Input:
7.12.2018
EN
Official Journal of the European Union
L 312/1
REGULATION (EU) 2018/1860 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
of 28 November 2018
on the use of the Schengen Information System for the return of illegally staying third-country nationals
THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,
Having regard to the Treaty on the Functioning of the European Union, and in particular Article 79(2)(c) thereof,
Having regard to the proposal from the European Commission,
After transmission of the draft legislative act to the national parliaments,
Acting in accordance with the ordinary legislative procedure (1),
Whereas:
(1)
The return of third-country nationals who do not fulfil or no longer fulfil the conditions for entry, stay or residence in the Member States, in full respect of fundamental rights and in particular the principle of non-refoulement, and in accordance with Directive 2008/115/EC of the European Parliament and of the Council (2), is an essential part of the comprehensive efforts to tackle irregular migration and increase the rate of return of irregular migrants.
(2)
It is necessary to increase the effectiveness of the Union system to return illegally staying third-country nationals. This is essential for maintaining public trust in the Union migration and asylum policy and providing support to persons in need of international protection.
(3)
Member States should take all necessary measures to return illegally staying third-country nationals in an effective and proportionate manner, in accordance with the provisions of Directive 2008/115/EC.
(4)
Regulation (EU) 2018/1861 (3) and Regulation (EU) 2018/1862 (4) of the European Parliament and of the Council lay down the conditions for the establishment, operation and use of the Schengen Information System (SIS).
(5)
A system should be established for sharing information between Member States that use SIS pursuant to Regulation (EU) 2018/1861 concerning return decisions issued in respect of third-country nationals staying illegally on the territory of the Member States and for monitoring whether third-country nationals subject to those decisions have left the territory of the Member States.
(6)
This Regulation does not affect the rights and obligations of third-country nationals laid down in Directive 2008/115/EC. An alert entered into SIS for the purpose of return does not, in itself, constitute a determination of the status of the third-country national on the territory of Member States, especially in Member States other than the Member State which entered the alert into SIS.
(7)
Alerts on return entered into SIS and the exchange of supplementary information concerning those alerts should support competent authorities to take the necessary measures to enforce return decisions. SIS should contribute to the identification of and the information sharing between Member States on third-country nationals who are subject to such a return decision, who have absconded and are apprehended in another Member State. Those measures should help prevent and deter irregular migration and secondary movements and enhance cooperation between Member States' authorities.
(8)
To ensure the effectiveness of return and increase the added value of alerts on return, Member States should enter alerts into SIS in relation to return decisions they issue in respect of illegally staying third-country nationals in accordance with provisions respecting Directive 2008/115/EC. For this purpose, Member States should also enter an alert into SIS when decisions imposing or stating an obligation to return are issued in the situations described in Article 2(2) of that Directive, namely to third-country nationals who are subject to a refusal of entry in accordance with Regulation (EU) 2016/399 of the European Parliament and of the Council (5), or who are apprehended or intercepted by the competent authorities in connection with the irregular crossing by land, sea or air of the external border of a Member State and who have not subsequently obtained an authorisation or a right to stay in that Member State, and to third-country nationals who are subject to return as a criminal law sanction or as a consequence of a criminal law sanction, according to national law, or who are the subject of extradition procedures. In certain circumstances, Member States may refrain from entering alerts on return into SIS where the risk of the return decision not being complied with is low, namely during any period of detention or when the return decision is issued at the external border and is executed immediately, in order to reduce their administrative burden.
(9)
This Regulation should set out common rules for entering alerts on return into SIS. Alerts on return should be entered into SIS as soon as the underlying return decisions are issued. The alert should indicate whether a period for voluntary departure has been granted to the third-country national concerned, including whether such period has been extended and whether the decision has been suspended or removal has been postponed.
(10)
It is necessary to determine the categories of data to be entered into SIS in respect of a third-country national who is the subject of a return decision. Alerts on return should contain only those data that are necessary to identify the data subjects, to allow the competent authorities to take informed decisions without losing time and to ensure, where necessary, the protection of those authorities from persons who are, for example, armed, violent, have escaped or are involved in an activity as referred to in Articles 3 to 14 of Directive (EU) 2017/541 of the European Parliament and of the Council (6). Furthermore, in order to facilitate identification and detect multiple identities, the alert should include also a reference to the identification document of the person concerned and a copy of that document, where available.
(11)
Given the reliability of identifying persons using fingerprints and photographs or facial images, they should always be inserted in alerts on return. As they may not be available, for example, when a return decision is taken in absentia, it should exceptionally be possible to derogate from this requirement in such cases.
(12)
The exchange of supplementary information provided by the national competent authorities on third-country nationals subject to alerts on return, should always be carried out through the network of national offices called SIRENE Bureaux serving as point of contact and in accordance with Articles 7 and 8 of Regulation (EU) 2018/1861.
(13)
Procedures should be established to enable Member States to verify that the obligation to return has been complied with and to confirm the departure of the third-country national concerned to the Member State that entered the alert on return into SIS. This information should contribute to more comprehensive monitoring of the compliance with return decisions.
(14)
Alerts on return should be deleted as soon as the Member State or competent authority that issued the return decision receives confirmation that the return has taken place or where the competent authority has sufficient and convincing information that the third-country national has left the territory of the Member States. Where a return decision is accompanied by an entry ban, an alert for refusal of entry and stay should be entered into SIS in accordance with Regulation (EU) 2018/1861. In such cases Member States should take all necessary measures to ensure that no time-gap exists between the moment in which the third-country national leaves the Schengen area and the activation of the alert for refusal of entry and stay in SIS. If the data contained in SIS show that the return decision is accompanied by an entry ban, the enforcement of the entry ban should be ensured.
(15)
SIS should contain a mechanism for notifying the Member States of the non-compliance of third-country nationals with an obligation to return within a given period of voluntary departure. The mechanism should support the Member States in fulfilling their obligations to enforce return decisions and their obligations to issue an entry ban in accordance with Directive 2008/115/EC with regard to third-country nationals who have not complied with an obligation to return.
(16)
This Regulation should establish mandatory rules for consultation between Member States to avoid or reconcile conflicting instructions. Consultations should be carried out where third-country nationals who hold, or are being granted, a valid residence permit or a long-stay visa by a Member State are subject to an alert on return issued by another Member State, in particular if the return decision is accompanied by an entry ban, or where conflicting situations may arise at entry in the territories of the Member States.
(17)
Alerts should be kept in SIS only for the time required to fulfil the purposes for which they were entered. The relevant provisions of Regulation (EU) 2018/1861 on review periods should apply. Alerts on return should be automatically deleted as soon as they expire, in accordance with the review procedure referred to in that Regulation.
(18)
Personal data obtained by a Member State pursuant to this Regulation should not be transferred or made available to any third country. As a derogation to that rule, it should be possible to transfer such personal data to a third country where the transfer is subject to strict conditions and is necessary in individual cases in order to assist with the identification of a third-country national for the purposes of his or her return. The transfer of any personal data to third countries should be carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (7) and be conducted with the agreement of the issuing Member State. It should be noted however, that third countries of return are often not subject to adequacy decisions adopted by the Commission under Article 45 of Regulation (EU) 2016/679. Furthermore, the extensive efforts of the Union in cooperating with the main countries of origin of illegally-staying third-country nationals subject to an obligation to return has not been able to ensure the systematic fulfilment by such third countries of the obligation established by international law to readmit their own nationals. Readmission agreements that have been concluded or are being negotiated by the Union or the Member States and which provide for appropriate safeguards for the transfer of data to third countries pursuant to Article 46 of Regulation (EU) 2016/679 cover a limited number of such third countries.
Conclusion of any new agreement remains uncertain. In those circumstances, and as an exception to the requirement for an adequacy decision or appropriate safeguards, transfer of personal data to third-country authorities pursuant to this Regulation should be allowed for the purposes of implementing the return policy of the Union. It should be possible to use the derogation provided for in Article 49 of Regulation (EU) 2016/679, subject to the conditions set out in that Article. Under Article 57 of that Regulation, implementation of that Regulation, including with regard to transfers of personal data to third countries pursuant to this Regulation, should be subject to monitoring by independent supervisory authorities.
(19)
National authorities responsible for return might differ significantly among Member States, and such authorities might also vary within a Member State depending on the reasons for illegal stay. Judicial authorities might also issue return decisions, for instance as result of appeals against a refusal to grant an authorisation or right to stay or as a criminal sanction. All national authorities in charge of issuing and enforcing return decisions in accordance with Directive 2008/115/EC should be entitled to access SIS in order to enter, update, delete and search alerts on return.
(20)
Access to alerts on return should be granted to the national competent authorities referred to in Regulation (EU) 2018/1861 for the purpose of identification and return of third-country nationals.
(21)
Regulation (EU) 2016/794 of the European Parliament and of the Council (8) provides that Europol is to support and strengthen actions carried out by the national competent authorities and their cooperation in combating terrorism and serious crime and to provide analysis and threat assessments. In order to facilitate Europol in carrying out its tasks, in particular within the European Migrant Smuggling Centre, it is appropriate to allow Europol access to the category of alerts as provided for in this Regulation.
(22)
Regulation (EU) 2016/1624 of the European Parliament and of the Council (9) provides, for the purpose of that Regulation, that the host Member State is to authorise the members of the teams referred to in point (8) of Article 2 of that Regulation deployed by the European Border and Coast Guard Agency to consult Union databases where this consultation is necessary for fulfilling operational aims specified in the operational plan on border checks, border surveillance and return. The objective of the deployment of the teams referred to in points (8) and (9) of Article 2 of that Regulation is to provide technical and operational reinforcement to the requesting Member States, especially to those facing disproportionate migratory challenges. For the teams referred to in points (8) and (9) of Article 2 of that Regulation to fulfil their tasks, they require access to alerts on return in SIS through a technical interface of the European Border and Coast Guard Agency connecting to Central SIS.
(23)
The provisions on responsibilities of the Member States and the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice established by Regulation (EU) 2018/1726 of the European Parliament and of the Council (10) (‘eu-LISA’), on the entry and processing of alerts, on the conditions for access to and retention of alerts, on data processing, on data protection, on liability and on monitoring and statistics in Regulation (EU) 2018/1861 should also apply to data contained and processed in SIS in accordance with this Regulation.
(24)
Since the objectives of this Regulation, namely to establish a system for sharing information about return decisions issued by the Member States in accordance with provisions respecting Directive 2008/115/EC in view of facilitating their enforcement and to monitor the compliance of illegally staying third-country nationals with their obligation to return, cannot be sufficiently achieved by the Member States, but can rather, by reason of its scale and effects, be better achieved at Union level, the Union may adopt measures, in accordance with the principle of subsidiarity as set out in Article 5 of the Treaty on European Union (TEU). In accordance with the principle of proportionality as set out in that Article, this Regulation does not go beyond what is necessary in order to achieve those objectives.
(25)
This Regulation respects fundamental rights and observes the principles recognised by the Charter of Fundamental Rights of the European Union.
(26)
The application of this Regulation is without prejudice to the obligations deriving from the Geneva Convention relating to the Status of Refugees of 28 July 1951, as supplemented by the New York Protocol of 31 January 1967.
(27)
Member States should implement this Regulation in full respect of fundamental rights, including the respect of the principle of non-refoulement, and should always take into consideration the best interests of the child, family life, and the state of health or condition of vulnerability of the individuals concerned.
(28)
In accordance with Articles 1 and 2 of Protocol No 22 on the position of Denmark annexed to the TEU and to the Treaty on the Functioning of the European Union, Denmark is not taking part in the adoption of this Regulation and is not bound by it or subject to its application. Given that this Regulation builds upon the Schengen acquis, Denmark shall, in accordance with Article 4 of that Protocol, decide within a period of six months after the Council has decided on this Regulation whether it will implement it in its national law.
(29)
This Regulation constitutes a development of provisions of the Schengen acquis in which the United Kingdom does not take part, in accordance with Council Decision 2000/365/EC (11); the United Kingdom is therefore not taking part in the adoption of this Regulation and is not bound by it or subject to its application.
(30)
This Regulation constitutes a development of the provisions of the Schengen acquis in which Ireland does not take part, in accordance with Council Decision 2002/192/EC (12); Ireland is therefore not taking part in the adoption of this Regulation and is not bound by it or subject to its application.
(31)
As regards Iceland and Norway, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement concluded by the Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning the latters' association with the implementation, application and development of the Schengen acquis (13), which fall within the area referred to in Article 1, point (C) of Council Decision 1999/437/EC (14).
(32)
As regards Switzerland, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation's association with the implementation, application and development of the Schengen acquis (15), which fall within the area referred to in Article 1, point (C) of Decision 1999/437/EC read in conjunction with Article 3 of Council Decision 2008/146/EC (16).
(33)
As regards Liechtenstein, this Regulation constitutes a development of the provisions of the Schengen acquis within the meaning of the Protocol between the European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation's association with the implementation, application and development of the Schengen acquis (17), which fall within the area referred to in Article 1, point (C) of Decision 1999/437/EC read in conjunction with Article 3 of Council Decision 2011/350/EU (18).
(34)
As regards Bulgaria and Romania, this Regulation constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 4(2) of the 2005 Act of Accession and should be read in conjunction with Council Decisions 2010/365/EU (19) and (EU) 2018/934 (20).
(35)
As regards Croatia, this Regulation constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 4(2) of the 2011 Act of Accession and should be read in conjunction with Council Decision (EU) 2017/733 (21).
(36)
Concerning Cyprus this Regulation constitutes an act building upon, or otherwise relating to, the Schengen acquis within the meaning of Article 3(2) of the 2003 Act of Accession.
(37)
The European Data Protection Supervisor was consulted in accordance with Article 28(2) of Regulation (EC) No 45/2001 of the European Parliament and of the Council (22) and delivered an opinion on 3 May 2017,
HAVE ADOPTED THIS REGULATION:
Article 1
Subject matter and scope
This Regulation lays down the conditions and procedures for the entry and processing of alerts in respect of third-country nationals subject to return decisions issued by the Member States in the Schengen Information System (SIS) established by Regulation (EU) 2018/1861, as well as for exchanging supplementary information on such alerts.
Article 2
Definitions
For the purposes of this Regulation, the following definitions apply:
(1)
‘return’ means return as defined in point (3) of Article 3 of Directive 2008/115/EC;
(2)
‘third-country national’ means a third-country national as defined in point (1) of Article 3 of Directive 2008/115/EC;
(3)
‘return decision’ means an administrative or judicial decision or act, stating or declaring the stay of a third-country national to be illegal and imposing or stating an obligation to return that respects Directive 2008/115/EC;
(4)
‘alert’ means an alert as defined in point (1) of Article 3 of Regulation (EU) 2018/1861;
(5)
‘supplementary information’ means supplementary information as defined in point (2) of Article 3 of Regulation (EU) 2018/1861;
(6)
‘removal’ means removal as defined in point (5) of Article 3 of Directive 2008/115/EC;
(7)
‘voluntary departure’ means a voluntary departure as defined in point (8) of Article 3 of Directive 2008/115/EC;
(8)
‘issuing Member State’ means an issuing Member State as defined in point (10) of Article 3 of Regulation (EU) 2018/1861;
(9)
‘granting Member State’ means a granting Member State as defined in point (11) of Article 3 of Regulation (EU) 2018/1861;
(10)
‘executing Member State’ means an executing Member State as defined in point (12) of Article 3 of Regulation (EU) 2018/1861;
(11)
‘personal data’ means personal data as defined in point (1) of Article 4 of Regulation (EU) 2016/679;
(12)
‘CS-SIS’ means the technical support function of the Central SIS as referred to in point (a) of Article 4(1) of Regulation (EU) 2018/1861;
(13)
‘residence permit’ means a residence permit as defined in point (16) of Article 2 of Regulation (EU) 2016/399;
(14)
‘long-stay visa’ means a long-stay visa as referred to in Article 18(1) of Convention of 19 June 1990 implementing the Schengen Agreement of 14 June 1985 between the governments of the States of the Benelux Economic Union, the Federal Republic of Germany and the French Republic on the gradual abolition of checks at their common borders (23);
(15)
a ‘hit’ means a hit as defined in point (8) of Article 3 of Regulation (EU) 2018/1861;
(16)
‘threat to public health’ means a threat to public health as defined in point (21) of Article 2 of Regulation (EU) 2016/399;
(17)
‘external borders’ means the external borders as defined in point (2) of Article 2 of Regulation (EU) 2016/399.
Article 3
Entry of alerts on return into SIS
1.   Member States shall enter into SIS alerts on third-country nationals subject to a return decision for the purpose of verifying that the obligation to return has been complied with and of supporting the enforcement of the return decisions. An alert on return shall be entered into SIS without delay following issue of a return decision.
2.   Member States may refrain from entering alerts on return when the return decisions concern third-country nationals who are detained pending removal. If the third-country nationals concerned are released from detention without being removed, an alert on return shall be entered into SIS without delay.
3.   Member States may refrain from entering alerts on return when the return decision is issued at the external border of a Member State and is executed immediately.
4.   The period for voluntary departure granted in accordance with Article 7 of Directive 2008/115/EC shall be recorded in the alert on return immediately. Any extension of that period shall be recorded in the alert without delay.
5.   Any suspension or postponement of the enforcement of the return decision, including as a result of the lodging of an appeal, shall immediately be recorded in the alert on return.
Article 4
Categories of data
1.   An alert on return entered into SIS in accordance with Article 3 of this Regulation shall contain only the following data:
(a)
surnames;
(b)
forenames;
(c)
names at birth;
(d)
previously used names and aliases;
(e)
place of birth;
(f)
date of birth;
(g)
gender;
(h)
any nationalities held;
(i)
whether the person concerned:
(i)
is armed;
(ii)
is violent;
(iii)
has absconded or escaped;
(iv)
poses a risk of suicide;
(v)
poses a threat to public health; or
(vi)
is involved in an activity referred to in Articles 3 to 14 of Directive (EU) 2017/541;
(j)
the reason for the alert;
(k)
the authority which created the alert;
(l)
a reference to the decision giving rise to the alert;
(m)
the action to be taken in the case of a hit;
(n)
links to other alerts pursuant to Article 48 of Regulation (EU) 2018/1861;
(o)
whether the return decision is issued in relation to a third-country national who poses a threat to public policy, to public security or to national security;
(p)
the type of offence;
(q)
the category of the person's identification documents;
(r)
the country of issue of the person's identification documents;
(s)
the number(s) of the person's identification documents;
(t)
the date of issue of the person's identification documents;
(u)
photographs and facial images;
(v)
dactyloscopic data;
(w)
a copy of the identification documents, in colour wherever possible;
(x)
last date of the period for voluntary departure, if granted;
(y)
whether the return decision has been suspended or the enforcement of the decision has been postponed, including as a result of the lodging of an appeal;
(z)
whether the return decision is accompanied by an entry ban constituting the basis for an alert for refusal of entry and stay pursuant to point (b) of Article 24(1) of Regulation (EU) 2018/1861.
2.   The minimum set of data necessary to enter an alert into SIS shall be the data referred to in points (a), (f), (j), (l), (m), (x) and (z) of paragraph 1. The other data referred to in that paragraph shall also be entered into SIS, if available.
3.   Dactyloscopic data referred to in point (v) of paragraph 1 may consist of:
(a)
one to ten flat fingerprints and one to ten rolled fingerprints of the third-country national concerned;
(b)
up to two palm prints in respect of third-country nationals from whom the collection of fingerprints is impossible;
(c)
up to two palm prints in respect of third-country nationals who are subject to return as a criminal law sanction or who have committed a criminal offence on the territory of the Member State which issued the return decision.
Article 5
Authority responsible for the exchange of supplementary information
The SIRENE Bureau designated under Article 7 of Regulation (EU) 2018/1861 shall ensure the exchange of all supplementary information on third-country nationals who are the subject of an alert on return, in accordance with Articles 7 and 8 of that Regulation.
Article 6
Hits at the external borders at exit — Confirmation of return
1.   In the event of a hit on an alert on return concerning a third-country national who is exiting the territory of the Member States through the external border of a Member State, the executing Member State shall communicate the following information to the issuing Member State through the exchange of supplementary information:
(a)
that the third-country national has been identified;
(b)
the location and time of the check;
(c)
that the third-country national has left the territory of the Member States;
(d)
that the third-country national has been subject to removal, if this is the case.
Where a third-country national who is the subject of an alert on return exits the territory of the Member States through the external border of the issuing Member State, the confirmation of return shall be sent to the competent authority of that Member State in accordance with national procedures.
2.   The issuing Member State shall delete the alert on return without delay following the receipt of the confirmation of return. Where applicable, an alert for refusal of entry and stay shall be entered without delay pursuant to point (b) of Article 24(1) of Regulation (EU) 2018/1861.
3.   The Member States shall on a quarterly basis provide statistics to the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) on the number of confirmed returns and on the number of those confirmed returns where the third-country national was subject to removal. eu-LISA shall compile the quarterly statistics into the annual statistical report referred to in Article 16 of this Regulation. The statistics shall not contain personal data.
Article 7
Non-compliance with return decisions
1.   Upon expiry of the period for voluntary departure indicated in an alert on return, including any possible extensions, CS-SIS shall automatically notify the issuing Member State.
2.   Without prejudice to the procedure referred to in Articles 6(1), 8 and 12, in the event of a hit on an alert on return, the executing Member State shall immediately contact the issuing Member State through the exchange of supplementary information in order to determine the measures to be taken.
Article 8
Hits at the external borders upon entry
In the event of a hit on an alert on return concerning a third-country national who is entering the territory of the Member States through the external borders, the following shall apply:
(a)
where the return decision is accompanied by an entry ban, the executing Member State shall immediately inform the issuing Member State through the exchange of supplementary information. The issuing Member State shall immediately delete the alert on return and enter an alert for refusal of entry and stay pursuant to point (b) of Article 24(1) of Regulation (EU) 2018/1861;
(b)
where the return decision is not accompanied by an entry ban, the executing Member State shall immediately inform the issuing Member State through the exchange of supplementary information, in order that the issuing Member State delete the alert on return without delay.
The decision on the entry of the third-country national shall be taken by the executing Member State in accordance with Regulation (EU) 2016/399.
Article 9
Prior consultation before granting or extending a residence permit or long-stay visa
1.   Where a Member State considers granting or extending a residence permit or long-stay visa to a third-country national who is the subject of an alert on return entered by another Member State that is accompanied by an entry ban, the Member States involved shall consult each other through the exchange of supplementary information, in accordance with the following rules:
(a)
the granting Member State shall consult the issuing Member State prior to granting or extending the residence permit or long-stay visa;
(b)
the issuing Member State shall reply to the consultation request within 10 calendar days;
(c)
the absence of a reply by the deadline referred to in point (b) shall mean that the issuing Member State does not object to the granting or extending of the residence permit or long-stay visa;
(d)
when making the relevant decision, the granting Member State shall take into account the reasons for the decision of the issuing Member State and shall consider, in accordance with national law, any threat to public policy or to public security which the presence of the third-country national in question on the territory of the Member States may pose;
(e)
the granting Member State shall notify the issuing Member State of its decision; and
(f)
where the granting Member State notifies the issuing Member State that it intends to grant or extend the residence permit or long-stay visa or that it has decided to do so, the issuing Member State shall delete the alert on return.
The final decision on whether to grant a residence permit or long-stay visa to a third-country national rests with the granting Member State.
2.   Where a Member State considers granting or extending a residence permit or long-stay visa to a third-country national who is the subject of an alert on return entered by another Member State which is not accompanied by an entry ban, the granting Member State shall inform without delay the issuing Member State that it intends to grant or has granted a residence permit or a long-stay visa. The issuing Member State shall delete the alert on return without delay.
Article 10
Prior consultation before entering an alert on return
Where a Member State has issued a return decision in accordance with Article 6(2) of Directive 2008/115/EC and considers entering an alert on return concerning a third-country national who is the holder of a valid residence permit or long-stay visa granted by another Member State, the Member States involved shall consult each other, through the exchange of supplementary information, in accordance with the following rules:
(a)
the Member State that has taken the return decision shall inform the granting Member State of the decision;
(b)
the information exchanged under point (a) shall include sufficient detail on the reasons for the return decision;
(c)
on the basis of the information provided by the Member State that has taken the return decision, the granting Member State shall consider whether there are reasons for withdrawing the residence permit or long-stay visa;
(d)
when making the relevant decision, the granting Member State shall take into account the reasons for the decision of the Member State that has taken the return decision and shall consider, in accordance with national law, any threat to public policy or to public security which the presence of the third-country national in question on the territory of the Member States may pose;
(e)
within 14 calendar days of receipt of the request for consultation the granting Member State shall notify the Member State that has taken the return decision of its decision or, where it has been impossible for the granting Member State to take a decision within that period, shall make a reasoned request to extend exceptionally the time period for its response for a maximum of a further 12 calendar days;
(f)
where the granting Member State notifies the Member State that has taken the return decision that it is maintaining the residence permit or long-stay visa, the Member State that has taken the return decision shall not enter the alert on return.
Article 11
A posteriori consultation after entering an alert on return
Where it emerges that a Member State has entered an alert on return concerning a third-country national who is the holder of a valid residence permit or long-stay visa granted by another Member State, the issuing Member State may decide to withdraw the return decision. In the case of such withdrawal, it shall immediately delete the alert on return. However, where the issuing Member State decides to maintain the return decision issued in accordance with Article 6(2) of Directive 2008/115/EC, the Member States involved shall consult each other, through the exchange of supplementary information, in accordance with the following rules:
(a)
the issuing Member State shall inform the granting Member State of the return decision;
(b)
the information exchanged under point (a) shall include sufficient detail on the reasons for the alert on return;
(c)
on the basis of the information provided by the issuing Member State, the granting Member State shall consider whether there are reasons for withdrawing the residence permit or long-stay visa;
(d)
when making its decision, the granting Member State shall take into account the reasons for the decision of the issuing Member State and shall consider, in accordance with national law, any threat to public policy or to public security which the presence of the third-country national in question on the territory of the Member States may pose;
(e)
within 14 calendar days of receipt of the request for consultation the granting Member State shall notify the issuing Member State of its decision or, where it has been impossible for the granting Member State to take a decision within that period, shall make a reasoned request to extend exceptionally the time period for its response for a maximum of a further 12 calendar days;
(f)
where the granting Member State notifies the issuing Member State that it is maintaining the residence permit or long-stay visa, the issuing Member State shall immediately delete the alert on return.
Article 12
Consultation in the case of a hit concerning a third-country national holding a valid residence permit or long-stay visa
Where a Member State encounters a hit on an alert on return entered by a Member State concerning a third-country national who is the holder of a valid residence permit or long-stay visa granted by another Member State, the Member States involved shall consult each other through the exchange of supplementary information, in accordance with the following rules:
(a)
the executing Member State shall inform the issuing Member State of the situation;
(b)
the issuing Member State shall initiate the procedure laid down in Article 11;
(c)
the issuing Member State shall notify the executing Member State of the outcome following the consultation.
Article 13
Statistics on exchange of information
Member States shall provide statistics to eu-LISA on an annual basis on the exchanges of information carried out in accordance with Articles 8 to 12 and on the instances in which the deadlines provided for in those Articles were not met.
Article 14
Deletion of alerts
1.   In addition to Articles 6 and 8 to 12, alerts on return shall be deleted when the decision on the basis of which the alert was entered has been withdrawn or annulled by the competent authority. Alerts on return shall also be deleted when the third-country national concerned can demonstrate that he or she has left the territory of the Member States in compliance with the respective return decision.
2.   Alerts on return concerning a person who has acquired citizenship of a Member State or of any State whose nationals are beneficiaries of the right of free movement under Union law shall be deleted as soon as the issuing Member State becomes aware, or is so informed pursuant to Article 44 of Regulation (EU) 2018/1861 that the person in question has acquired such citizenship.
Article 15
Transfer of personal data to third countries for the purpose of return
1.   By way of derogation from Article 50 of Regulation (EU) 2018/1861, the data referred to in points (a), (b), (c), (d), (e), (f), (g), (h), (q), (r), (s), (t), (u), (v) and (w) of Article 4(1) of this Regulation and the related supplementary information may be transferred or made available to a third country with the agreement of the issuing Member State.
2.   The transfer of the data to a third country shall be carried out in accordance with the relevant provisions of Union law, in particular provisions on protection of personal data, including Chapter V of Regulation (EU) 2016/679, with readmission agreements where applicable, and with the national law of the Member State transferring the data.
3.   The transfers of data to a third country shall take place only when the following conditions are met:
(a)
the data is transferred or made available solely for the purpose of identification of, and issuance of an identification or travel document to, an illegally staying third-country national in view of his or her return;
(b)
the third-country national concerned has been informed that his or her personal data and supplementary information may be shared with the authorities of a third country.
4.   Transfers of personal data to third countries pursuant to this Article shall not prejudice the rights of applicants for and beneficiaries of international protection, in particular as regards non-refoulement, and the prohibition on disclosing or obtaining information set out in Article 30 of Directive 2013/32/EU of the European Parliament and of the Council (24).
5.   Data processed in SIS and the related supplementary information exchanged pursuant to this Regulation shall not be made available to a third country where the enforcement of the return decision was suspended or postponed, including as a result of the lodging of an appeal, on grounds that such return would violate the principle of non-refoulement.
6.   Application of Regulation (EU) 2016/679, including with regard to the transfer of personal data to third countries pursuant to this Article, and in particular the use, proportionality and necessity of transfers based on point (d) of Article 49(1) of that Regulation, shall be subject to monitoring by the independent supervisory authorities referred to in Article 51(1) of that Regulation.
Article 16
Statistics
eu-LISA shall produce daily, monthly and annual statistics, both for each Member State and in aggregate, on the number of alerts on return entered into SIS. The statistics shall include the data referred to in point (y) of Article 4(1), the number of notifications referred to in Article 7(1) and the number of alerts on return that have been deleted. eu-LISA shall produce statistics on the data provided by the Member States in accordance with Article 6(3) and Article 13. The statistics shall not contain any personal data.
Those statistics shall be included in the annual statistical report provided for in Article 60(3) of Regulation (EU) 2018/1861.
Article 17
Competent authorities having a right to access data in SIS
1.   Access to data in SIS and the right to search such data shall be reserved to the national competent authorities referred to in Article 34(1), (2) and (3) of Regulation (EU) 2018/1861.
2.   Europol shall within its mandate have the right to access and search data in SIS in accordance with Article 35 of Regulation (EU) 2018/1861 for the purpose of supporting and strengthening action by the competent authorities of the Member States and their mutual cooperation in preventing and combating migrant smuggling and facilitation of irregular migration.
3.   Members of the teams referred to in points (8) and (9) of Article 2 of Regulation (EU) 2016/1624 shall within their mandate have the right to access and search data in SIS in accordance with Article 36 of Regulation (EU) 2018/1861 for the purpose of carrying out border checks, border surveillance and return operations through the technical interface set up and maintained by the European Border and Coast Guard Agency.
Article 18
Evaluation
The Commission shall evaluate the application of this Regulation within two years of the date of the start of its application. This evaluation shall include an assessment of the possible synergies between this Regulation and Regulation (EU) 2017/2226 of the European Parliament and of the Council (25).
Article 19
Applicability of the provisions of Regulation (EU) 2018/1861
Insofar as not established in this Regulation, the entry, processing and updating of alerts, the provisions on responsibilities of the Member States and eu-LISA, the conditions concerning access and the review period for alerts, data processing, data protection, liability and monitoring and statistics, as laid down in Articles 6 to 19, Article 20(3) and (4), Articles 21, 23, 32, 33, 34(5) and 38 to 60 of Regulation (EU) 2018/1861, shall apply to data entered and processed in SIS in accordance with this Regulation.
Article 20
Entry into force
This Regulation shall enter into force on the twentieth day following its publication in the Official Journal of the European Union.
It shall apply from the date set by the Commission in accordance with Article 66(2) of Regulation (EU) 2018/1861.
This Regulation shall be binding in its entirety and directly applicable in the Member States in accordance with the Treaties.
Done at Brussels, 28 November 2018.
For the European Parliament
The President
A. TAJANI
For the Council
The President
K. EDTSTADLER
(1)  Position of the European Parliament of 24 October 2018 (not yet published in the Official Journal) and decision of the Council of 19 November 2018.
(2)  Directive 2008/115/EC of the European Parliament and of the Council of 16 December 2008 on common standards and procedures in Member States for returning illegally staying third-country nationals (OJ L 348, 24.12.2008, p. 98).
(3)  Regulation (EU) 2018/1861 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, and amending the Convention implementing the Schengen Agreement, and amending and repealing Regulation (EC) No 1987/2006 (see page 14 of this Official Journal).
(4)  Regulation (EU) 2018/1862 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA, and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EU (see page 56 of this Official Journal).
(5)  Regulation (EU) 2016/399 of the European Parliament and of the Council of 9 March 2016 on a Union Code on the rules governing the movement of persons across borders (Schengen Borders Code) (OJ L 77, 23.3.2016, p. 1).
(6)  Directive (EU) 2017/541 of the European Parliament and of the Council of 15 March 2017 on combating terrorism and replacing Council Framework Decision 2002/475/JHA and amending Council Decision 2005/671/JHA (OJ L 88, 31.3.2017, p. 6).
(7)  Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).
(8)  Regulation (EU) 2016/794 of the European Parliament and of the Council of 11 May 2016 on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing and repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA and 2009/968/JHA (OJ L 135, 24.5.2016, p. 53).
(9)  Regulation (EU) 2016/1624 of the European Parliament and of the Council of 14 September 2016 on the European Border and Coast Guard and amending Regulation (EU) 2016/399 of the European Parliament and of the Council and repealing Regulation (EC) No 863/2007 of the European Parliament and of the Council, Council Regulation (EC) No 2007/2004 and Council Decision 2005/267/EC (OJ L 251, 16.9.2016, p. 1).
(10)  Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011 (OJ L 295, 21.11.2018, p. 99).
(11)  Council Decision 2000/365/EC of 29 May 2000 concerning the request of the United Kingdom of Great Britain and Northern Ireland to take part in some of the provisions of the Schengen acquis (OJ L 131, 1.6.2000, p. 43).
(12)  Council Decision 2002/192/EC of 28 February 2002 concerning Ireland's request to take part in some of the provisions of the Schengen acquis (OJ L 64, 7.3.2002, p. 20).
(13)  OJ L 176, 10.7.1999, p. 36.
(14)  Council Decision 1999/437/EC of 17 May 1999 on certain arrangements for the application of the Agreement concluded by the Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning the association of those two States with the implementation, application and development of the Schengen acquis (OJ L 176, 10.7.1999, p. 31).
(15)  OJ L 53, 27.2.2008, p. 52.
(16)  Council Decision 2008/146/EC of 28 January 2008 on the conclusion, on behalf of the European Community, of the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation's association with the implementation, application and development of the Schengen acquis (OJ L 53, 27.2.2008, p. 1).
(17)  OJ L 160, 18.6.2011, p. 21.
(18)  Council Decision 2011/350/EU of 7 March 2011 on the conclusion, on behalf of the European Union, of the Protocol between the European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation's association with the implementation, application and development of the Schengen acquis, relating to the abolition of checks at internal borders and movement of persons (OJ L 160, 18.6.2011, p. 19).
(19)  Council Decision 2010/365/EU of 29 June 2010 on the application of the provisions of the Schengen acquis relating to the Schengen Information System in the Republic of Bulgaria and Romania (OJ L 166, 1.7.2010, p. 17).
(20)  Council Decision (EU) 2018/934 of 25 June 2018 on the putting into effect of the remaining provisions of the Schengen acquis relating to the Schengen Information System in the Republic of Bulgaria and Romania (OJ L 165, 2.7.2018, p. 37).
(21)  Council Decision (EU) 2017/733 of 25 April 2017 on the application of the provisions of the Schengen acquis relating to the Schengen Information System in the Republic of Croatia (OJ L 108, 26.4.2017, p. 31).
(22)  Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (OJ L 8, 12.1.2001, p. 1).
(23)  OJ L 239, 22.9.2000, p. 19.
(24)  Directive 2013/32/EU of the European Parliament and of the Council of 26 June 2013 on common procedures for granting and withdrawing international protection (OJ L 180, 29.6.2013, p. 60).
(25)  Regulation (EU) 2017/2226 of the European Parliament and of the Council of 30 November 2017 establishing an Entry/Exit System (EES) to register entry and exit data and refusal of entry data of third-country nationals crossing the external borders of the Member States and determining the conditions for access to the EES for law enforcement purposes, and amending the Convention implementing the Schengen Agreement and Regulations (EC) No 767/2008 and (EU) No 1077/2011 (OJ L 327, 9.12.2017, p. 20).

Output:
A strengthened Schengen Information System
A strengthened Schengen Information System
SUMMARY OF:
Regulation (EU) 2018/1860 on the use of the Schengen Information System (SIS) for the return of illegally staying third-country nationals
Regulation (EU) 2018/1861 on the establishment, operation and use of the SIS in the field of border checks, and amending the Convention implementing the Schengen Agreement
Regulation (EU) 2018/1862 on the establishment, operation and use of the SIS in the field of police cooperation and judicial cooperation in criminal matters
WHAT IS THE AIM OF THESE REGULATIONS?

The Schengen Information System (SIS), created in 1995 following the abolition of internal border controls in the EU, is a large-scale database supporting external border control and law enforcement cooperation between member countries of the Schengen Agreement.
The 3 regulations are designed to strengthen the existing measures in SIS II — established in 2006 and operational from 2013 — particularly in light of the new migration and security challenges. They will replace the current legislation laid down in Regulations (EC) No 1986/2006 and (EC) No 1987/2006, and Decision 2007/533/JHA.
This summary describes how the SIS will operate once the 3 new regulations are fully in force.
KEY POINTS
Architecture
SIS consists of:
a central system (Central SIS) with a technical support function (CS-SIS), containing a database (SIS database) performing technical supervision and administrative tasks, and a backup CS-SIS;a uniform national interface (NI-SIS) in each country which members use to enter, update, delete and search SIS data;a national system (N.SIS) in each country to communicate with Central SIS, including at least one national or shared backup N.SIS. It is not possible to search data files in another N.SIS, unless the countries concerned have agreed to share the file;
a communication infrastructure between CS-SIS, backup CS-SIS and NI-SIS provides an encrypted virtual network for SIS data and their exchange between SIRENE bureaux.
The European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA):
implements technical solutions to strengthen the uninterrupted availability of SIS;
in exceptional circumstances, may develop an additional copy of the SIS database;
must present a report no later than 28 December 2019 on options for technical solutions, containing an independent impact assessment and cost-benefit analysis;
publishes a list of the N.SIS offices and SIRENE Bureaux.
Procedural rules state:
alerts* should remain in SIS only as long as required for their specific purpose and be deleted when they achieve their purpose;
alerts must be reviewed within defined periods. The member country may then decide to prolong them, otherwise they are automatically deleted. The review periods are 5 years: persons wanted for arrest for surrender or extradition purposes and missing persons who may, or may not, need to be placed under protection3 years: people sought to assist with a judicial procedure and unknown wanted persons1 year: children at risk, vulnerable persons who need to be protected from travelling and persons for discreet, inquiry or specific checks10 years: objects for discreet inquiry or specific checks or for seizure or use as evidence in criminal proceedings;
categories of data to be entered into the system. These are designed to help end-users take decisions quickly. They include minimum requirements (surname, date of birth, reason for the alert and action to be taken) and other data, such as type of offence, photographic and dactyloscopic* information, if available;
use of biometric and dactyloscopic data must respect EU law and fundamental rights, and meet minimum quality standards and technical specifications;
a case must be adequate, relevant and sufficiently important to warrant an SIS alert, for example, an alert linked to a terrorist offence meets these criteria;
only the issuing member country may modify, add to, correct, update or delete data in SIS;
a country which considers acting on an alert would be incompatible with its national law, international obligations or essential interests may attach a flag* to the alert. This indicates it will not take any action on its territory.
Costs:
the EU budget covers the operational, maintenance and development costs of Central SIS and the communication infrastructure;
Schengen member countries cover the operational, maintenance and development costs of their own N.SIS.
Alert categories per regulation
Regulation (EU) 2018/1860 strengthens enforcement of the EU’s return policy and reduces incentives for illegal immigration into the EU:
it lays down common conditions and procedures for entering and processing alerts and exchanging supplementary information on non-EU nationals subject to return decisions*;
it requires national authorities to enter alerts as soon as a return decision is taken;
it establishes harmonised procedures on categories of data to be included in the alertverification if a return decision has been complied with and, if not, the follow-up between the relevant authoritiesretention and deletion of alerts to ensure there is no delay between the departure of a non-EU national and the activation of an entry bancompulsory consultation between national authorities before granting or extending a residence permit or long-stay visa for a non-EU national who may be the subject of a return alert in another EU countryentering an alert on a return decision if the person is legally staying elsewhere in the EU.
Regulation (EU) 2018/1861 covers the use of SIS for entry bans and border checks:
it establishes the conditions and procedures for entering and processing alerts and exchange of supplementary information* on non-EU nationals refused entry or the right to stay in the EU;
it introduces harmonised procedures on categories of data to be included in the alertcompulsory entry of an alert when a non-EU national is refused entry or the right to stay because they pose a security threat or are subject to a restrictive order preventing entry into, or transit through, an EU countrynon-EU nationals with the right of free movement within the EUmandatory consultation between national authorities before granting or extending a residence permit or long-stay visa to a non-EU national refused the right of entry or stay in another EU country;
it guarantees non-EU nationals the right to be informed in writing if they are the subject of an alert.
Regulation 2018/1862 improves and extends the use of SIS for cooperation between police and judicial authorities:
it establishes the conditions and procedures for entering and processing alerts in the SIS on people and objects, and for exchanging supplementary information and data in police and judicial cooperation on criminal matters;
it covers procedures on alerts on: people wanted for arrest, for surrender or extradition purposes;missing persons;vulnerable persons who need to be prevented from travelling, either for their own protection or to prevent a threat to public order or security;children at risk, notably of abduction, trafficking or becoming involved in terrorism;individuals being sought to assist with a judicial procedure as witnesses or because they have been summoned in connection with criminal proceedings;unknown wanted persons whose identity is being sought;discreet or specific checks and inquiries to prevent, detect, investigate or prosecute criminal offences, execute a criminal sentence or prevent threats to public security;items to be seized or used as evidence in criminal proceedings, especially readily identifiable objects such as cars, boats, aircraft, firearms, identity documents and banknotes.
Data rightsIndividuals have the right to:
know whether or not their personal data are being processed, for what purposes and under what conditions;
lodge a complaint with a supervisory authority;
correction of inaccurate personal data without undue delay;
erasure of personal data if their use is no longer necessary or these have been unlawfully processed;
take action to access, rectify, erase, obtain information or compensation for an alert that concerns them;
compensation from a member country for any material or non-material damage they suffer from unlawful processing of their personal data.
SIS member governments:
are committed to enforcing rulings on data protection rights;
report annually to the European Data Protection Board on the number of requests they receive to access data and correct inaccuracies, and the volume of court cases and their outcome.
Independent supervisory authorities monitor the legality of national processing of personal data in SIS; the European Data Protection Supervisor set up under Regulation (EU) 2018/1725 performs the same role for eu-LISA. The two cooperate to ensure coordinated supervision of SIS.
Data processed in SIS and related supplementary information may not be transferred or made available to non-EU countries or international organisations.
Regulation (EU) 2018/1725 applies to personal data processed by eu-LISA, the European Border and Coast Guard Agency and Eurojust.
Regulation (EU) 2016/679 and Directive (EU) 2016/680 apply to personal data processed by national competent authorities and services.
The following have access to data in SIS:
National authorities responsible for border control, police and customs checks;prevention, detection, investigation or prosecution of terrorist acts or other serious criminal offences;decisions, including on residence permits and long-stay visas, on the entry, stay and return of non-EU nationals;security checks on non-EU nationals applying for international protection;naturalisation decisions;public prosecutions in criminal proceedings and judicial inquiries;issuing registration certificates for vehicles, boats, aircraft and firearms;
the EU agencies below have the right to access and search for the data in SIS they require to carry out their responsibilities. They inform the issuing member country when a search reveals the existence of an alert. They may not connect parts of SIS or transfer any of its data to their own system Europol: may access all data, not just some as previously. SIS member countries must inform the law enforcement agency of any hits or alerts relating to terrorist offences;Eurojust, which handles judicial cooperation of criminal matters;European Border and Coast Guard, teams involved in return-related tasks and migration management support teams.
The European Commission evaluates every 5 years the use these agencies make of SIS.
ResponsibilitiesEach SIS member country:
ensures the data are accurate, up-to-date and entered and stored in SIS lawfully, and respect general data processing rules;
sets up, operates, maintains and develops its N.SIS, according to common standards, protocols and technical procedures, and connects it to NI-SIS;
ensures the uninterrupted availability of SIS data to end-users;
transmits its alerts through its N.SIS;
designates an N.SIS Office with central responsibility to ensure the smooth operation and security of its N.SIS, access of the competent authorities to the SIS, overall compliance with the regulation and appropriate availability of the SIS for all end-users;
appoints a national authority (the SIRENE Bureau) as a single contact point operational 24/7 for the exchange and availability of all supplementary information on alerts and to facilitate follow-up action;
adopts security, business continuity and disaster recovery plans to protect data and prevent unauthorised access;
applies professional secrecy and confidentiality rules, including close monitoring of external contractors. Private companies and organisations are banned from operational management of the N.SIS;
keeps electronic logs, normally deleted after 3 years, on alerts, access and exchange of personal data to check whether the search was lawful and ensure data integrity and security;
operates a national SIS training programme for staff with access to SIS on data security, fundamental rights, including data protection, and data processing rules and regulations.
The Commission:
adopts implementing and delegated acts on technical aspects of SIS and updates these as necessary;
under Regulation (EU) No 1053/2013, has an overall coordinating role for the evaluation and monitoring mechanism it implements with EU governments to ensure Schengen rules are fully applied nationally. This includes evaluation of the SIS;
will submit a report to the European Parliament and EU governments by 28 December 2019, and every year thereafter, until decides on the date for SIS operations to start, on the state of play of preparations for full implementation of the updated SIS regulation 2018/1862;
carries out an overall evaluation of Central SIS, the supplementary information exchange between national authorities, including an assessment of the automated fingerprint identification system (AFIS) and the SIS information campaigns 3 years after the regulation comes into force and every 4 years thereafter.
eu-LISA is responsible for:
Central SIS: its operational management, including quality checks on the data it contains, and all the tasks necessary to ensure it functions 24/7 every day of the year;
communication infrastructure: key aspects, notably supervision, security, coordination between member countries and providers, and budgetary and contractual issues;
SIRENE Bureaux: coordinating, managing and supporting testing activities, maintaining and updating technical specifications on supplementary information exchange between the Bureaux and the communication infrastructure, and managing technical change;
adopting the necessary measures to protect data and prevent unauthorised access or use, including security, business continuity and disaster recovery plans for Central SIS and the communication infrastructure;
applying professional secrecy and confidentiality rules, and maintenance of electronic logs on the same conditions as national authorities;
making publicly available via the EU’s Official Journal a list of national authorities authorised to search for data in SIS;
producing daily, monthly and annual statistics on the number of records per category of alerts, omitting any personal data. Its reports are made public.
Information campaign
The Commission, in cooperation with supervisory authorities and the European Data Protection Supervisor, runs the campaign. This is launched when the legislation comes into force and is repeated at regular intervals, to inform the public on: the aims of SIS;the data it holds;the authorities with access to it;individuals’ data rights.
The Commission maintains a publicly available website with all relevant information on SIS.
EU countries, working with their supervisory authorities, must inform the public about SIS.
FROM WHEN DO THE REGULATIONS APPLY?

They shall apply gradually and in entirety they shall be fully operational byno later than 28 December 2021. The date is to be decided by the Commission after the verification that the following conditions have been met:
implementing acts have been adopted;
national authorities have made the necessary arrangements to process SIS data and the exchange of supplementary information;
eu-LISA has successfully completed all its testing requirements.
BACKGROUND
While based on different pieces of legislation, the SIS is a single system for sharing data and requests among its members.
It is the most widely used and largest security and border management information sharing system in Europe. In 2018, it contained some 82.2 million records, had been accessed more than 6.1 billion times and secured 267,239 hits.
It operates in 30 European countries: all EU members apart from Cyprus and Ireland, and in Iceland, Liechtenstein, Norway and Switzerland.

Communication from the Commission — COVID-19 Guidance on the implementation of the temporary restriction on non-essential travel to the EU, on the facilitation of transit arrangements for the repatriation of EU citizens, and on the effects on visa policy
KEY TERMS

Alert: a set of data enabling authorities to identify a person or object and act accordingly.
Dactyloscopic data: data on palm and fingerprints.
Flag: suspension of the validity of an alert at national level.
Return decisions: judicial or administrative decision on a non-EU national considered to be staying illegally who should return to their home country.
Supplementary information: information not forming part of the alert data in SIS, but connected to it.
MAIN DOCUMENTS

Regulation (EU) 2018/1860 of the European Parliament and of the Council of 28 November 2018 on the use of the Schengen Information System for the return of illegally staying third-country nationals(OJ L 312, 7.12.2018, pp. 1-13)
Regulation (EU) 2018/1861 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, and amending the Convention implementing the Schengen Agreement, and amending and repealing Regulation (EC) No 1987/2006 (OJ L 312, 7.12.2018, pp. 14-55)
Successive amendments to Regulation (EU) 2018/1861 have been incorporated into the original document. This consolidated version is of documentary value only.
Regulation (EU) 2018/1862 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA, and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EU (OJ L 312, 7.12.2018, pp. 56-106)
See consolidated version.
RELATED DOCUMENTS

Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011 (OJ L 295, 21.11.2018, pp. 99-137)
Directive (EU) 2017/541 of the European Parliament and of the Council of 15 March 2017 on combating terrorism and replacing Council Framework Decision 2002/475/JHA and amending Council Decision 2005/671/JHA (OJ L 88, 31.3.2017, pp. 6-21)
Regulation (EU) 2016/1624 of the European Parliament and of the Council of 14 September 2016 on the European Border and Coast Guard and amending Regulation (EU) 2016/399 of the European Parliament and of the Council and repealing Regulation (EC) No 863/2007 of the European Parliament and of the Council, Council Regulation (EC) No 2007/2004 and Council Decision 2005/267/EC (OJ L 251, 16.9.2016, pp. 1-76)
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, pp. 1-88)
See consolidated version.
Regulation (EU) 2016/399 of the European Parliament and of the Council of 9 March 2016 on a Union Code on the rules governing the movement of persons across borders (Schengen Borders Code) (OJ L 77, 23.3.2016, pp. 1-52)
See consolidated version.
Council Regulation (EU) No 1053/2013 of 7 October 2013 establishing an evaluation and monitoring mechanism to verify the application of the Schengen acquis and repealing the Decision of the Executive Committee of 16 September 1998 setting up a Standing Committee on the evaluation and implementation of Schengen (OJ L 295, 6.11.2013, pp. 27-37)
Directive 2008/115/EC of the European Parliament and of the Council of 16 December 2008 on common standards and procedures in Member States for returning illegally staying third-country nationals (OJ L 348, 24.12.2008, pp. 98-107)
The Schengen acquis as referred to in Article 1(2) of Council Decision 1999/435/EC of 20 May 1999 (OJ L 239, 22.9.2000, pp. 1-473)
last update 04.05.2020