Commission Implementing Regulation (EU) No 821/2014Show full title

CHAPTER III SYSTEM TO RECORD AND STORE DATA (Article 125(8) of Regulation (EU) No 1303/2013)

Article 6 General provisions

The system to record and store data on operations referred to in point (d) of Article 125(2) of Regulation (EU) No 1303/2013 shall comply with the technical specifications set out in Articles 7 to 11.

Article 7 Protection and preservation of data and documents and their integrity

1. Access to the system shall be based on predefined rights for different types of users and shall be suppressed where it is no longer needed.

2. The system shall keep the logs of any recording, modification and deletion of documents and data.

3. The system shall not allow modification of the content of documents bearing an electronic signature. A time stamp certifying the deposit of the document bearing an electronic signature, shall be generated and associated with the document and shall not be alterable. Deletion of such documents shall be logged in accordance with paragraph 2.

4. The data shall be subject to regular back-ups. The back-up with replica of the entire content of the electronic file repository shall be ready for use in case of emergency.

5. The electronic storage facility shall be protected against any danger of loss or alteration of its integrity. Such protection shall include physical protection against inappropriate temperature and levels of humidity, fire and theft detection systems, adequate protection systems against virus attacks, hackers and any other non-authorised access.

6. The system shall provide for the migration of data, format and computer environment at intervals sufficient to guarantee legibility and accessibility of documents and data until the end of the relevant period referred to in Article 140(1) of Regulation (EU) No 1303/2013.

Article 8 Interoperability

1. The system shall be interoperable with the systems for electronic data exchange with beneficiaries referred to in Article 122(3) of Regulation (EU) No 1303/2013.

Where appropriate, the system shall facilitate the verification of the veracity and, completeness of the data provided by the beneficiaries before it is stored in a secured manner.

2. The system shall be interoperable with other relevant computerised systems under the National Interoperability Framework and the European Interoperability Framework (EIF) established under Decision No 922/2009/EC of the European Parliament and of the Council(1).

3. The system shall be interoperable at technical and semantic level. The specifications shall support standard formats for data exchange and shall ensure that those formats can be recognised and exchanged between heterogeneous systems.

Article 9 Search and reporting functions

The system shall include:

(a)

appropriate search tools enabling easy retrieval of documents, data and their metadata;

(b)

a reporting function enabling the generation of reports on the basis of predefined criteria, in particular for the data set out in Commission Delegated Regulation (EU) No 480/2014(2);

(c)

a possibility of saving, exporting or printing reports referred to in point (b), or a link to an external application providing for such possibility.

Article 10 Documentation of the system

The managing authority shall provide detailed and updated functional and technical documentation on the operation and characteristics of the system, accessible on request by relevant entities responsible for the management of the programme, by the Commission and the European Court of Auditors.

The documentation referred to in the first paragraph shall provide evidence of the implementation of Regulation (EU) No 1303/2013 in the Member State concerned.

Article 11 Security of information exchange

The system used shall be protected by adequate security measures concerning document classification, protection of information systems and personal data protection. These measures shall comply with international standards and national legal requirements.

The security measures referred to in the first paragraph shall protect networks and transmission facilities where the system interacts with other modules and systems.

Article 12 Entry into force

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

(1)

Decision No 922/2009/EC of the European Parliament and of the Council of 16 September 2009 on interoperability solutions for European public administrations (ISA) (OJ L 260, 3.10.2009, p. 20).

(2)

Commission Delegated Regulation (EU) No 480/2014 of 3 March 2014 supplementing Regulation (EU) No 1303/2013 of the European Parliament and of the Council laying down common provisions on the European Regional Development Fund, the European Social Fund, the Cohesion Fund, the European Agricultural Fund for Rural Development and the European Maritime and Fisheries Fund and laying down general provisions on the European Regional Development Fund, the European Social Fund, the Cohesion Fund and the European Maritime and Fisheries Fund (OJ L 138, 13.5.2014, p. 5).