# Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation), Article 34: Keeping of records

Extent: E+W+S+N.I.

1. Each Member State and the Management Authority shall keep records of all data processing operations within the VIS. Those records shall indicate:
(a) the purpose of access referred to in Article 6(1) and in Articles 15 to 22;
(b) the date and time;
(c) the type of data transmitted as referred to in Articles 9 to 14;
(d) the type of data used for interrogation as referred to in Article 15(2), Article 17 and Articles 18(1) and (6), 19(1), 19a(2) and (4), 20(1), 21(1) and 22(1); and
(e) the name of the authority entering or retrieving the data.
In addition, each Member State shall keep records of the staff duly authorised to enter or retrieve the data.
1a. For the operations listed in Article 17a, a record of each data processing operation carried out in the VIS and the EES shall be kept in accordance with this Article and Article 46 of Regulation (EU) 2017/2226.
2. Such records may be used only for the data-protection monitoring of the admissibility of data processing as well as to ensure data security. The records shall be protected by appropriate measures against unauthorised access and deleted after a period of one year after the retention period referred to in Article 23(1) has expired, if they are not required for monitoring procedures which have already begun.

---
Source: https://www.legislation.gov.uk/eur/2008/767/article/34 (the official version)
Page: https://openlegislation.uk/eu-regulation-2008-767/article-34
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.