{
  "url": "https://openlegislation.uk/eu-decision-2010-260/introduction",
  "json_url": "https://openlegislation.uk/eu-decision-2010-260/introduction.json",
  "legislation": "eudn/2010/260",
  "legislation_title": "Commission Decision of 4 May 2010 on the Security Plan for the operation of the Visa Information System (2010/260/EU)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2010-260",
  "path": "introduction",
  "kind": "introduction",
  "number": null,
  "heading": "Introductory text",
  "text": "Commission Decision\nof 4 May 2010\non the Security Plan for the operation of the Visa Information System\n(2010/260/EU)\nTHE EUROPEAN COMMISSION,\nHaving regard to the Treaty on the Functioning of the European Union,\nHaving regard to Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation), and in particular Article 32 thereof,\nWhereas:\n(1)\nArticle 32(3) of Regulation (EC) No 767/2008 provides that the Management Authority shall take the necessary measures in order to achieve the objectives in the field of security prescribed in Article 32(2) as regards the operation of the VIS, including the adoption of the security plan.\n(2)\nArticle 26(4) of Regulation (EC) No 767/2008 provides that during a transitional period before the Management Authority takes up its responsibilities, the Commission shall be responsible for the operational management of the VIS.\n(3)\nRegulation (EC) No 45/2001 of the European Parliament and of the Council applies to the processing of personal data by the Commission when carrying out its responsibilities in the operational management of VIS.\n(4)\nArticle 26(7) of Regulation (EC) No 767/2008 provides that where the Commission delegates its responsibilities during the transitional period before the Management Authority takes up its responsibilities, it shall ensure that this delegation does not adversely affect any effective control mechanism under Union law, whether of the Court of Justice, the Court of Auditors or the European Data Protection Supervisor.\n(5)\nThe Management Authority should set out its own security plan in relation to the VIS once it will have taken up its responsibilities.\n(6)\nCommission Decision 2008/602/EC of 17 June 2008 laying down the physical architecture and requirements of the national interfaces and of the communication infrastructure between the central VIS and the national interfaces for the development phase has described the required security services applicable for the network for VIS.\n(7)\nArticle 27 of Regulation (EC) No 767/2008 provides that the principal central VIS, which performs technical supervision and administration functions, shall be located in Strasbourg (France) and a backup central VIS, capable of ensuring all functionalities of the principal central VIS in the event of failure of the system, shall be located in Sankt Johann im Pongau (Austria).\n(8)\nThe roles of the security officers should be laid down in order to ensure efficient and prompt response to security incidents and reporting thereof.\n(9)\nA Security Policy should be set up describing all technical and organisational details in line with the provisions of this Decision.\n(10)\nMeasures should be defined to ensure the appropriate level of security of the operation of VIS,\nHAS ADOPTED THIS DECISION:",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "OJ L 218, 13.8.2008, p. 60."
    },
    {
      "type": "footnote",
      "label": "f2",
      "text": "OJ L 8, 12.1.2001, p. 1."
    },
    {
      "type": "footnote",
      "label": "f3",
      "text": "OJ L 194, 23.7.2008, p. 3."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2010/260/introduction",
    "retrieved_at": "2026-11-01T15:16:07.680404+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}