Article 20 Personnel profiles

The Security Policy shall define the functions and responsibilities of persons who are authorised to access the VIS, including the communication infrastructure.

The security roles and responsibilities of Commission staff, contractors and staff involved in operational management shall be defined, documented and communicated to the persons concerned. The job description and the objectives shall state these roles and responsibilities for Commission staff; contracts or service level agreements shall state them for contractors.

Confidentiality and secrecy agreements shall be concluded with all persons to whom no European Union or Member State public service rules apply. Staff required to work with VIS data shall have the necessary clearance or certification in accordance with the detailed procedures to be set out in the Security Policy.