# Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA, Article 36: Keeping of logs

Extent: E+W+S+N.I.

1. eu-LISA shall keep logs of all data processing operations in the MID. Those logs shall include the following:
(a) the Member State launching the query;
(b) the purpose of user's access;
(c) the date and time of the query;
(d) the type of data used to launch the query;
(e) the reference to the linked data;
(f) the history of the identity confirmation file.
2. Each Member State shall keep logs of queries that its authorities and the staff of those authorities duly authorised to use the MID make. Each Union agency shall keep logs of queries that its duly authorised staff make.
3. The logs referred to in paragraphs 1 and 2 may be used only for data protection monitoring, including checking the admissibility of a query and the lawfulness of data processing, and for ensuring data security and integrity. Those logs shall be protected by appropriate measures against unauthorised access and erased one year after their creation. If, however, they are required for monitoring procedures that have already begun, they shall be erased once the monitoring procedures no longer require the logs.

---
Source: https://www.legislation.gov.uk/eur/2019/817/article/36 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-817/article-36
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.