Commission Delegated Regulation (EU) 2021/2223 of 30 September 2021 supplementing Regulation (EU) 2019/817 of the European Parliament and of the Council with detailed rules on the operation of the central repository for reporting and statistics

Article 1

Definitions

For the purposes of this Regulation, the following definitions apply:

(1) ‘statistical data’ means the data, which is anonymised and used solely for the purpose of producing statistical reports pursuant to Regulation (EC) No 767/2008 of the European Parliament and of the Council (¹), Regulations (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1860, (EU) 2018/1861, (EU) 2018/1862, (EU) 2019/816, and Regulations (EU) 2024/982 (²), (EU) 2024/1358 (³), (EU) 2025/12 (⁴) and (EU) 2025/13 (⁵), of the European Parliament and of the Council;

(2) ‘(statistical) reports’ means an organised collection of statistical data, produced by the central repository in an automated manner according to a set of pre-established rules and stored in the central repository;

(3) ‘customisable reports’ means statistical reports that are extracted on the basis of statistical data contained in the central repository in accordance with specific rules determined ad hoc by a user and stored in the central repository;

(4) ‘critical identity data’ means any of the following data or a combination thereof, from which individuals can be identified: (a) name, first name, surname, family name, given names, alias of any person whose data may be stored in any EU information system; (b) number of travel document; (c) address (street name, house number); (d) telephone, IP address; (e) email addresses; (f) biometric data.

Article 2

Information to be contained in the central repository

The central repository shall enable the duly authorised staff of the competent authorities referred to in Article 39(2) of Regulation (EU) 2019/817 to obtain the following:

(a) reports pursuant to Article 63 of Regulation (EU) 2017/2226, containing the following statistics on records kept in the Entry/Exit System: (i) customisable reports and statistics on entries and exits, refusals of entry and overstays of third-country nationals; (ii) daily statistics on overstayers, third-country nationals who were refused entry, third-country nationals whose authorisation for stay was revoked or extended and third country nationals exempt from the requirement to give fingerprints; (iii) customisable reports and statistics on data quality pursuant to Article 38(4) of Regulation (EU) 2017/2226 and regular statistics for ensuring the monitoring by eu-LISA of the development and the functioning of the Entry/Exit System referred to in Article 72(1) of that Regulation;

(b) reports pursuant to Article 84 of Regulation (EU) 2018/1240, containing the following statistics on the records kept in the European Travel Information and Authorisation System (ETIAS): (i) daily statistics on the number and nationality of applicants whose travel authorisation was issued or refused, including the grounds for refusal, and of third-country nationals whose travel authorisation was annulled or revoked; (ii) customisable reports and statistics to improve the assessment of security, illegal immigration and high epidemic risks, to enhance the efficiency of border checks, to help the ETIAS Central Unit and the ETIAS National Units process travel authorisation applications and to support evidence-based Union migration policy-making; (iii) statistical data concerning the ETIAS watchlist pursuant to Article 92(4) of that Regulation; (iv) regular statistics for ensuring the monitoring by eu-LISA of the development and the functioning of the ETIAS Information System pursuant to Article 92(1) of that Regulation;

(c) reports pursuant to Article 33(2) of Regulation (EU) 2018/1240, containing the following statistics: (i) those generated by the Entry/Exit System indicating abnormal rates of overstaying and refusals of entry for a specific group of travellers; (ii) those generated by the European Travel Information and Authorisation System pursuant to Article 84 of that Regulation indicating abnormal rates of refusals of travel authorisations due to a security, illegal immigration, or high epidemic risk associated with a specific group of travellers; (iii) those generated by the European Travel Information and Authorisation System pursuant to Article 84 of that Regulation and the Entry/Exit System indicating correlations between information collected through the application form and overstaying by travellers or refusals of entry;

(d) reports pursuant to Article 16 of Regulation (EU) 2018/1860, containing daily, monthly and annual statistics showing the number of records per category of alerts, both for each Member State and in aggregate;

(e) reports pursuant to Regulation (EU) 2018/1861, containing the following statistics on the records kept in the Schengen Information System: (i) daily, monthly and annual statistics showing the number of records per category of alerts, both for each Member State and in aggregate, pursuant to Article 60(3) of that Regulation; (ii) annual reports on the number of hits per category of alert, how many times the Schengen Information System was searched and how many times it was accessed for the purpose of entering, updating or deleting an alert, both for each Member State and in aggregate, pursuant to Article 60(3) of Regulation (EU) 2018/1861 and Article 19 of Regulation (EU) 2018/1860; (iii) at the request of the Commission, additional specific statistical reports, either on a regular or ad hoc basis, on the performance and the use of the Schengen Information System and on the exchange of supplementary information, pursuant to Article 60(5), second subparagraph of Regulation (EU) 2018/1861 and Article 19 of Regulation (EU) 2018/1860; (iv) at the request of the European Border and Coast Guard Agency, additional specific statistical reports, either on a regular or ad hoc basis, for the purpose of carrying out risk analyses and vulnerability assessments, pursuant to Article 60(5), third subparagraph of Regulation (EU) 2018/1861 and Article 19 of Regulation (EU) 2018/1860; (v) reports and statistics for the purposes of technical maintenance, reporting, data quality reporting and statistics pursuant to Article 60(2) of Regulation (EU) 2018/1861 and Article 19 of Regulation (EU) 2018/1860; (vi) reports on data quality issues pursuant to Article 15(4) of Regulation (EU) 2018/1861 and Article 19 of Regulation (EU) 2018/1860;

(f) reports pursuant to Article 17 of Regulation (EC) No 767/2008;

(g) statistics pursuant to Article 45a(1) of Regulation (EC) No 767/2008;

(h) reports pursuant to Article 45a of Regulation (EC) No 767/2008, containing the following statistics on the records kept in the Visa Information System: (i) daily reports and statistics, and quarterly customised reports in accordance with Article 45a(4) of Regulation (EC) No 767/2008, on airport transit visas, short-stay visas; (ii) quarterly statistics on the long-stay visas applied for, issued, refused, withdrawn, revoked, annulled and extended, and on the residence permits applied for, issued, refused, withdrawn, revoked, annulled and renewed, in accordance with Article 45a(5) of Regulation (EC) No 767/2008; (iii) regular statistics for ensuring the monitoring by eu-LISA of the development and the functioning of the Visa Information System referred to in Articles 45a(3) and 50(1) of Regulation (EC) No 767/2008;

(i) reports pursuant to Article 9j(2) of Regulation (EC) No 767/2008, containing the following statistics: (i) statistics generated by the EES indicating abnormal rates of overstayers and refusals of entry for a specific group of visa holders; (ii) statistics generated by the VIS in accordance with Article 45a of Regulation (EC) No 767/2008 indicating abnormal rates of refusals of visa applications due to an irregular migration, security or public health risk associated with a specific group of visa holders;

(j) statistics generated by the VIS in accordance with Article 45a of Regulation (EC) No 767/2008 and the EES indicating correlations between information collected through the application form and overstaying by visa holders or refusals of entry;

(k) reports pursuant to Article 38 of Regulation (EU) 2025/12, containing the following statistics: (i) quarterly statistics on the functioning of the router and on compliance of air carriers with the obligations set out in Regulation (EU) 2025/12; (ii) statistical information necessary for the reporting referred to in Article 45 of Regulation (EU) 2025/12 and for generating statistics in accordance with Article 38(5) of Regulation (EU) 2025/12; (iii) regular statistics for ensuring the monitoring by eu-LISA of the development and the functioning of the router in accordance with Article 38(8) of Regulation (EU) 2025/12.

Article 3

Data repository and reporting tool

Article 4

Data extraction

The central repository shall obtain from the EU information systems read-only copies of the data referred to in Article 39(2) and Article 66(1), (2) and (3) of Regulation (EU) 2019/817 in order to produce the statistics and reports referred to in Articles 39 and 66 of that Regulation. The data shall be obtained on a regular basis and at least daily, by means of one-way extraction.

Article 5

Data anonymisation tool

Article 6

Access

Access to the central repository shall be logged. The information logged shall contain at least:

(a) a timestamp;

(b) authority;

(c) type of the report concerned.

Any conflicting roles within the central repository shall be identified and access shall be granted in accordance with the following principles:

(a) ‘need-to-know’;

(b) least privilege access;

(c) segregation of duties.

Article 7

Data processor

For the purpose of anonymising personal data pursuant to Article 5, eu-LISA shall be the data processor within the meaning of Article 3, point (12) of Regulation (EU) 2018/1725.

Article 8

Other data protection and security aspects

Article 9

Entry into force

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in the Member States in accordance with the Treaties.