Article 17 Handling and storage of CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET information

In accordance with Article 19(3)(a) of Decision (EU, Euratom) 2015/444, CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET information shall be handled in a Secured Area^f1.

Pursuant to Article 19(3)(b) of Decision (EU, Euratom) 2015/444, this information may be handled in an Administrative Area^f2, provided the EUCI is protected from access by unauthorised persons.

This information may be handled outside a Secured Area or an Administrative Area provided the holder has undertaken to comply with compensatory measures as required under Article 19(3)(c) of Decision (EU, Euratom) 2015/444, which shall include at least the following:

• CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET documents shall not be read in public places.

• The EUCI shall be kept at all times under the personal control of the holder.

• In the case of documents in paper form, the holder has notified the relevant registry of the fact that the classified documents are being handled outside a Secured Area and Administrative Area.

• The documents shall be stowed in an appropriate safe when they are not being read or discussed.

• The doors to the room shall be closed while the document is being read or discussed.

• The details of the document shall not be discussed over the phone on a non-secured line or in an email.

• The document shall not be photocopied or scanned by the holder. Only the registry may provide any further copies.

• The document shall only be handled and temporarily held outside an Administrative or Secured Area for the minimum time necessary, after which it shall be returned to the registry.

• Return of the document shall be signed for.

• The holder shall not throw the classified document away or destroy it.

CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET information shall be stored in a Secured Area in a security container or a strong room.

Further advice can be sought from the Local Security Officer (LSO) of the relevant Commission department.

Any suspected or actual security incidents involving the document shall be reported to the LSO as soon as possible.