Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU)

Article 7 Personnel security

1. Personnel security is the application of measures to ensure that access to EUCI is granted only to individuals who have:

• a need-to-know,

• been security cleared to the relevant level, where appropriate, and

• been briefed on their responsibilities.

2. Personnel security clearance procedures shall be designed to determine whether an individual, taking into account his loyalty, trustworthiness and reliability, may be authorised to access EUCI.

3. All individuals in the GSC whose duties require them to have access to or handle EUCI classified CONFIDENTIEL UE/EU CONFIDENTIAL or above shall be security cleared to the relevant level before being granted access to such EUCI. Such individuals must be authorised by the GSC Appointing Authority to access EUCI up to a specified level and up to a specified date.

4. Member States’ personnel referred to in Article 15(3) whose duties may require access to EUCI classified CONFIDENTIEL UE/EU CONFIDENTIAL or above shall be security cleared to the relevant level or otherwise duly authorised by virtue of their functions, in accordance with national laws and regulations, before being granted access to such EUCI.

5. Before being granted access to EUCI and at regular intervals thereafter, all individuals shall be briefed on and acknowledge their responsibilities to protect EUCI in accordance with this Decision.

6. Provisions for implementing this Article are set out in Annex I.