26 Amendments of Caterina CHINNICI related to 2017/0145(COD)
Amendment 58 #
Proposal for a regulation
Recital 17
Recital 17
(17) The Agency should be responsible for carrying out pilot projects, in accordance with Article 54(2)(a) of Regulation (EU, Euratom) No 966/2012 of the European Parliament and of the Council60 . The Agency may in addition be entrusted by the Commission, following the approval of the budgetary authority, with budget implementation tasks for proofs of concept funded under the instrument for financial support for external borders and visa provided for in Regulation (EU) No 515/2014 of the European Parliament and of the Council61 in accordance with Article 58(1)(c) of Regulation (EU, Euratom) No 966/2012. The Agency may also plan and implement testing activities on matters strictly covered by this Regulation and the legislative instruments governing the development, establishment, operation and use of the large-scale IT systems managed by the Agency. When tasked with carrying out a pilot project, the Agency should pay particular attention to the European Union Information Management Strategy. _________________ 60 Regulation (EU, Euratom ) No 966/2012 of the European Parliament and of the Council of 25 October 2012 on the financial rules applicable to the general budget of the Union and repealing Council Regulation (EC, Euratom) No 1605/2002 (OJ L 298, 26.10.2012, p. 1). 61 Regulation (EU) No 515/2014 of the European Parliament and of the Council of 16 April 2014 establishing, as part of the Internal Security Fund, the instrument for financial support for external borders and visa and repealing Decision No 574/2007/EC (OJ L 150, 20.5.2014, p. 143).
Amendment 64 #
Proposal for a regulation
Recital 21
Recital 21
Amendment 67 #
Proposal for a regulation
Recital 23
Recital 23
(23) The Member States and the Commission should be represented on a Management Board, in order to control the functions of the Agency effectively. The Management Board should be entrusted with the necessary functions, in particular to adopt the annual work programme, carry out its functions relating to the Agency’s budget, adopt the financial rules applicable to the Agency, appoint an Executive Director and establish procedures for taking decisions relating to the operational tasks of the Agency by the Executive Director. Following the appropriate selection procedure organised by the Commission, and following a hearing of the proposed candidates in the competent Committee(s) of the European Parliament, the Management Board should also appoint the Executive Director. The Agency should be governed and operated taking into account the principles of the Common approach on Union decentralised agencies adopted on 19 July 2012 by the European Parliament, the Council and the Commission.
Amendment 76 #
Proposal for a regulation
Recital 32
Recital 32
(32) Member States should appoint a Member to the Advisory Group concerning a large-scale IT system, if they are bound under Union law by any legislative instrument governing the development, establishment, operation and use of that particular system. Denmark should, in addition, appoint a Member to the Advisory Group concerning a large-scale IT system, if it decides under Article 4 of the Protocol No 22 on the position of Denmark to implement the legislative instrument governing the development, establishment, operation and use of that particular system in its national law.
Amendment 87 #
Proposal for a regulation
Article 2 – paragraph 1 – point a
Article 2 – paragraph 1 – point a
(a) the development of large-scale scale IT systems using an adequate project management structure for efficiently developing large-scale IT systems;
Amendment 90 #
Proposal for a regulation
Article 2 – paragraph 1 – point f
Article 2 – paragraph 1 – point f
(f) a high level of data protection, in accordance with the applicable rules, including specific provisions for each large-scale IT systemUnion data protection rules;
Amendment 92 #
Proposal for a regulation
Article 2 – paragraph 1 – point g
Article 2 – paragraph 1 – point g
(g) an appropriate level of data and physical security, in accordance with the applicable rules, including specific provisions for each large-scale IT systemsecurity, including the implementation of a proper Information Security Risk Management Process (ISRM).
Amendment 94 #
Proposal for a regulation
Article 7 – paragraph 3
Article 7 – paragraph 3
3. Appropriate measures including security plans relation to security, including an Information Security Risk Management Process (ISRM), shall be adopted by the Agency inter alia, to prevent the unauthorised reading, copying, modification or deletion of personal data during transfers of personal data or transport of data media, in particular by means of appropriate encryption techniques. All system-related operational information circulating in the communication infrastructure shall be encrypted.
Amendment 101 #
Proposal for a regulation
Article 8 – paragraph 1
Article 8 – paragraph 1
The Agency, together with the Commission, shall work towards establishing for all systems under the Agency's operational responsibility, automated data quality control mechanisms and common data quality indicators and towards developing a central repository containing only anonymised data for reporting and statistics, subject to specific legislative amendments to the existing systems' instruments and/or to specific provisions in new instruments.
Amendment 105 #
Proposal for a regulation
Article 9 – paragraph 1
Article 9 – paragraph 1
Amendment 112 #
Proposal for a regulation
Article 11 – paragraph 3
Article 11 – paragraph 3
3. At the request of the Commission or the Council, with the approval of the European Parliament, and after a decision of the Management Board the Agency may be entrusted with budget implementation tasks for proofs of concept funded under the instrument for financial support for external borders and visa provided for in Regulation (EU) No 515/2014 in accordance with Article 58(1)(c) of Regulation (EU, Euratom) No 966/2012, by way of a delegation agreement.
Amendment 114 #
Proposal for a regulation
Article 11 – paragraph 4
Article 11 – paragraph 4
4. The Agency may plan and implement testing activities on matters covered by this Regulation and the legislative instruments governing the development, establishment, operation and use of all large-scale IT systems managed by the Agency after a decision of the Management Board.
Amendment 119 #
Proposal for a regulation
Article 12 – paragraph 2
Article 12 – paragraph 2
Amendment 129 #
Proposal for a regulation
Article 15 – paragraph 1 – point i a (new)
Article 15 – paragraph 1 – point i a (new)
(ia) adopt detailed internal procedures to protect whistle blowers, including appropriate channels of communication for reporting misconduct,
Amendment 132 #
Proposal for a regulation
Article 15 – paragraph 1 – point y
Article 15 – paragraph 1 – point y
(y) adopt the necessary security measures, including a security planproper Information Security Risk Management Process (ISRM) and a business continuity and disaster recovery plan, taking into account the possible recommendations of the security experts present in the Advisory Groups;
Amendment 134 #
Proposal for a regulation
Article 15 – paragraph 1 – point y a (new)
Article 15 – paragraph 1 – point y a (new)
(ya) adopt internal rules for monitoring any use of and access to large-scale IT systems by the staff of the Agency.
Amendment 137 #
3. The term of office of the members and their alternates shall be four years, extendablrenewable once. Upon expiry of their term of office or in the event of their resignation, members shall remain in office until their appointments are renewed or until they are replaced.
Amendment 142 #
Proposal for a regulation
Article 21 – paragraph 1
Article 21 – paragraph 1
1. The Executive Director shall manage the Agency and shall be completely independent in the performance of his or her duties. The Executive Director shall assist and be accountable to the Management Board. The Executive Director shall report to the European Parliament on the performance of his or her duties when invited to do so. The Council may invite the Executive Director to report on the performance of his/her duties.
Amendment 146 #
Proposal for a regulation
Article 21 – paragraph 3 – point r
Article 21 – paragraph 3 – point r
(r) preparing the necessary security measuresplan, including a security plan,proper Information Security Risk Management Process (ISRM) and a business continuity and disaster recovery plan, and submitting them to the Management Board for adoption;
Amendment 147 #
Proposal for a regulation
Article 22 – paragraph 1
Article 22 – paragraph 1
Amendment 148 #
Proposal for a regulation
Article 22 – paragraph 2
Article 22 – paragraph 2
2. Before appointment, the candidate selected by the Management Boards proposed by the Commission shall be invited to make a statement before the competent committee(s) of the European Parliament and answer questions from the committee members. After the statement, the European Parliament shall adopt an opinion setting out its view of the selected candidate and send it to the Management Board. The Management Board shall inform the European Parliament of the manner in which that opinion has been taken into account. The opinion shall be treated as personal and confidential until the appointment of theand may indicate a preferred candidate.
Amendment 150 #
Proposal for a regulation
Article 22 – paragraph 2 a (new)
Article 22 – paragraph 2 a (new)
2a. The Management Board shall appoint the Executive Directive taking these views into account. The Management Board shall take its decision by a two-thirds majority of all its members with a right to vote.
Amendment 151 #
Proposal for a regulation
Article 22 – paragraph 2 b (new)
Article 22 – paragraph 2 b (new)
2b. If the Management Board takes a decision to appoint a candidate other than the candidate whom the European Parliament indicated as its preferred candidate, the management board shall inform the European Parliament and the Council in writing of the manner in which the opinion of the European Parliament was taken into account.
Amendment 156 #
Proposal for a regulation
Article 23 – paragraph 2 – subparagraph 2
Article 23 – paragraph 2 – subparagraph 2
Amendment 161 #
Proposal for a regulation
Article 25 – paragraph 2
Article 25 – paragraph 2
The list of members of the Management Board and of Members of the Advisory Groups shall be published on the Agency’s Internet site.
Amendment 168 #
Proposal for a regulation
Article 35 – paragraph 1
Article 35 – paragraph 1
1. No later than fiveour years from the entry into force of this Regulation, and every fiveour years thereafter, the Commission shall assess the Agency's performance in relation to its objectives, mandate, tasks and locations in accordance with the Commission's guidelines. The evaluation shall also assess the contribution of the Agency to the establishment of a coordinated, cost-effective and coherent IT environment at Union level for the management of large scale IT systems supporting the implementation of Justice and Home Affairs (JHA) policies. The evaluation shall in particular assess the possible need to modify the mandate of the Agency and the financial implications of any such modification.