{
  "url": "https://openlegislation.uk/eu-regulation-2018-1240/article-69",
  "json_url": "https://openlegislation.uk/eu-regulation-2018-1240/article-69.json",
  "legislation": "eur/2018/1240",
  "legislation_title": "Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2018-1240",
  "path": "article/69",
  "kind": "article",
  "number": "69",
  "heading": "Keeping of logs",
  "text": "1. eu-LISA shall keep logs of all data processing operations within the ETIAS Information System. Those logs shall include the following:\n(a) the purpose of the access;\n(b) the date and time of each operation;\n(c) the data used for the automated processing of the applications;\n(ca) where relevant, a reference to the use of the ESP to query the ETIAS Central System as referred to in Article 7(2) of Regulation (EU) 2019/817;\n(d) the hits triggered while carrying out the automated processing laid down in Article 20;\n(e) the data used for the verification of identity stored in the ETIAS Central System or other information systems and databases;\n(f) the results of the verification process referred to in Article 22; and\n(g) the staff member having performed it.\n2. The ETIAS Central Unit shall keep records of the staff members duly authorised to perform the identity verifications.\nThe ETIAS National Unit of the Member State responsible shall keep records of the staff member duly authorised to enter or retrieve the data.\n3. eu-LISA shall keep logs of all data processing operations within the ETIAS Information System involving the access by border authorities referred to in Article 47 and the access by immigration authorities referred to in Article 49. Those logs shall show the date and time of each operation, the data used for launching the search, the data transmitted by the ETIAS Central System and the name of the border authorities and immigration authorities entering and retrieving the data.\nIn addition, the competent authorities shall keep records of the staff members duly authorised to enter and retrieve the data.\n4. Such logs may be used only for monitoring the admissibility of data processing and to ensure data security and integrity. The logs shall be protected by appropriate measures against unauthorised access. They shall be deleted one year after the retention period referred to in Article 54 has expired, if they are not required for monitoring procedures which have already begun.\neu-LISA and the ETIAS National Units shall make the logs available to the European Data Protection Supervisor and to the competent supervisory authorities on request.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Inserted by Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2018/1240/article/69",
    "retrieved_at": "2026-11-01T14:43:58.012378+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}