# Regulation (EC) No 1987/2006 of the European Parliament and of the Council of 20 December 2006 on the establishment, operation and use of the second generation Schengen Information System (SIS II), Article 18: Keeping of records at central level

Extent: E+W+S+N.I.

1. The Management Authority shall ensure that every access to and all exchanges of personal data within CS-SIS are recorded for the purposes mentioned in Article 12(1) and (2).
2. The records shall show, in particular, the history of the alerts, the date and time of the data transmitted, the data used to perform searches, the reference to the data transmitted and the name of the competent authority responsible for processing the data.
3. The records may only be used for the purpose mentioned in paragraph 1 and shall be deleted at the earliest one year, and at the latest three years, after their creation. The records which include the history of alerts shall be erased one to three years after deletion of the alerts.
4. Records may be kept longer if they are required for monitoring procedures that are already under way.
5. The competent authorities in charge of checking whether a search is lawful, monitoring the lawfulness of data processing, self-monitoring and ensuring the proper functioning of CS-SIS, data integrity and security, shall have access, within the limits of their competence and at their request, to those records for the purpose of fulfilling their tasks.

---
Source: https://www.legislation.gov.uk/eur/2006/1987/article/18 (the official version)
Page: https://openlegislation.uk/eu-regulation-2006-1987/article-18
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.