Regulation (EU) 2019/816 of the European Parliament and of the CouncilShow full title

Article 13 Responsibility for the use of data

1. In accordance with applicable Union data protection rules, each Member State shall ensure that the data recorded in ECRIS-TCN are processed lawfully, and in particular that:

(a) only duly authorised staff have access to the data for the performance of their tasks;

(b) the data are collected lawfully in a manner that fully respects the human dignity and fundamental rights of the third-country national;

(c) the data are entered into ECRIS-TCN lawfully;

(d) the data are accurate and up-to-date when they are entered into ECRIS-TCN.

2. eu-LISA shall ensure that ECRIS-TCN is operated in accordance with this Regulation, with the delegated act referred to in Article 6(2) and with the implementing acts referred to in Article 10, as well as in accordance with Regulation (EU) 2018/1725. In particular, eu-LISA shall take the necessary measures to ensure the security of the central system and the communication infrastructure referred to in point (d) of Article 4(1), without prejudice to the responsibilities of each Member State.

3. eu-LISA shall inform the European Parliament, the Council and the Commission as well as the European Data Protection Supervisor as soon as possible of the measures it takes pursuant to paragraph 2 in view of the start of operations of ECRIS-TCN.

4. The Commission shall make the information referred to in paragraph 3 available to the Member States and to the public through a regularly updated public website.