# Commission Delegated Decision (EU) 2019/969 of 22 February 2019 on the tool enabling applicants to give or withdraw their consent for an additional retention period of their application file pursuant to Article 54(2) of Regulation (EU) 2018/1240 of the European Parliament and of the Council (Text with EEA relevance), Article 8: Specific security considerations

Extent: E+W+S+N.I.

1. The consent tool shall be designed and implemented to ensure the confidentiality, integrity and availability of processed data and to ensure non-repudiation of transactions. The technical and organisational implementation of it shall meet the requirements of the ETIAS security plan referred in Article 59(3) of Regulation (EU) 2018/1240 and of the rules on data protection and security applicable to the public website and the app for mobile devices referred to in Article 16(10) of Regulation (EU) 2018/1240.
2. The consent tool shall be designed and implemented in a way that precludes unlawful access to it. For this purpose, the consent tool shall limit the number of attempts to access the tool with the same travel document number, the same application number or the same unique code. The tool shall also include measures to protect against non-human behaviour.
3. The consent tool shall include time-out measures after some minutes of inactivity.
4. Additional details concerning the confidentiality, integrity and availability of processed data shall be subject of the technical specifications referred to in Article 73(3) of Regulation (EU) 2018/1240.

---
Source: https://www.legislation.gov.uk/eudn/2019/969/article/8 (the official version)
Page: https://openlegislation.uk/eu-decision-2019-969/article-8
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.