# Commission Implementing Regulation (EU) 2018/574 of 15 December 2017 on technical standards for the establishment and operation of a traceability system for tobacco products (Text with EEA relevance), Article 36: Security and interoperability of communications and data

Extent: E+W+S+N.I.

1. All electronic communication provided for under this Regulation shall be carried out using secure means. Applicable security protocols and connectivity rules shall be based on non-proprietary open standards. They shall be established by:
(a) the ID issuer for communications between the ID issuer and the economic operators registering with the ID issuer or requesting unique identifiers;
(b) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(c) the provider of the data repository for communications between the data repository and the router and:
i..the ID issuer; and
ii.....
iii..economic operators using the router ....
2. The provider of the data repository shall be responsible for the security and integrity of hosted data. Data portability shall be secured in accordance with the common data dictionary set out in Article 28.
3. For all transfers of data, the sending party is responsible for the completeness of transferred data. In order for the sending party to discharge this obligation, the receiving party shall acknowledge the receipt of transferred data including a checksum value of actual transmitted data or any alternative mechanism allowing for validating the integrity of transmission, in particular its completeness.

---
Source: https://www.legislation.gov.uk/eur/2018/574/article/36 (the official version)
Page: https://openlegislation.uk/eu-regulation-2018-574/article-36
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.