Commission Implementing Regulation (EU) 2015/1998Show full title

6.8 SECURITY PROCEDURES FOR CARGO AND MAIL BEING CARRIED INTO THE UNION FROM THIRD COUNTRIES U.K.

6.8.1 Designation of air carriers U.K.

6.8.1.1 Any air carrier carrying cargo or mail from an airport in a third country not listed in Attachments 6-Fi or 6-Fii for transfer, transit or unloading at any airport falling within the scope of Regulation (EC) No 300/2008 shall be designated as an ‘Air Cargo or Mail Carrier operating into the Union from a Third Country Airport’ (ACC3) by one of the following authorities as appropriate: U.K.

(a)

by the appropriate authority of the Member State that issued the air carrier's Air Operator's Certificate;

(b)

by the appropriate authority of the Member State listed in the Annex to Commission Regulation (EC) No 748/2009(1), for air carriers that do not hold an Air Operator's Certificate issued by a Member State;

(c)

by the appropriate authority of the Member State where the air carrier has its major base of operations in the Union, or any other appropriate authority of the Union by agreement with that appropriate authority, for air carriers not holding an Air Operator's Certificate issued by a Member State and not listed in the Annex to Regulation (EC) No 748/2009.

6.8.1.2 The designation of an air carrier as ACC3 in respect of its cargo and mail operations from an airport for which ACC3 designation is required (hereafter, the ‘relevant cargo operations’) shall be based on: U.K.

(a)

the nomination of a person with overall responsibility on the air carrier's behalf for the implementation of cargo or mail security provisions in respect of the relevant cargo operation; and

(b)

an EU aviation security validation report confirming the implementation of security measures.

6.8.1.3 The appropriate authority shall allocate to the designated ACC3 a unique alphanumeric identifier in the standard format identifying the air carrier and the third country airport for which the air carrier has been designated to carry cargo or mail into the Union. U.K.

6.8.1.4 The designation shall be valid from the date the appropriate authority has entered the ACC3's details into the Union database on supply chain security, for a maximum period of five years. U.K.

6.8.1.5 An ACC3 listed on the Union database on supply chain security shall be recognised in all Member States for all operations from the third country airport into the Union. U.K.

6.8.2 EU aviation security validation for ACC3 U.K.

6.8.2.1 The EU aviation security validation in respect of an air carrier's relevant cargo operations shall consist of: U.K.

(a)

an examination of the air carrier's security programme ensuring its relevance and completeness in respect of all points set out in Attachment 6-G; and

(b)

verification of the implementation of aviation security measures in respect of the relevant cargo operations by using the checklist set out in Attachment 6-C3.

6.8.2.2 The EU aviation security validation's verification of the implementation shall be on-site, to one of the following degrees: U.K.

(1)

At the airport from which the air carrier has relevant cargo operations before ACC3 designation can be granted for that airport.

If the EU aviation security validation thereupon establishes the non-implementation of one or more of the objectives listed in the checklist set out in Attachment 6-C3, the appropriate authority shall not designate the air carrier as ACC3 for the relevant cargo operations without proof of the implementation of measures by the air carrier rectifying the deficiency identified.

(2)

At a representative number of airports with relevant cargo operations of an air carrier before ACC3 designation is granted for all airports with relevant cargo operations of that air carrier. The following conditions apply:

(a)

this option is requested by an air carrier which operates several relevant air cargo operations; and

(b)

the appropriate authority has verified that the air carrier applies an internal security quality assurance programme that is equivalent to EU aviation security validation; and

(c)

the representative number shall be at least 3 or 5 %, whichever is the higher, and all airports situated in a high risk origin; and

(d)

the appropriate authority has agreed to a roadmap that ensures EU aviation security validations for every year of the designation at additional airports for which ACC3 designation will be granted or until all airports are validated. Those validations shall each year be at least equal in number to those required in (c). The roadmap shall state the reasons underpinning the choice of additional airports; and

(e)

all ACC3 designations shall end on the same day; and

(f)

where one of the EU aviation security validations agreed under the roadmap establishes the non-implementation of one or more of the objectives listed in the checklist set out in Attachment 6-C3, the designating appropriate authority shall require proof of the implementation of measures rectifying the deficiency identified at that airport, and, depending on the seriousness of the deficiency, request:

• EU aviation security validation of all airports for which ACC3 designation is required in accordance with point 6.8.2.2.1 within a deadline set by the appropriate authority, or

• twice the number of the EU aviation security validations established under (d) per each of the remaining years of ACC3 designations.

6.8.2.3 The appropriate authority may accept the EU aviation security validation report of a third country entity for ACC3 designation in cases where that entity carries out the entire cargo operation, including loading into the hold of the aircraft, on behalf of the ACC3 and the EU aviation security validation report covers all these activities. U.K.

6.8.2.4 The appropriate authority may designate an air carrier as ACC3 for a limited period, ending on 30 June 2016 at the latest, in the case where an EU aviation security validation could not take place for objective reasons which are beyond the responsibility of the air carrier. Where such a designation is granted for a period of more than six months, the appropriate authority shall have verified that the air carrier applies an internal security quality assurance programme that is equivalent to EU aviation security validation. U.K.

6.8.2.5 The EU aviation security validation shall be recorded in a validation report consisting at least of the declaration of commitments as set out in Attachment 6-H1, the checklist set out in Attachment 6-C3 and a declaration by the EU aviation security validator as set out in Attachment 11-A. The EU aviation security validator shall submit the validation report to the appropriate authority and provide the validated air carrier with a copy. U.K.

6.8.3 Security controls for cargo and mail arriving from a third country U.K.

6.8.3.1 The ACC3 shall ensure that all cargo and mail carried for transfer, transit or unloading at a Union airport is screened, unless: U.K.

(a)

the required security controls have been applied to the consignment by an EU aviation security validated regulated agent and the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading; or

(b)

the required security controls have been applied to the consignment by an EU aviation security validated known consignor and the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading; or

(c)

the required security controls have been applied to the consignment by an account consignor under the responsibility of the ACC3 or of an EU aviation security validated regulated agent, the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading, and it is not carried on a passenger aircraft; or

(d)

the consignment is exempted from screening in accordance with point 6.1.1(d) and protected from unauthorised interference from the time that it became identifiable air cargo or identifiable air mail and until loading.

6.8.3.2 Cargo and mail carried into the Union shall be screened by one of the means and methods listed in point 6.2.1 to a standard sufficient to reasonably ensure that it contains no prohibited articles. U.K.

6.8.3.3 The ACC3 shall ensure in respect of: U.K.

(a)

transfer and transit cargo or mail that screening in accordance with point 6.8.3.2 or security controls have been applied by itself or by an EU aviation security validated entity at the point of origin or elsewhere in the supply chain and such consignments have been protected from unauthorised interference from the time that those security controls were applied and until loading; and

(b)

high risk cargo and mail that screening in accordance with point 6.7 has been applied by itself or by an EU aviation security validated entity at the point of origin or elsewhere in the supply chain, that such consignments have been labelled SHR and have been protected from unauthorised interference from the time that those security controls were applied and until loading.

6.8.3.4 The unique alphanumeric identifier of the ACC3 and the security status of the consignment as referred to in point 6.3.2.6(d) and issued by an EU aviation security validated regulated agent shall be indicated in the accompanying documentation, either in the form of an air waybill, equivalent postal documentation or in a separate declaration and either in an electronic format or in writing. U.K.

6.8.3.5 In the absence of a regulated agent referred to in point 6.8.4, the ACC3 or an air carrier arriving from a third country listed in Attachments 6-Fi or 6-Fii may issue the security status declaration. U.K.

6.8.4 Validation of regulated agents and known consignors U.K.

6.8.4.1 In order to become EU aviation security validated regulated agent or known consignor, third country entities shall be validated according to one of the following two options and be listed in the database of the ACC3(s) to which they directly deliver cargo or mail for carriage into the Union: U.K.

(a)

the ACC3's security programme shall set out details of security controls implemented on its behalf by third country entities from which it accepts cargo or mail directly for carriage into the Union. The EU aviation security validation of the ACC3 shall validate the security controls applied by those entities; or

(b)

the third country entities submit the relevant cargo handling activities to an EU aviation security validation at intervals not exceeding five years and provide ACC3(s) with a copy of the validation report. The validation report shall consist of, for third country regulated agents, the declaration of commitments as set out in Attachment 6-H2 and the checklist set out in Attachment 6-C2, and for third country known consignors, the declaration of commitments as set out in Attachment 6-H3 and the checklist set out in Attachment 6-C4. The validation report shall also include a declaration by the EU aviation security validator as set out in Attachment 11-A.

6.8.4.2 If the EU aviation security validation according to point 6.8.4.1(b) concludes that the entity U.K.

(a)

has succeeded in complying with the objectives referred to in the relevant checklist, the validation report shall state that the entity is designated EU aviation security validated regulated agent or known consignor. The validator shall provide the validated entity with the original of the validation report;

(b)

has failed to comply with the objectives referred to in the relevant checklist, the entity is not authorised to operate cargo for carriage into the EU. It shall receive a copy of the completed checklist stating the deficiencies.

6.8.4.3 The ACC3 shall maintain a database giving at least the following information for each regulated agent or known consignor that has been subject to EU aviation security validation in accordance with point 6.8.4.1, from which it directly accepts cargo or mail for carriage into the Union: U.K.

(a)

the company details, including the bona fide business address; and

(b)

the nature of the business, excluding business sensitive information; and

(c)

contact details, including those of the person(s) responsible for security; and

(d)

the company registration number, if applicable; and

(e)

where available, the validation report.

The database shall be available for inspection of the ACC3.

Other EU aviation security validated entities may maintain such a database.

6.8.4.4 An air cargo or mail entity operating a network of different sites in third countries may obtain a single designation as EU aviation security validated regulated agent covering all sites of the network, provided that: U.K.

(a)

the relevant aviation security operations of the network, including transport services between sites, are covered by a single security programme or by standardised security programmes; and

(b)

the implementation of the security programme(s) shall be subject to a single internal security quality assurance programme that is equivalent to EU aviation security validation; and

(c)

before designation of the network as EU aviation security regulated agent, the following sites of the entity have been subjected to an EU aviation security validation:

(i)

the site(s) from which cargo or mail is directly delivered to an ACC3, and

(ii)

at least two or 20 % of the sites of the network, whichever is the higher, from which cargo or mail is fed to site(s) mentioned in point (i), and

(iii)

all sites located in third countries listed in Attachment 6-I to Commission Implementing Decision C(2015) 8005.

In order to maintain EU aviation security validated regulated agent designation for all sites of the network not yet validated until 30 June 2018 at the latest, during every year after the year of designation, at least a further two or 20 %, whichever is the higher, of the sites from which cargo or mail is fed to the site(s) mentioned in point 6.8.4.4(c)(i) shall be subjected to an EU aviation security validation, until all sites are validated.

An EU aviation security validator shall establish the roadmap listing the order of the locations to be validated each year selected on a random basis. The roadmap shall be established independently from the entity operating the network and may not be changed by that entity. This roadmap shall constitute an integral part of the validation report on the basis of which the network is designated as a third country EU validated regulated agent.

Once it has been subjected to an EU aviation security validation, a site of the network shall be considered as an EU aviation security validated regulated agent in accordance with point 6.8.4.2(a).

6.8.4.5 If the EU aviation security validation of a site of the network referred to in point 6.8.4.4(c)(ii) concludes that the site has failed to comply with the objectives referred to in the checklist in Attachment 6-C2, cargo and mail from that site shall be screened at a site validated in accordance with 6.8.4.2(a) until an EU aviation security validation confirms compliance with the objectives of the checklist. U.K.

6.8.4.6 Points 6.8.4.4 to 6.8.4.6 shall expire on 30 June 2018. U.K.

6.8.5 Non-compliance and discontinuation of ACC3 designation U.K.

6.8.5.1 Non-Compliance U.K.

1.

If the Commission or an appropriate authority identifies a serious deficiency relating to an ACC3 operation which is deemed to have a significant impact on the overall level of aviation security in the Union it shall:

(a)

inform the ACC3 concerned promptly, request comments and appropriate measures rectifying the serious deficiency; and

(b)

promptly inform the Commission and other Member States.

2.

Where an appropriate authority has not achieved rectification, the Commission may, after consulting the Committee on Civil Aviation Security set up by Article 19(1) of Regulation (EC) No 300/2008, conclude that the carrier can no longer be recognised as an ACC3, either for specific or for all routes from third countries into the Union. In such cases, details of the ACC3 shall be removed from the Union database on supply chain security.

3.

An air carrier whose recognition as an ACC3 has been withdrawn in accordance with point 6.8.5.1.2 shall not be reinstated or included in the Union database on supply chain security until an EU aviation security validation has confirmed that the serious deficiency has been rectified and the committee on civil aviation security has been informed thereof by the relevant appropriate authority.

6.8.5.2 Discontinuation U.K.

The appropriate authority that designated the ACC3 is responsible for removing the ACC3 from the ‘Union database on supply chain security’:

(a)

at the request or in agreement with the air carrier; or

(b)

where the ACC3 does not pursue relevant cargo operations and does not react to a request for comments or otherwise obstructs the assessment of risk to aviation.

(1)

Commission Regulation (EC) No 748/2009 of 5 August 2009 on the list of aircraft operators which performed an aviation activity listed in Annex I to Directive 2003/87/EC on or after 1 January 2006 specifying the administering Member State for each aircraft operator (OJ L 219, 22.8.2009, p. 1).