{
  "url": "https://openlegislation.uk/eu-decision-2019-971/article-2",
  "json_url": "https://openlegislation.uk/eu-decision-2019-971/article-2.json",
  "legislation": "eudn/2019/971",
  "legislation_title": "Commission Delegated Decision (EU) 2019/971 of 26 February 2019 on the definition of the requirements of the secure account service pursuant to Article 6(4) of Regulation (EU) 2018/1240 of the European Parliament and of the Council, enabling applicants to provide any additional information or documentation required (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2019-971",
  "path": "article/2",
  "kind": "article",
  "number": "2",
  "heading": "Two-factor authentication for access to the secure account service",
  "text": "1. In order to connect to the secure account service, two-factor authentication shall be used.\n2. The first authentication shall consist of entering the following data:\n(a) application number;\n(b) travel document number.\n3. Where the applicant does not provide his or her application number, the first authentication shall consist of entering following data:\n(a) travel document number;\n(b) country of issue of the travel document to be selected from a predetermined list;\n(c) date of issue and of expiry of the travel document; and\n(d) first names of both parents.\n4. The application number shall be the same as the one provided to applicants via the ETIAS email service on submission of their application. The other data, referred to in paragraph 2 or paragraph 3, submitted by the applicant shall also be the same as those provided by applicants at the time of the submission of their application.\n5. The second authentication shall consist of a unique code to be entered into the secure account service to confirm authentication.\n6. Upon submission of the information in paragraph 2 or paragraph 3, the unique code referred to in paragraph 4 shall be automatically generated and sent to the applicant through the email service referred to in point (f) of Article 6(2) of Regulation (EU) 2018/1240.\n7. The unique code shall be sent to the same email address provided in the submitted application.\n8. The unique code shall expire after a short period of time. Sending a new unique code shall invalidate unique codes previously sent to the same applicant.\n9. The unique code shall be usable only once.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2019/971/article/2",
    "retrieved_at": "2026-11-01T15:12:40.750565+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}