The European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) is an agency of the European Union (EU) that was founded in 2011 to ensure the uninterrupted operation of large-scale IT systems within the area of freedom, security and justice (AFSJ), that are instrumental in the implementation of the asylum, border management and migration policies of the EU.[1] It began its operational activities on 1 December 2012.[1] The current establishing regulation[2] entered into force on 11 December 2018, repealing the previous regulation and expanding the Agency's mandate. The new mandate strengthens the Agency's capacity to improve, design and develop information systems for European security, border management and migration, and broadens the scope of the Agency's work on research, innovation, testing and on the possibility to support the development of pilot projects and proofs of concept.[3]
eu-LISA's headquarters are in Tallinn, Estonia, whilst its operational centre is in Strasbourg, France.[1] In addition, eu-LISA also has a technical backup site in St Johann im Pongau, Austria, and a liaison office in Brussels, Belgium.[3] The current executive director is Agnes Diallo, who assumed her role in March 2023.[4]
Mandate
eu-LISA and the AFSJ Information Systems
eu-LISA has played a critical role in the operational management of large-scale IT systems and databases vital for the security of the European Union. These include the already existing Eurodac, SIS and VIS systems, as well as systems currently under development, such as ECRIS-TCN, EES and ETIAS. These systems, and the interoperability they provide, promise to change the landscape of the Justice and Home Affairs (JHA) area in Europe. The technologies being developed by eu-LISA will help the move away from the current outdated silo solutions and move towards the new holistic approaches that still fully respect the original objectives and data protection guarantees of the individual systems. eu-LISA works closely with Member States, the European Institutions and other AFSJ Agencies to ensure that the technical and procedural solutions applied optimally cover business requirements while remaining technically feasible. The eu-LISA ensures that the freedom, security, and justice management systems in Europe will be conserved for generations to come.[6]
eu-LISA aims to ensure the interoperability and compliance with data protection standards of all IT system under its management, whilst providing improved and secure access to EU Member State authorities to information stored at EU-level.[1][7] Iceland, Liechtenstein, Norway, and Switzerland have signed agreements to become associated states with the agency.[8]
eu-LISA is responsible for following AFSJ Information Systems:
The European Dactyloscopy Database (Eurodac), managed by eu-LISA, assists in the processing of European asylum applications. It is a centralised database that collects and handles the digitalised fingerprints of asylum seekers and irregular migrants. It helps determine the Member State responsible for examining an asylum application. National asylum authorities use Eurodac to store new fingerprints and compare existing records on asylum seekers. This aids the detection of multiple asylum applications and thus reduces “asylum shopping”. Law enforcement authorities and Europol can also access the system – under strict conditions – to prevent, detect and investigate terrorist and other serious criminal offences.[6]
New legislative proposals foresee extending the scope of Eurodac to allow for the storage of, and the possibility to search by, biometric data of irregular migrants found illegally staying in the EU, thus facilitating returns. Reinforcing Eurodac will ensure the system will continue to be a valuable tool for officers deployed at borders and hotspots.[6]
The Schengen Information System (SIS) is a large-scale IT system, managed by eu-LISA, which supports internal security and the exchange of information on persons and objects between national police, border control, customs, visa and judicial authorities. Since the Schengen area has no internal borders, SIS assists national authorities in sharing information with their European counterparts whilst performing border checks, and in the fight against cross-border crime and terrorism, all of which with respect to the latest EU data protection requirements. In 2018, eu-LISA launched the Automated Fingerprint Identification System (AFIS), which introduced a biometric search capability in SIS, allowing for the identification of persons of interest solely using fingerprints.[9]
The latest legislation foresees improvements within SIS to better address counter-terrorism and irregular migration. A more extensive use of biometric data and the creation of new categories of alerts, as well as the inclusion of more items in the already existing categories, is also foreseen. Wider access to Europol and access for Frontex hotspot teams is also a part of the legislation.[9]
The Visa Information System (VIS) is a large-scale IT system, managed by eu-LISA, which supports the implementation of the European Union’s common visa policy and facilitates border checks and consular cooperation in Europe. The system enables dedicated national authorities to enter and consult data, including biometrics, for short-stay visas for the Schengen Area. The system helps reduce “visa shopping” and irregular migration and contributes to the prevention of threats to the internal security of Member States. VIS provides quicker and clearer procedures for travellers requiring a visa to enter the Schengen Area. The system assists authorities in processing asylum applications and identifying persons who may not, or may no longer, fulfil the conditions to enter or stay in the Schengen area.[10]
The European Commission has proposed changes to legislation that will expand the scope of VIS by adding long stay-visas and residence permits to the system. Said proposals will also allow for more thorough background checks on visa applicants, thus closing security information gaps through better information exchange between Member States.[10]
The Entry/Exit System (EES) is a new large-scale IT system being developed by eu-LISA that will enable the recording of entry and exit of third country nationals (TCN) to and from the Schengen Area. The system will replace the current practice of manual stamping of passports with electronic registration in a central database of biographic and biometric information, as well as the date and place of entry/exit for visits up to 90 days.[11]
The system aims to modernise and increase automation at border controls, to strengthen internal security and fight terrorism and organised crime. This will help Member States to deal with ever-increasing traveller flows without having to supplement the number of border guards. EES will allow for better monitoring of authorised stays and the identification of possible over-stayers.[11]
The European Travel Information and Authorisation System (ETIAS) is a new IT system for EU border management being developed by eu-LISA, which will improve the security and safety aspects of travelling to or through the Schengen Area. Once operational, ETIAS will require that all visa-exempt third country nationals planning to travel to the Schengen Area apply for pre-travel authorisation online. Similar to systems already existing in the USA, Canada and Australia, a valid passport, a credit card and minimal personal information will be needed. The information submitted will be automatically processed against existing EU databases (Eurodac, SIS and VIS), future systems EES and ECRIS-TCN, and relevant Interpol databases. This will enable advance verification of potential security, irregular migration and public health risks.[12]
The ETIAS will reduce procedures and bordercrossing times, strengthen border management, reinforce the EU’s visa liberalisation policy, help prevent irregular migration and fortify the fight against terrorism and organised crime.[12]
Sources:[1][7]
The European Criminal Records Information System – Third Country Nationals (ECRIS-TCN), to be developed by euLISA, will be a centralised hit/no-hit system to supplement the existing EU criminal records database (ECRIS) on non-EU nationals convicted in the European Union. Once operational, it will allow Member States to quickly find out in which other Member State(s) information on previous convictions of a non-EU national is stored.[13]
The system will provide judges, prosecutors and other relevant authorities with easy access to comprehensive information on an individual’s criminal history, no matter in which Member State that person was convicted in the past. Efficient exchange of criminal records information is instrumental in combating cross-border crime. ECRIS-TCN will contribute to implementing the principle of mutual recognition of sentences and judicial decisions in a common area of justice and security where people move freely, such as the Schengen Area. The ECRIS-TCN System is scheduled to be ready in conjunction with the roll-out of the components required to implement interoperability.[13]
CEAS - the Common European Asylum System
