Commission Regulation (EU) No 566/2011Dangos y teitl llawn

(8) Annex XIV is amended as follows:

(a)

in point 2.1, the following is added:

‘Information on all parts of the vehicle, with which the vehicle, as identified by the vehicle identification number (VIN) and any additional criteria such as wheelbase, engine output, trim level or options, is equipped by the vehicle manufacturer and which can be replaced by spare parts offered by the vehicle manufacturer to its authorised repairers or dealers or third parties by means of reference to original equipment (OE) parts number, shall be made available in a database easily accessible to independent operators.

This database shall comprise the VIN, OE parts numbers, OE naming of the parts, validity attributes (valid-from and valid-to dates), fitting attributes and where applicable structuring characteristics.

The information on the database shall be regularly updated. The updates shall include in particular all modifications to individual vehicles after their production if this information is available to authorised dealers.’;

(b)

points 2.2 and 2.3 are replaced by the following:

‘2.2. Access to vehicle security features used by authorised dealers and repair shops shall be made available to independent operators under protection of security technology according to the following requirements:

(i)

data shall be exchanged ensuring confidentiality, integrity and protection against replay;

(ii)

the standard https//ssl-tls (RFC4346) shall be used;

(iii)

security certificates in accordance with ISO 20828 shall be used for mutual authentication of independent operators and manufacturers;

(iv)

the independent operator’s private key shall be protected by secure hardware.

The Forum on Access to Vehicle Information provided for by paragraph 9 of Article 13 will specify the parameters for fulfilling these requirements according to the state-of-the-art.

The independent operator shall be approved and authorised for this purpose on the basis of documents demonstrating that they pursue a legitimate business activity and have not been convicted of relevant criminal activity.

2.3. Reprogramming of control units of vehicles manufactured later than 31 August 2010 shall be conducted in accordance with either ISO 22900 or SAE J2534, regardless of the date of type approval. For the validation of the compatibility of the manufacturer-specific application and the vehicle communication interfaces (VCI) complying to ISO 22900 or SAE J2534, the manufacturer shall offer either a validation of independently developed VCIs or the information, and loan of any special hardware, required for a VCI manufacturer to conduct such validation himself. The conditions of Article 7(1) of Regulation (EC) No 715/2007 apply to fees for such validation or information and hardware.

For vehicles manufactured before 1 September 2010 the manufacturer may offer either full reprogramming in accordance with ISO 22900 or SAE J2534 or reprogramming via the sale or lease of its own proprietary tool. In the latter case independent operators must get access in a non-discriminatory, prompt and proportionate way, and the tool must be provided in a usable form. The provisions of Article 7 of Regulation (EC) No 715/2007 shall apply to fees for the access to these tools.’;

(c)

point 2.8 is replaced by the following:

‘2.8. Manufacturers shall establish fees for hourly, daily, monthly, annual and per-transaction access to their repair and maintenance information websites, which are reasonable and proportionate.’;