{
  "url": "https://openlegislation.uk/eu-decision-2010-261/introduction",
  "json_url": "https://openlegislation.uk/eu-decision-2010-261/introduction.json",
  "legislation": "eudn/2010/261",
  "legislation_title": "Commission Decision of 4 May 2010 on the Security Plan for Central SIS II and the Communication Infrastructure (2010/261/EU)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2010-261",
  "path": "introduction",
  "kind": "introduction",
  "number": null,
  "heading": "Introductory text",
  "text": "Commission Decision\nof 4 May 2010\non the Security Plan for Central SIS II and the Communication Infrastructure\n(2010/261/EU)\nTHE EUROPEAN COMMISSION,\nHaving regard to the Treaty on the Functioning of the European Union,\nHaving regard to Regulation (EC) No 1987/2006 of the European Parliament and of the Council of 20 December 2006 on the establishment, operation and use of the second generation Schengen Information System (SIS II) and in particular Article 16 thereof,\nHaving regard to Council Decision 2007/533/JHA of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System (SIS II) and in particular Article 16 thereof,\nWhereas:\n(1)\nArticle 16 of Regulation (EC) No 1987/2006 and Article 16 of Decision 2007/533/JHA provide that the Management Authority, in relation to Central SIS II, and the Commission, in relation to the Communication Infrastructure, should adopt the necessary measures, including a security plan.\n(2)\nArticle 15(4) of Regulation (EC) No 1987/2006 and Article 15(4) of Decision 2007/533/JHA provide that during a transitional period before the Management Authority takes up its responsibilities, the Commission should be responsible for the operational management of Central SIS II.\n(3)\nAs the Management Authority has not yet been established, the security plan to be adopted by the Commission should be applicable also to Central SIS II for a transitional period.\n(4)\nRegulation (EC) No 45/2001 of the European Parliament and of the Council applies to the processing of personal data by the Commission when carrying out its responsibilities in the operational management of SIS II.\n(5)\nArticle 15(7) of Regulation (EC) No 1987/2006 and Article 15(7) of Decision 2007/533/JHA provide that where the Commission delegates its responsibilities during the transitional period before the Management Authority takes up its responsibilities, it shall ensure that this delegation does not adversely affect any effective control mechanism under Union law, whether of the Court of Justice, the Court of Auditors or the European Data Protection Supervisor.\n(6)\nThe Management Authority should adopt its own security plan in relation to Central SIS II once it will have taken up its responsibilities. This security plan should therefore expire, to the extent it relates to the Central SIS II, when the Management Authority takes up its responsibilities.\n(7)\nArticle 4(3) of Regulation (EC) No 1987/2006 and Article 4(3) of Decision 2007/533/JHA provide that CS-SIS, which performs technical supervision and administration functions, shall be located in Strasbourg (France) and a backup CS-SIS, capable of ensuring all functionalities of the principal CS-SIS in the event of failure of this system, shall be located in Sankt Johann im Pongau (Austria).\n(8)\nThe security plan should foresee one System Security Officer performing security-related tasks concerning both Central SIS II and the Communication Infrastructure and two Local Security Officers performing security-related tasks concerning the Central SIS II and the Communication Infrastructure, respectively. The roles of the security officers should be laid down in order to ensure efficient and prompt response to security incidents and reporting thereof.\n(9)\nA Security Policy should be set up describing all technical and organisational details in line with the provisions of this Decision.\n(10)\nMeasures should be defined to ensure the appropriate level of security of the operation of Central SIS II and the Communication Infrastructure,\nHAS ADOPTED THIS DECISION:",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "OJ L 381, 28.12.2006, p. 4."
    },
    {
      "type": "footnote",
      "label": "f2",
      "text": "OJ L 205, 7.8.2007, p. 63."
    },
    {
      "type": "footnote",
      "label": "f3",
      "text": "OJ L 8, 12.1.2001, p. 1."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2010/261/introduction",
    "retrieved_at": "2026-11-01T15:16:07.639053+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}