Annex

In Annex II to Directive 2006/87/EC, Article 2.18(6) is replaced by the following:

‘6.

The competent authorities referred to in paragraph 5 shall enter each assigned European Vessel Identification Number, the data for the identification of the vessel set out in Appendix IV as well as any changes without delay into the electronic register kept by the Commission (“the hull data base”). These data may be used by competent authorities of other Member States and the Contracting States of the Mannheim Convention, for the sole purpose of performing administrative measures for maintaining safety and ease of navigation and for implementation of Articles 2.02 to 2.15 and Article 2.18(3) of this Annex as well as Articles 8, 10, 11, 12, 15, 16 and 17 of this Directive.

Member States shall, in accordance with Union and national legislation, take the necessary measures to ensure the confidentiality and reliability of information sent to them pursuant to this Directive and shall only use such information in compliance with this Directive.

The competent authority of a Member State may transfer personal data to a third country or international organisation provided the requirements of Directive 95/46/EC of the European Parliament and of the Council^f1, particularly of Articles 25 or 26, are fulfilled and only on a case-by-case basis. The competent authority of the Member State shall ensure that the transfer is necessary for the purposes referred to in subparagraph 1. The competent authority shall ensure that the third country or international organisation does not transfer the data to another third country or international organisation unless it is given express written authorisation and complies with the conditions specified by the competent authority of the Member State.

The transfer of personal data to a third country or international organisation by the Commission shall be carried out provided the requirements of Article 9 of Regulation (EC) No 45/2001 of the European Parliament and of the Council^f2 are fulfilled and only on a case-by-case basis. The Commission shall ensure that the transfer is necessary for the purposes referred to in subparagraph 1. The Commission shall ensure that the third country or international organisation does not transfer the data to another third country or international organisation unless it is given express written authorisation and complies with the conditions specified by the Commission.’