Implementing decision 2017/946 - Automated data exchange with regard to dactyloscopic data in Slovakia, Bulgaria, France, Czech Republic, Lithuania, the Netherlands, Hungary, Cyprus, Estonia, Malta, Romania and Finland - Main contents

EN

Official Journal of the European Union

L 142/93

In accordance with Article 25(2) of Decision 2008/615/JHA, the supply of personal data provided for under that Decision may not take place until the general provisions on data protection set out in Chapter 6 of that Decision have been implemented in the national law of the territories of the Member States involved in such supply.

Article 20 of Council Decision 2008/616/JHA (3) provides that the verification that the condition referred to in recital 1 has been met with respect to automated data exchange in accordance with Chapter 2 of Decision 2008/615/JHA is to be done on the basis of an evaluation report based on a questionnaire, an evaluation visit and a pilot run.

The overall evaluation reports, summarising the results of the questionnaire, the evaluation visit and the pilot run concerning dactyloscopic data in Slovakia, Bulgaria, France, Czech Republic, Lithuania, the Netherlands, Hungary, Cyprus, Estonia, Malta, Romania and Finland have been presented to the Council.

By adopting Council Decision 2010/682/EU (4), the Council concluded that Slovakia has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 8 November 2010, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2010/758/EU (5), the Council concluded that Bulgaria has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 2 December 2010, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2011/355/EU (6), the Council concluded that France has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 9 June 2011, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2011/434/EU (7), the Council concluded that the Czech Republic has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 19 July 2011, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2011/888/EU (8), the Council concluded that Lithuania has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 13 December 2011, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2012/46/EU (9), the Council concluded that the Netherlands has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 23 January 2012, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2012/446/EU (10), the Council concluded that Hungary has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 24 July 2012, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2012/672/EU (11), the Council concluded that Cyprus has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 25 October 2012, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2012/710/EU (12), the Council concluded that Estonia has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 13 November 2012, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2013/153/EU (13), the Council concluded that Malta has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 21 March 2013, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2013/229/EU (14), the Council concluded that Romania has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 14 May 2013, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

By adopting Council Decision 2013/792/EU (15), the Council concluded that Finland has fully implemented the general provisions on data protection under Chapter 6 of Decision 2008/615/JHA and is entitled to receive and supply personal data pursuant to Article 9 of that Decision as from 16 December 2013, and it also concluded that the evaluation report was approved in accordance with Article 25(2) of Decision 2008/615/JHA.

In its judgment of 22 September 2016 in Joined Cases C-14/15 and C-116/15, the Court of Justice of the European Union held that Article 25(2) of Decision 2008/615/JHA unlawfully lays down a requirement of unanimity for the adoption of measures necessary to implement that Decision. Decisions 2010/682/EU, 2010/758/EU, 2011/355/EU, 2011/434/EU, 2011/888/EU, 2012/46/EU, 2012/446/EU, 2012/672/EU, 2012/710/EU, 2013/153/EU, 2013/229/EU and 2013/792/EU were adopted on the basis of Article 25(2) of Decision 2008/615/JHA and consequently are vitiated by a procedural defect.

With a view to ensuring the legal certainty of the receipt and supply of personal data pursuant to Decision 2008/615/JHA with regard to the Member States concerned by Decisions 2010/682/EU, 2010/758/EU, 2011/355/EU, 2011/434/EU, 2011/888/EU, 2012/46/EU, 2012/446/EU, 2012/672/EU, 2012/710/EU, 2013/153/EU, 2013/229/EU and 2013/792/EU, those Decisions should be replaced by this Decision.

With a view to ensuring continued receipt and supply of personal data pursuant to Article 9 of Decision 2008/615/JHA, Decisions 2010/682/EU, 2010/758/EU, 2011/355/EU, 2011/434/EU, 2011/888/EU, 2012/46/EU, 2012/446/EU, 2012/672/EU, 2012/710/EU, 2013/153/EU, 2013/229/EU and 2013/792/EU cease to produce effects as from the date of entry into force of this Decision.

For the same reason, the entry into force of this Decision should be without prejudice to the validity of automated data exchange carried out by the Member States pursuant to Decisions 2010/682/EU, 2010/758/EU, 2011/355/EU, 2011/434/EU, 2011/888/EU, 2012/46/EU, 2012/446/EU, 2012/672/EU, 2012/710/EU, 2013/153/EU, 2013/229/EU and 2013/792/EU.

Moreover, the Member States which obtained personal data pursuant to Decisions 2010/682/EU, 2010/758/EU, 2011/355/EU, 2011/434/EU, 2011/888/EU, 2012/46/EU, 2012/446/EU, 2012/672/EU, 2012/710/EU, 2013/153/EU, 2013/229/EU and 2013/792/EU should continue to be entitled to further process those data at national level or between Member States for the purposes laid down in Article 26 of Decision 2008/615/JHA.

Article 33 of Decision 2008/615/JHA confers upon the Council implementing powers with a view to adopting measures necessary to implement that Decision, in particular as regards the receipt and supply of personal data provided for under that Decision. As the conditions for triggering the exercise of such implementing powers have been met and the procedure in that regard has been followed, an implementing decision on the automated data exchange with regard to dactyloscopic data with regard to Slovakia, Bulgaria, France, Czech Republic, Lithuania, the Netherlands, Hungary, Cyprus, Estonia, Malta, Romania and Finland should be adopted in order to allow those Member States to continue receiving and supplying personal data pursuant Article 9 of Decision 2008/615/JHA.

Denmark is bound by Decision 2008/615/JHA and is therefore taking part in the adoption and application of this Decision which implements Decision 2008/615/JHA.

The United Kingdom and Ireland are bound by Decision 2008/615/JHA and are therefore taking part in the adoption and application of this Decision which implements Decision 2008/615/JHA,