FantasticSearch

1. The eFTI platforms used for processing regulatory information shall provide functionalities that ensure that:

(a) personal data can be processed in accordance with Regulation (EU) 2016/679;

(b) commercial data can be processed in accordance with Article 6;

(c) competent authorities can access and process data in accordance with the specifications adopted by means of delegated and implementing acts referred to in Articles 7 and 8;

(d) the economic operators concerned can make information available to competent authorities in accordance with Article 4;

(e) a unique electronic identifying link can be established between a shipment and the related data elements, including a structured reference to the eFTI platform where the data is made available, such as a unique reference identifier;

(f) data can be processed solely on the basis of authorised and authenticated access;

(g) all data processing is duly recorded in operation logs in order to allow, as a minimum, the identification of each distinct processing operation, the natural or legal person having made the operation and the sequencing of the operations on each individual data element; if an operation involves modifying or erasing an existing data element, the original data element shall be preserved;

(h) data can be archived and remain accessible for competent authorities in accordance with the relevant Union legal acts and national law laying down the respective regulatory information requirements;

(i) the operation logs referred to in point (g) of this paragraph are archived and remain accessible for competent authorities for auditing purposes for the period of time specified in the relevant Union legal acts and national law laying down the respective regulatory information requirements and, for monitoring purposes, for the periods of time referred to in Article 17;

(j) data is protected against corruption and theft;

(k) the data elements processed correspond to the eFTI common data set and to eFTI data subsets as established by the delegated acts referred to in Article 7, and can be processed in any of the official languages of the Union as provided for by the relevant Union legal acts and national law laying down the respective regulatory information requirements.

2. The Commission shall adopt implementing acts laying down detailed specifications regarding the requirements set out in paragraph 1 of this Article. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 15(2). When adopting those specifications, the Commission shall:

(a) seek to ensure the interoperability of the eFTI platforms;

(b) take into account relevant existing technical solutions and standards;

(c) ensure that those specifications remain, to the largest extent possible, technologically neutral. The first such implementing act shall cover all the elements referred to in paragraph 1 of this Article and shall be adopted no later than 21 August 2023.

3. By way of derogation from paragraph 2, elements referred to in paragraph 1 that are specifically related to the processing of regulatory information in relation to requirements set out in the provisions referred to in point (iv) of Article 2(1)(a) shall be adopted no later than the date referred to in Article 27(5) of Regulation (EU) 2024/1157.