Home

Council Decision 2007/533/JHA of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System (SIS II)

Council Decision 2007/533/JHA of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System (SIS II)

CHAPTER I GENERAL PROVISIONS

Article 1 Establishment and general purpose of SIS II

1.

A second generation Schengen Information System (SIS II) is hereby established.

2.

The purpose of SIS II shall be, in accordance with this Decision, to ensure a high level of security within the area of freedom, security and justice of the European Union including the maintenance of public security and public policy and the safeguarding of security in the territories of the Member States, and to apply the provisions of Title IV of Part Three of the EC Treaty relating to the movement of persons in their territories, using information communicated via this system.

Article 2 Scope

1.

This Decision establishes the conditions and procedures for the entry and processing in SIS II of alerts on persons and objects, the exchange of supplementary information and additional data for the purpose of police and judicial cooperation in criminal matters.

2.

This Decision also lays down provisions on the technical architecture of SIS II, the responsibilities of the Member States and of the management authority referred to in Article 15, general data processing, the rights of the persons concerned and liability.

Article 3 Definitions

1.

For the purposes of this Decision, the following definitions shall apply:

  1. ‘alert’ means a set of data entered in SIS II allowing the competent authorities to identify a person or an object with a view to taking specific action;

  2. ‘supplementary information’ means information not stored in SIS II, but connected to SIS II alerts, which is to be exchanged:

    1. in order to allow Member States to consult or inform each other when entering an alert;

    2. following a hit in order to allow the appropriate action to be taken;

    3. when the required action cannot be taken;

    4. when dealing with the quality of SIS II data;

    5. when dealing with the compatibility and priority of alerts;

    6. when dealing with rights of access;

  3. ‘additional data’ means the data stored in SIS II and connected with SIS II alerts which are to be immediately available to the competent authorities where a person in respect of whom data has been entered in SIS II is located as a result of searches made therein;

  4. ‘personal data’ means any information relating to an identified or identifiable natural person (data subject); an identifiable person is one who can be identified, directly or indirectly;

  5. ‘processing of personal data’ (processing) means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

2.

Any reference in this Decision to provisions of the Framework Decision 2002/584/JHA shall be construed as including the corresponding provisions of Agreements concluded between the European Union and third countries on the basis of Articles 24 and 38 of the EU Treaty for the purpose of surrender of persons on the basis of an arrest warrant which provide for the transmission of such an arrest warrant via the Schengen Information System.

Article 4 Technical architecture and ways of operating the SIS II

1.

SIS II shall be composed of:

  1. a central system (Central SIS II) composed of:

    • a technical support function (‘CS-SIS’) containing a database, the ‘SIS II database’,

    • a uniform national interface (NI-SIS);

  2. a national system (N.SIS II) in each of the Member States, consisting of the national data systems which communicate with Central SIS II. An N.SIS II may contain a data file (a ‘national copy’), containing a complete or partial copy of the SIS II database;

  3. a communication infrastructure between CS-SIS and NI-SIS (the Communication Infrastructure) that provides an encrypted virtual network dedicated to SIS II data and the exchange of data between SIRENE Bureaux as referred to in Article 7(2).

2.

SIS II data shall be entered, updated, deleted and searched via the various N.SIS II systems. A national copy shall be available for the purpose of carrying out automated searches in the territory of each of the Member States using such a copy. It shall not be possible to search the data files of other Member States' N.SIS II.

3.

CS-SIS, which performs technical supervision and administration functions, shall be located in Strasbourg (France) and a backup CS-SIS, capable of ensuring all functionalities of the principal CS-SIS in the event of failure of this system, shall be located in Sankt Johann im Pongau (Austria).

4.

CS-SIS shall provide the services necessary for the entry and processing of SIS II data, including searches in the SIS II database. For the Member States which use a national copy CS-SIS shall:

  1. provide on-line update of the national copies;

  2. ensure synchronisation of and consistency between the national copies and the SIS II database;

  3. provide the operation for initialisation and restoration of the national copies.

Article 5 Costs

CHAPTER II RESPONSIBILITIES OF THE MEMBER STATES

Article 6 National systems

Article 7 N.SIS II Office and SIRENE Bureau

Article 8 Exchange of supplementary information

Article 9 Technical compliance

Article 10 Security – Member States

Article 11 Confidentiality – Member States

Article 12 Keeping of records at national level

Article 13 Self-monitoring

Article 14 Staff training

CHAPTER III RESPONSIBILITIES OF THE MANAGEMENT AUTHORITY

Article 15 Operational management

Article 16 Security

Article 17 Confidentiality – Management Authority

Article 18 Keeping of records at central level

Article 19 Information campaign

CHAPTER IV CATEGORIES OF DATA AND FLAGGING

Article 20 Categories of data

Article 21 Proportionality

Article 22 Specific rules for photographs and fingerprints

Article 23 Requirement for an alert to be entered

Article 24 General provisions on flagging

Article 25 Flagging related to alerts for arrest for surrender purposes

CHAPTER V ALERTS IN RESPECT OF PERSONS WANTED FOR ARREST FOR SURRENDER OR EXTRADITION PURPOSES

Article 26 Objectives and conditions for issuing alerts

Article 27 Additional data on persons wanted for arrest for surrender purposes

Article 28 Supplementary information on persons wanted for arrest for surrender purposes

Article 29 Supplementary information on persons wanted for arrest for extradition purposes

Article 30 Conversion of alerts on persons wanted for arrest for surrender purposes or extradition purposes

Article 31 Execution of action based on an alert on a person wanted for arrest with a view to surrender or extradition

CHAPTER VI ALERTS ON MISSING PERSONS

Article 32 Objectives and conditions for issuing alerts

Article 33 Execution of action based on an alert

CHAPTER VII ALERTS ON PERSONS SOUGHT TO ASSIST WITH A JUDICIAL PROCEDURE

Article 34 Objectives and conditions for issuing alerts

Article 35 Execution of the action based on an alert

CHAPTER VIII ALERTS ON PERSONS AND OBJECTS FOR DISCREET CHECKS OR SPECIFIC CHECKS

Article 36 Objectives and conditions for issuing alerts

Article 37 Execution of the action based on an alert

CHAPTER IX ALERTS ON OBJECTS FOR SEIZURE OR USE AS EVIDENCE IN CRIMINAL PROCEEDINGS

Article 38 Objectives and conditions for issuing alerts

Article 39 Execution of the action based on an alert

CHAPTER X RIGHT TO ACCESS AND RETENTION OF ALERTS

Article 40 Authorities having a right to access alerts

Article 41 Access to SIS II data by Europol

Article 42 Access to SIS II data by Eurojust

Article 43 Scope of access

Article 44 Retention period of alerts on persons

Article 45 Retention period of alerts on objects

CHAPTER XI GENERAL DATA PROCESSING RULES

Article 46 Processing of SIS II data

Article 47 SIS II data and national files

Article 48 Information in case of non-execution of alert

Article 49 Quality of the data processed in SIS II

Article 50 Distinguishing between persons with similar characteristics

Article 51 Additional data for the purpose of dealing with misused identities

Article 52 Links between alerts

Article 53 Purpose and retention period of supplementary information

Article 54 Transfer of personal data to third parties

Article 55 Exchange of data on stolen, misappropriated, lost or invalidated passports with Interpol

CHAPTER XII DATA PROTECTION

Article 56 Processing of sensitive categories of data

Article 57 Application of the Council of Europe Data Protection Convention

Article 58 Right of access, correction of inaccurate data and deletion of unlawfully stored data

Article 59 Remedies

Article 60 Supervision of N.SIS II

Article 61 Supervision of the Management Authority

Article 62 Cooperation between national supervisory authorities and the European Data Protection Supervisor

Article 63 Data protection during the transitional period

CHAPTER XIII LIABILITY AND PENALTIES

Article 64 Liability

Article 65 Penalties

CHAPTER XIV FINAL PROVISIONS

Article 66 Monitoring and statistics

Article 67 Regulatory Committee

Article 68 Amendment of the provisions of the Schengen acquis

Article 69 Repeal

Article 70 Transitional period and budget

Article 71 Entry into force, applicability and migration