- Latest available (Revised)
- Original (As adopted by EU)
Regulation (EC) No 810/2009 of the European Parliament and of the Council of 13 July 2009 establishing a Community Code on Visas (Visa Code)
When the UK left the EU, legislation.gov.uk published EU legislation that had been published by the EU up to IP completion day (31 December 2020 11.00 p.m.). On legislation.gov.uk, these items of legislation are kept up-to-date with any amendments made by the UK since then.
Legislation.gov.uk publishes the UK version. EUR-Lex publishes the EU version. The EU Exit Web Archive holds a snapshot of EUR-Lex’s version from IP completion day (31 December 2020 11.00 p.m.).
There are currently no known outstanding effects for the Regulation (EC) No 810/2009 of the European Parliament and of the Council,
ANNEX X
.
Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.
Textual Amendments
The legal instrument shall:
enumerate the tasks to be carried out by the external service provider, in accordance with Article 43(6) of this Regulation;
indicate the locations where the external service provider is to operate and which consulate the individual application centre refers to;
list the services covered by the mandatory service fee;
instruct the external service provider to clearly inform the public that other charges cover optional services.
In relation to the performance of its activities, the external service provider shall, with regard to data protection:
prevent at all times any unauthorised reading, copying, modification or deletion of data, in particular during their transmission to the consulate of the Member State(s) competent for processing an application;
in accordance with the instructions given by the Member State(s) concerned, transmit the data:
electronically, in encrypted form, or
physically, in a secured way;
transmit the data as soon as possible:
in the case of physically transferred data, at least once a week,
in the case of electronically transferred encrypted data, at the latest at the end of the day of their collection,
ensure appropriate means of tracking individual application files to and from the consulate;
delete the data at the latest seven days after their transmission and ensure that only the name and contact details of the applicant for the purposes of the appointment arrangements, as well as the passport number, are kept until the return of the passport to the applicant and deleted five days thereafter;
ensure all the technical and organisational security measures required to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the cooperation involves the transmission of files and data to the consulate of the Member State(s) concerned, and all other unlawful forms of processing personal data;
process the data only for the purposes of processing the personal data of applicants on behalf of the Member State(s) concerned;
apply data protection standards at least equivalent to those set out in Regulation (EU) 2016/679;
provide applicants with the information required pursuant to Article 37 of the VIS Regulation.
In relation to the performance of its activities, the external service provider shall, with regard to the conduct of staff:
ensure that its staff are appropriately trained;
ensure that its staff in the performance of their duties:
receive applicants courteously,
respect the human dignity and integrity of applicants, do not discriminate against persons on grounds of sex, racial or ethnic origin, religion or belief, disability, age or sexual orientation, and
respect the rules of confidentiality; those rules shall also apply once members of staff have left their job or after suspension or termination of the legal instrument;
provide identification of the staff working for the external service provider at all times;
prove that its staff do not have criminal records and have the requisite expertise.
In relation to the verification of the performance of its activities, the external service provider shall:
provide for access by staff entitled by the Member State(s) concerned to its premises at all times without prior notice, in particular for inspection purposes;
ensure the possibility of remote access to its appointment system for inspection purposes;
ensure the use of relevant monitoring methods (e.g. test applicants; webcam);
ensure access, by the Member State's national data protection supervisory authority, to proof of data protection compliance, including reporting obligations, external audits and regular spot checks;
report in writing to the Member State(s) concerned without delay any security breaches or any complaints from applicants on data misuse or unauthorised access, and coordinate with the Member State(s) concerned in order to find a solution and give explanatory responses promptly to the complaining applicants.
In relation to general requirements, the external service provider shall:
act under the instructions of the Member State(s) competent for processing the application;
adopt appropriate anti-corruption measures (e.g. adequate staff remuneration; cooperation in the selection of staff members employed on the task; two-man-rule; rotation principle);
respect fully the provisions of the legal instrument, which shall contain a suspension or termination clause, in particular in the event of breach of the rules established, as well as a revision clause with a view to ensuring that the legal instrument reflects best practice.]
Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As adopted by EU): The original version of the legislation as it stood when it was first adopted in the EU. No changes have been applied to the text.
Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
This timeline shows the different versions taken from EUR-Lex before exit day and during the implementation period as well as any subsequent versions created after the implementation period as a result of changes made by UK legislation.
The dates for the EU versions are taken from the document dates on EUR-Lex and may not always coincide with when the changes came into force for the document.
For any versions created after the implementation period as a result of changes made by UK legislation the date will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. For further information see our guide to revised legislation on Understanding Legislation.
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
Click 'View More' or select 'More Resources' tab for additional information including: