Article 17 Confidentiality – Management Authority

Without prejudice to Article 17 of the Staff Regulations of Officials of the European Communities, the Management Authority shall apply appropriate rules of professional secrecy or other equivalent duties of confidentiality of a comparable standard to those provided in Article 11 of this Regulation to all its staff required to work with SIS II data. This obligation shall also apply after those people leave office or employment or after the termination of their activities.

The Management Authority shall take measures equivalent to those referred to in paragraph 1 as regards confidentiality in respect of the exchange of supplementary information through the Communication Infrastructure.

Where the Management Authority cooperates with external contractors in any SIS II-related tasks, it shall closely monitor the activities of the contractor to ensure compliance with all provisions of this Regulation, in particular on security, confidentiality and data protection.

The operational management of CS-SIS shall not be entrusted to private companies or private organisations.