{
  "url": "https://openlegislation.uk/eu-decision-2009-876/annex/division-5/division-5.1",
  "json_url": "https://openlegislation.uk/eu-decision-2009-876/annex/division-5/division-5.1.json",
  "legislation": "eudn/2009/876",
  "legislation_title": "Commission Decision of 30 November 2009 adopting technical implementing measures for entering the data and linking applications, for accessing the data, for amending, deleting and advance deleting of data and for keeping and accessing the records of data processing operations in the Visa Information System (notified under document C(2009) 9402) (Only the Bulgarian, Czech, Dutch, Estonian, Finnish, French, German, Greek, Hungarian, Italian, Latvian, Lithuanian, Maltese, Polish, Portuguese, Romanian, Slovak, Slovenian, Spanish and Swedish texts are authentic) (2009/876/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2009-876",
  "path": "annex/division/5/division/5.1",
  "kind": "division",
  "number": "5.1",
  "heading": "Keeping the records of data processing operations",
  "text": "Each data processing operation within the VIS shall be recorded as a log entry with a field ‘TypeOfAction’ including the purpose of access in accordance with Article 34(1) of the VIS Regulation.\nThe log entry shall be recorded with the timestamp of the moment it was received. This timestamp shall later be used to identify the log entries to be deleted.\nFor all data processing operations, the authority entering or retrieving the data shall be stored in the log entry. The user and the central VIS shall be specified in the log entry either as a sender or as a recipient.\nNo other operational data than the authority entering or retrieving the data and the visa application number shall be included in the log entry. The type of data transmitted or used for interrogation referred to in Article 34(1) of the VIS Regulation shall be stored.\nWhen records referred in Article 34(2) of the VIS Regulation, having the field ‘TypeOfAction’ set to either ‘Delete Application’ or ‘Automatic Deletion’ are found by the VIS, it shall calculate that one year has passed since the expiration of the retention period referred to in Article 23(1) of the VIS Regulation and then proceed to the deletion. All records of data processing operations having the same application number shall be deleted simultaneously, if not required for data-protection monitoring purposes, in accordance with Article 34(2) of the VIS Regulation.\nRecords of data processing operations shall neither be modified nor deleted before one year after the expiration of the retention period referred to in Article 23(1) of the VIS Regulation.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2009/876/annex/division/5/division/5.1",
    "retrieved_at": "2026-11-01T15:16:19.729434+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}