measures and procedures providing access to the following information concerning the operator’s supply of timber or timber products placed on the market:

• description, including the trade name and type of product as well as the common name of tree species and, where applicable, its full scientific name,

• country of harvest, and where applicable:

  1. (i)

     sub-national region where the timber was harvested; and

  2. (ii)

     concession of harvest,

• quantity (expressed in volume, weight or number of units),

• name and address of the supplier to the operator,

• name and address of the trader to whom the timber and timber products have been supplied,

• documents or other information indicating compliance of those timber and timber products with the applicable legislation;

risk assessment procedures enabling the operator to analyse and evaluate the risk of illegally harvested timber or timber products derived from such timber being placed on the market.

Such procedures shall take into account the information set out in point (a) as well as relevant risk assessment criteria, including F1the following criteria (referred to in this Article as the “specified criteria”):

• assurance of compliance with applicable legislation, which may include certification or other third-party-verified schemes which cover compliance with applicable legislation,

• prevalence of illegal harvesting of specific tree species,

• prevalence of illegal harvesting or practices in the country of harvest and/or sub-national region where the timber was harvested, including consideration of the prevalence of armed conflict,

• sanctions imposed F2by the United Kingdom or by the UN Security Council on timber imports or exports,

• complexity of the supply chain of timber and timber products.

except where the risk identified in course of the risk assessment procedures referred to in point (b) is negligible, risk mitigation procedures which consist of a set of measures and procedures that are adequate and proportionate to minimise effectively that risk and which may include requiring additional information or documents and/or requiring third party verification.

market developments; and

experience gained in the operation of this Regulation.