Article 7

Regulation (EU) No 1077/2011 of the European Parliament and of the Council of 25 October 2011 establishing a European Agency for the operational management of large-scale IT systems in the area of freedom, security and justice · European Union

The Agency shall carry out the tasks relating to the communication infrastructure conferred on the Management Authority by the legislative instruments governing the development, establishment, operation and use of large-scale IT systems referred to in Article 1(2). According to the legislative instruments referred to in paragraph 1, the tasks regarding the communication infrastructure (including the operational management and security) are divided between the Agency and the Commission. In order to ensure coherence between the exercise of their respective responsibilities, operational working arrangements shall be made between the Agency and the Commission and reflected in a Memorandum of Understanding. The communication infrastructure shall be adequately managed and controlled in order to protect it from threats, and to ensure its security and that of large-scale IT systems, including that of data exchanged through the communication infrastructure. Appropriate measures including security plans shall be adopted, inter alia, to prevent the unauthorised reading, copying, modification or deletion of personal data during transfers of personal data or transport of data media, in particular by means of appropriate encryption techniques. No system-related operational information shall circulate in the communication infrastructure without encryption. Tasks relating to the operational management of the communication infrastructure may be entrusted to external private-sector entities or bodies in accordance with Regulation (EC, Euratom) No 1605/2002. In such a case, the network provider shall be bound by the security measures referred to in paragraph 4 and shall have no access to SIS II, VIS or Eurodac operational data, or to the SIS II-related SIRENE exchange, by any means. Without prejudice to the existing contracts on the network of SIS II, VIS and Eurodac, the management of the encryption keys shall remain within the competence of the Agency and shall not be outsourced to any external private-sector entity.

← art_6__text_1 · All articles · 1. →

Source: EUR-Lex (Cellar) · retrieved 2026-11-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.