article 47(3), the following subparagraph is added:
‘Persons whose data are recorded in Eurodac shall be informed about the processing of personal data for the purposes of this Regulation in accordance with paragraph 1 when a new dataset is transmitted to Eurodac in accordance with Articles 15, 18, 20, 22, 23, 24 and 26 of .’;
(14) Article 50 is replaced by the following:
‘Article 50
Communication of personal data to third countries, international organisations and private parties
Without prejudice to Article 31 of , Articles 25 and 26 of , Article 41 of , Article 65 of , Articles 49 and 50 of and the querying of Interpol databases through the in accordance with Article 9(5) of this Regulation which comply with the provisions of Chapter V of and Chapter V of , personal data stored in, processed or accessed by the interoperability components shall not be transferred or made available to any third country, to any international organisation or to any private party.’.
Correlation table
| Regulation (EU) No 603/2013 | This Regulation |
| — | Article 54 |