A.

In relation to the performance of its activities, the external service provider shall, with regard to data protection: prevent at all times any unauthorised reading, copying, modification or deletion of data, in particular during their transmission to the diplomatic mission or consular post of the Member State(s) competent for processing an application; in accordance with the instructions given by the Member State(s) concerned, transmit the data, electronically, in encrypted form, or physically, in a secured way; transmit the data as soon as possible: in the case of physically transferred data, at least once a week, in the case of electronically transferred encrypted data, at the latest at the end of the day of their collection; delete the data immediately after their transmission and ensure that the only data that might be retained shall be the name and contact details of the applicant for the purposes of the appointment arrangements, as well as the passport number, until the return of the passport to the applicant, where applicable; ensure all the technical and organisational security measures required to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the cooperation involves the transmission of files and data to the diplomatic mission or consular post of the Member State(s) concerned and all other unlawful forms of processing personal data; process the data only for the purposes of processing the personal data of applicants on behalf of the Member State(s) concerned; apply data protection standards at least equivalent to those set out in Directive 95/46/EC; provide applicants with the information required pursuant to Article 37 of the VIS Regulation.

← LIST OF MINIMUM REQUIREMENTS TO BE INCLUDED IN THE LEGAL INSTRUMENT IN THE CASE OF COOPERATION WITH EXTERNAL SERVICE PROVIDERS · All articles · (a) →

Source: EUR-Lex (Cellar) · retrieved 2026-11-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.