Regulation (EU) 2023/2667 of the European Parliament and of the Council of 22 November 2023 amending Regulations (EC) No 767/2008, (EC) No 810/2009 and (EU) 2017/2226 of the European Parliament and of the Council, Council Regulations (EC) No 693/2003 and (EC) No 694/2003 and Convention implementing the Schengen Agreement, as regards the digitalisation of the visa procedure

• (i) an external service provider gateway;

• (j) a configuration module for eu-LISA, central authorities and consulates;

• (k) software to generate and read encrypted 2D barcode;

• (l) a secure web service enabling the components of the EU VAP to communicate;

• (m) a helpdesk function to be managed by eu-LISA;

• (n) read-only copy of VIS database.;

• (o) a functionality allowing the applicant to print documents;

• (p) a chatbot;

• (q) a secured communication infrastructure for Member States to access the EU VAP.

1. A Member State which does not yet apply the Schengen acquis in full may request eu-LISA to introduce links to the relevant national application procedure of the Member State concerned through the inclusion of a Uniform Resource Locator (URL) in the website referred to in paragraph 6 point (a).’

;

• (2) Article 4 is amended as follows:

• (a) point 2 is replaced by the following:

• ‘2. “digital visa” means the visa issued in digital format referred to in Article 26a of Regulation (EC) No 810/2009 in accordance with Regulation (EC) No 1683/95;’;

• (b) the following points are added:

• ‘24. “read-only copy of VIS database” means a subset of VIS data relevant for the purpose of this Regulation with exception of biometric data;

• 1. “chatbot” means software that simulates human conversation through interaction by text or voice.’;

• (3) the following Chapter is inserted:

‘CHAPTER Ia

EU VISA APPLICATION PLATFORM (EU VAP)

Article 7a

Information available on the EU VAP

1. The EU VAP shall provide general information to the public as referred to in Article 47 of Regulation (EC) No 810/2009.

The Commission and the Member States shall be responsible for providing the information, in accordance with their respective responsibilities set out in paragraphs 3, 4 and 5 of this Article.

1. The EU VAP shall display the entry conditions laid down in Article 6 of Regulation (EU) 2016/399.

1. eu-LISA shall be responsible for publishing and updating the following general public information on the EU VAP upon receiving the following information from the Commission or the Member States:

• (a) the visa requirements, including visa lists, visa waiver agreements, waivers for diplomatic and service passports, and cases of possible suspension of visa-free travel, under Articles 3, 4, 5, 7 and 8 of Regulation (EU) 2018/1806 of the European Parliament and of the Council[^ntr3-L_202302667EN.000101-E0030] and Annexes I and II to that Regulation; as well as information under Directive 2004/38/EC of the European Parliament and of the Council[^ntr4-L_202302667EN.000101-E0031], an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens, and the Agreement on the withdrawal of the United Kingdom of Great Britain and Northern Ireland from the European Union and the European Atomic Energy Community[^ntr*5-L_202302667EN.000101-E0032] (“EU-UK Withdrawal Agreement”);

• (b) the amount of the visa fees as referred to in Article 16 of Regulation (EC) No 810/2009 and the amount of reduced or higher fees as applicable, such as:

• (i) in the case of a visa facilitation agreement, or a readmission-related measure stemming from Article 25a of that Regulation;

• (ii) where Directive 2004/38/EC applies;

• (iii) in the case of an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens, and

• (iv) where the EU-UK Withdrawal Agreement applies;

• (c) where applicable, harmonised lists of supporting documents, adopted in accordance with Article 14(5a) of Regulation (EC) No 810/2009;

• (d) where applicable, travel medical insurance requirements, in accordance with Article 15 of Regulation (EC) No 810/2009.

Where a Member State provides the information, eu-LISA shall configure the EU VAP upon confirmation of this information from the Commission.

1. The central authorities shall be responsible for entering the following elements into EU VAP:

• (a) locations of consulates and their territorial competence referred to in Article 6 of Regulation (EC) No 810/2009;

• (b) representation agreements or arrangements referred to in Article 8 of Regulation (EC) No 810/2009;

• (c) use of external service providers and their locations referred to in Article 43 of Regulation (EC) No 810/2009;

• (d) supporting documents referred to in Article 14 of Regulation (EC) No 810/2009, as well as those applicable pursuant to Directive 2004/38/EC and the EU-UK Withdrawal Agreement;

• (e) optional visa waivers referred to in Article 6 of Regulation (EU) 2018/1806;

• (f) optional visa fee waivers referred to in Article 16(5) Regulation (EC) No 810/2009.

1. The consulate or the central authorities of the competent Member State shall be responsible for entering the following elements into the EU VAP:

• (a) access rights of external service providers, including for the appointment tool;

• (b) the available appointments in the appointment tool and contact details of consulates and external service providers.

1. The EU VAP shall include a chatbot. The chatbot shall be designed to dialogue with its users by providing answers on the visa application procedure, the rights and obligations of applicants and visa holders, the entry conditions for third-country nationals, contact details, and data protection rules.

Article 7b

Application form

1. Without prejudice to Article 9(1b) of Regulation (EC) No 810/2009, each applicant shall submit an application referred to in Article 11 of that Regulation, using the EU VAP.

1. The EU VAP shall provide each applicant with the information as referred to in Articles 37 and 38.

1. Without prejudice to Article 7c, if applicable, the applicant shall provide the data in the application form as set out in Annex I of Regulation (EC) No 810/2009.

All such data shall be recorded and stored in the temporary storage capacity in accordance with the data retention periods set out in Article 7d.

1. The EU VAP shall contain a secure account service. The secure account service shall enable the applicant to keep the data provided for subsequent applications, but only if the applicant freely and explicitly consents to such storage, within the meaning of Article 4, point (11), of Regulation (EU) 2016/679.

The secure account service shall enable the applicant to submit the application in several steps.

1. The alphabetic characters in the data provided by the applicant in accordance with paragraph 3 shall be Latin alphabet characters.

1. On submission of the application, the EU VAP shall collect the IP address from which the application was submitted and add it to the data of the application file.

1. The Commission shall adopt delegated acts in accordance with Article 48a to supplement this Regulation by setting out simplified application forms in the EU VAP to be used in the procedures for confirmation of valid visas in a new travel document under Article 32a of Regulation (EC) No 810/2009 or for extension of visas under Article 33 of that Regulation, respectively, where those procedures are carried out using the EU VAP.

Article 7c

Specific provisions on the use of the EU VAP

1. A third-country national who is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, may lodge an application for a visa without using the EU VAP and shall be entitled to lodge the application in person at the consulate or at the external service providers premises, as that third-country national chooses.

1. Where a third-country national who is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, applies for a visa using the EU VAP, the application process shall be carried out in accordance with Directive 2004/38/EC or with an agreement between the Union and its Member States, on the one hand, and a third country on the other, that provides the right to free movement equivalent to that of Union citizens.

1. In particular, the EU VAP shall be designed so as to ensure that the following specific rules apply:

• (a) the visa fee shall be waived;

• (b) in the visa application form, the applicant shall not be required to provide the following personal data:

• (i) current occupation;

• (ii) employer and employer’s address and telephone number; or for students, name and address of educational establishment;

• (iii) surname and first name of the inviting person(s) in the Member State(s), if not applicable, name of hotel(s) or temporary accommodation(s) in the Member State(s);

• (iv) name and address of inviting company/organisation;

• (v) means of how the cost of travelling and living during the applicant’s stay is to be covered;

• (c) the applicant shall be able to submit documents establishing that he or she is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other; the applicant shall not be requested to submit supporting documents as referred to under Article 14 of Regulation (EC) No 810/2009 or proof of possession of adequate and valid travel medical insurance in accordance with Article 15 of that Regulation;

• (d) by way of derogation from Article 7d(7), the automated admissibility pre-check shall only verify whether:

• (i) all the required fields of the application form are filled in;

• (ii) proof is provided of holding a valid passport in accordance with Directive 2004/38/EC or with an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens;

• (iii) the biometric data of the applicant have been collected, if applicable;

• (e) where a visa is issued, in the notification laid down in Article 7g, the applicant shall receive a reminder that the family member of a citizen exercising the right to free movement who is in possession of a visa only has a right to enter if that family member is accompanied by or joining the Union citizen or other third-country national exercising his or her right to free movement.

1. Paragraphs 1 and 2 shall also apply where a third-country national who is a family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, requires a visa extension or a confirmation of the visa in a new travel document. The visa extension fee and the visa confirmation fee shall be waived.

1. Paragraphs 1 to 4 shall apply mutatis mutandis to family members of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made.

Article 7d

Application process using the EU VAP

1. Upon submission of the application form pursuant to Article 7b the EU VAP shall determine the type of visa applied for and conduct an automated competence pre-check to pre-determine the competent Member State on the basis of the number of days for the applicant’s intended stay and the Member State of first entry, provided by the applicant. However, the applicant may indicate that his or her application be processed by another Member State according to the main purpose of stay. This shall not preclude the manual verification of the competence by the Member States in accordance with Article 18(3) of Regulation (EC) No 810/2009.

The EU VAP shall enable applicants to indicate whether they are legally present, but not residing in a jurisdiction, as referred to in Article 6(2) of Regulation (EC) No 810/2009.

1. Applicants shall be able to use the EU VAP to submit an electronic copy of the travel document in digital format, as well as supporting documents and proof of travel medical insurance in digital format, as applicable, pursuant to Regulation (EC) No 810/2009 or Directive 2004/38/EC or an agreement between the Union and its Member States, on the one hand, and a third country, on the other, that provides the right to free movement equivalent to that of Union citizens.

1. Where applicable, the applicant shall be able to use the secure payment tool referred to in Article 7e to pay the visa fee through the EU VAP.

1. The EU VAP shall be able to check the read-only copy of VIS database to verify whether the applicant’s biometric identifiers were taken in the last 59 months and whether the applicant has already applied with the same travel document.

Where the applicant’s biometric identifiers were taken in the last 59 months and the applicant has already applied with the same travel document the EU VAP shall inform that applicant that no visit to the consulate or an external service provider is required to lodge the application.

Where the applicant’s biometric identifiers were not taken in the last 59 months or where the applicant has not already applied with the same travel document the EU VAP shall inform that applicant of the need to arrange a visit to the consulate or an external service provider, as required, to lodge the application.

1. If a visit to consulate or external service provider is required pursuant to Regulation (EC) No 810/2009, a Member State may decide to use the appointment tool referred to in Article 7e for that purpose.

1. The applicant shall submit the application, including the declaration of the authenticity, completeness, correctness and reliability of data.

1. After the applicant submits the application via the EU VAP, the EU VAP shall conduct an automated admissibility pre-check.

The automated admissibility pre-check shall verify whether:

• (a) the application has been lodged within the period referred to in Article 9(1) of Regulation (EC) No 810/2009, if applicable;

• (b) all the required fields of the application form are filled in;

• (c) proof is provided of holding a travel document in accordance with Article 12 of Regulation (EC) No 810/2009;

• (d) the biometric data of the applicant have been collected, if applicable;

• (e) the visa fee has been collected, if applicable.

1. If the application is admissible according to the automated admissibility pre-check, the EU VAP shall send a notification to the consulate or the central authorities of the Member State concerned with the combined result of the automated competence and admissibility pre-checks.

If the application is not admissible according to the automated admissibility pre-check, the EU VAP shall inform the applicant of which part of the application file is missing.

The EU VAP shall be designed so as to ensure that Article 19(4) of Regulation (EC) No 810/2009 can apply, in order to allow applications to be considered admissible.

1. Following the notification referred to in paragraph 8 of this Article, the consulate or the central authorities of the Member State concerned shall perform a manual verification of the competence, in accordance with Article 18(3) of Regulation (EC) No 810/2009, and subsequently if needed, a manual verification of admissibility in accordance with Article 19 of that Regulation.

1. If the competent consulate or the central authorities of the competent Member State accept the application submitted via the EU VAP the data shall be transferred to the national system from temporary storage. The data shall be immediately deleted from temporary storage, with the exception of contact data linked to the secure account service.

1. If, after the verification, the notified consulate or central authorities of the Member State find that they are not competent and the application is not re-submitted to the competent consulate or central authorities, Article 18(4) of Regulation (EC) No 810/2009 shall apply.

1. The competent consulate or the central authorities of the competent Member State may use the secure account service to communicate with the applicants.

1. In relation to the data transferred to the Member State referred to in paragraphs 10 and 11 of this Article, that Member State shall designate a competent authority which is to be considered as the data controller for the purposes of Article 4, point (7), of Regulation (EU) 2016/679 and which shall have central responsibility for the processing of data by that Member State.

Article 7e

Payment tool and appointment tool

1. A secure payment tool shall be used to pay the visa fee to the competent Member State via the EU VAP.

1. The appointment tool may be used by Member States or external service providers.

Where the appointment tool is used, the Member State shall be responsible for setting the available appointments.

Article 7f

External service provider gateway

1. External service providers shall have access to the EU VAP using the external service provider gateway only to:

• (a) verify and perform quality checks and pre-checks on the data uploaded in the temporary storage capacity, in particular the electronic copy of the travel document;

• (b) upload the biometric identifiers and check whether biometric identifiers are already available;

• (c) upload supporting documents, if needed;

• (d) use the appointment tool to indicate available appointments, if applicable;

• (e) forward the application to the consulate or the central authorities for further processing.

1. An authentication scheme, reserved exclusively for external service providers, shall be set up by Member States in order to allow access by the duly authorised staff members to the gateway for the purposes of this Article. When setting up the authentication scheme, information security risk management and the principles of data protection by design and by default shall be taken into account.

1. External service providers shall not have access to the VIS.

Article 7g

Notification of decisions

1. Once the competent authority has taken a decision on an application or on an issued visa and has made such a decision available in the secure account in accordance with paragraph 2, the EU VAP shall send the applicant or visa holder an electronic message, as defined in Regulation (EC) No 810/2009.

1. The competent authorities shall notify applicants and visa holders of decisions taken pursuant to points (a), (b) and (c) by making those decisions available in the respective secure accounts of the applicants and visa holders. Such notification shall include the following data:

• (a) for an issued, confirmed or extended visa: the data contained on the digital visa in accordance with the Annex to Regulation (EC) No 1683/95 and with the rules for filling in the data fields of the digital visa established under the procedure referred to in Article 27(1) of Regulation (EC) No 810/2009;

• (b) for the refusal of a visa: the data listed in Article 32 of Regulation (EC) No 810/2009 and Article 12 of this Regulation;

• (c) for an annulled or revoked visa: the data listed in Article 34 of Regulation (EC) No 810/2009 and Article 13 of this Regulation.

Article 7h

Verification tool

1. The verification tool shall allow applicants and visa holders to check the following:

• (a) the status of their application;

• (b) the status and validity of their visa.

1. The verification tool shall be based on the secure account service referred to in Article 7b(4).

1. The EU VAP shall offer a web-service functionality for applicants and other entities, such as employers or universities or local authorities, to verify the digital visa without the secure account service.

Article 7i

Costs of the development and implementation of the EU VAP

1. The development and implementation of the EU VAP shall comprise the following costs:

• (a) costs related to the development by eu-LISA of the EU VAP and of its interconnection with the national visa information systems, under strict cost control and monitoring,

• (b) costs related to the operation, including maintenance, by eu-LISA, of the EU VAP,

• (c) costs related to necessary adaptations by the Member States to existing national visa information systems.

1. Costs under paragraph 1, points (a) and (b), shall be borne by the general budget of the Union.

1. Member States may use the Instrument for Financial Support for Border Management and Visa Policy, which is part of the Integrated Border Management Fund, as established by the Regulation (EU) 2021/1148 of the European Parliament and of the Council[^ntr*6-L_202302667EN.000101-E0033] to finance the costs referred to in paragraph 1, point (c), in accordance with the eligibility rules and co-financing rates set out in Regulation (EU) 2021/1148.

Article 7j

Data protection responsibilities

1. Each Member State shall designate a competent authority as data controller in accordance with this Article. Member States shall communicate those authorities to the Commission, eu-LISA and the other Member States.

All the competent authorities designated by Member States shall be joint controllers in accordance with Article 26 of Regulation (EU) 2016/679 for the purposes of processing of personal data in the EU VAP.

1. eu-LISA shall be a processor in accordance with Article 28 of Regulation (EU) 2016/679 for the purposes of processing of personal data in the EU VAP. eu-LISA shall ensure that the EU VAP is operated in accordance with this Regulation.

[^ntr*3-L_202302667EN.000101-E0030]: Regulation (EU) 2018/1806 of the European Parliament and of the Council of 14 November 2018 listing the third countries whose nationals must be in possession of visas when crossing the external borders and those whose nationals are exempt from that requirement (OJ L 303, 28.11.2018, p. 39)."

[^ntr*4-L_202302667EN.000101-E0031]: Directive 2004/38/EC of the European Parliament and of the Council of 29 April 2004 on the right of citizens of the Union and their family members to move and reside freely within the territory of the Member States amending Regulation (EEC) No 1612/68 and repealing Directives 64/221/EEC, 68/360/EEC, 72/194/EEC, 73/148/EEC, 75/34/EEC, 75/35/EEC, 90/364/EEC, 90/365/EEC and 93/96/EEC (OJ L 158, 30.4.2004, p. 77)."

[^ntr*5-L_202302667EN.000101-E0032]: Agreement on the withdrawal of the United Kingdom of Great Britain and Northern Ireland from the European Union and the European Atomic Energy Community (OJ L 29, 31.1.2020, p. 7)."

[^ntr*6-L_202302667EN.000101-E0033]: Regulation (EU) 2021/1148 of the European Parliament and of the Council of 7 July 2021 establishing, as part of the Integrated Border Management Fund, the Instrument for Financial Support for Border Management and Visa Policy (OJ L 251, 15.7.2021, p. 48).’;"

• (4) in Article 9, the first paragraph is amended as follows:

• (a) in point (4), the following points are added:

• ‘(o) if applicable, the fact that the applicant applies as a family member of a UK national who is a beneficiary of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made;

• (p) email address and mobile phone number;

• (q) IP address from which the application form was submitted;

• (r) in the case of an application filled in by a duly authorised person other than the applicant on the EU VAP: email address, postal address and telephone number of that person, if available.’;

• (b) point (7) is replaced by the following:

• ‘7. an electronic copy of the biographic data page of the travel document and, if applicable, the data uploaded in accordance with Article 12(6), second subparagraph, of Regulation (EC) No 810/2009.’;

• (5) in Article 9b, the following paragraph is added:

‘5.   Paragraphs 1 to 4 shall apply mutatis mutandis to family members of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made.’

;

• (6) in Article 10, paragraph 1 is amended as follows:

• (a) the following point is inserted:

• ‘(db) if applicable, the information indicating that the visa has been issued with limited territorial validity pursuant to Article 25(1)(a), of Regulation (EC) No 810/2009;’;

• (b) point (e) is replaced by the following:

• ‘(e) number of the visa;’;

• (c) points (j) and (k) are deleted;

• (d) the following points are added:

• ‘(m) if applicable, the status of the person indicating that the third-country national is a member of the family of a UK national who is a beneficiary of the EU-UK Withdrawal Agreement in the host State, as defined in that Agreement, for which the visa application is made;

• (n) national entries in the “comments” section.’;

• (7) the following Article is inserted:

‘Article 12a

Data to be added for a visa confirmed

1. Where a decision has been taken to confirm a visa, the visa authority that has taken the decision shall add the following data to the application file:

• (a) status information;

• (b) authority that confirmed the visa;

• (c) place and date of the decision;

• (d) new travel document data, including number, issuing country and authority, issuing date, expiry date;

• (e) confirmation number;

• (f) an electronic copy of the biographic data page of the new travel document and, if applicable, the data uploaded in accordance with Article 12(6), second subparagraph, of Regulation (EC) No 810/2009.

1. Where a decision has been taken to confirm a visa, the EU VAP shall immediately retrieve and export from the VIS into the EES the data listed in Article 19(1) of Regulation (EU) 2017/2226.’

;

• (8) in Article 14(1), point (d) is replaced by the following:

• ‘(d) number of the extended visa;’;

• (9) in Article 15(2), point (f) is replaced by the following:

• ‘(f) the number of the visa, long-stay visa or residence permit and the date of issue of any previous visa, long-stay visa or residence permit;’;

• (10) Article 18 is amended as follows:

• (a) in paragraph 1, point (b) is replaced by the following:

• ‘(b) the number of the visa sticker or the number of the visa;’;

• (b) paragraph 3 is replaced by the following:

‘3.   By way of derogation from paragraph 2 of this Article, where a search is launched in the EES pursuant to Article 23(2) or (4) of Regulation (EU) 2017/2226, the competent border authority may search the VIS without making use of the interoperability with the EES, where specific circumstances so require, in particular, where it is technically impossible, on a temporary basis, to consult the EES data or in the event of a failure of the EES.’

;

• (11) the following Article is inserted:

‘Article 18e

Fall-back procedures in the case of a technical impossibility to access data at the external borders

1. Where it is technically impossible to proceed with the consultation referred to in Article 18 because of a failure of any part of the VIS, eu-LISA shall notify the border authorities of the Member States.

1. Where it is technically impossible to perform the search referred to in Article 18 because of a failure of the national border infrastructure in a Member State, the border authorities of that Member State shall notify the eu-LISA. eu-LISA shall then inform the Commission.

1. In cases referred to in paragraphs 1 and 2 of this Article, the border authorities shall follow their national contingency plans. Member States shall adopt their national contingency plans using the model contingency plans referred to in Article 45(2), point (o), as a basis, to be adapted as necessary at the national level. The national contingency plan may authorise the border authorities to derogate temporarily from the obligation to consult the VIS as referred to in Article 8 of Regulation (EU) 2016/399.’

;

• (12) in Article 19, paragraph 1 is replaced by the following:

‘1.   For the sole purpose of verifying the identity of the visa holder, the authenticity of the visa or whether the conditions for entry to, stay or residence on the territory of the Member States are fulfilled, the authorities competent for carrying out checks within the territory of the Member States as to whether the conditions for entry to, stay or residence on the territory of the Member States are fulfilled, shall have access to search with the number of the visa in combination with verification of fingerprints of the visa holder, or the number of the visa.

Where the identity of the visa holder cannot be verified with fingerprints, the competent authorities may also carry out the verification with the facial image.’

;

• (13) in Article 20(2), point (d) is replaced by the following:

• ‘(d) the data entered in respect of any visa issued, refused, confirmed, annulled, revoked or extended referred to in Articles 10 to 14.’;

• (14) in Article 21(2), point (d) is replaced by the following:

• ‘(d) the data entered in respect of any visa issued, confirmed, annulled, revoked or extended referred to in Articles 10, 12a, 13 and 14;’;

• (15) in Article 22(2), point (e) is replaced by the following:

• ‘(e) the data entered in respect of any visa issued, refused, confirmed, annulled, revoked or extended referred to in Articles 10, 12, 12a, 13 and 14;’;

• (16) in Article 22c, the following point is added:

• ‘(h) national entries in the “comments” section;’;

• (17) in Article 22f(1), point (d) is replaced by the following:

• ‘(d) the number of the visa;’;

• (18) in Article 22o, paragraph 3 is amended as follows:

• (a) point (c) is replaced by the following:

• ‘(c) number of the visa or number of the long-stay visa or residence permit and the date of expiry of the validity of the visa, long-stay visa or residence permit, as applicable;’;

• (b) the following points are added:

• ‘(f) IP address from which the application was submitted;

• (g) email address used for the application.’;

• (19) in Article 22r, paragraph 3 is amended as follows:

• (a) point (c) is replaced by the following:

• ‘(c) number of the visa or number of the long-stay visa or residence permit and the date of expiry of the validity of the visa, long-stay visa or residence permit, as applicable;’;

• (b) the following points are added:

• ‘(f) IP address from which the application was submitted;

• (g) email address used for the application;’;

• (20) in Article 26, the following paragraphs are added:

‘11.   The infrastructures supporting the EU VAP referred to in Article 2a shall be hosted in eu-LISA technical sites. Those infrastructures shall be geographically distributed to provide the functionalities laid down in this Regulation in accordance with the conditions of security, data protection and data security.

eu-LISA shall ensure that the future use of the EU VAP, provided for in Article 2a, by Member States which do not apply the Schengen acquis in full is taken into account in the development of the EU VAP. This concerns in particular the storage capacity of the EU VAP and interface with national visa information system.

1. eu-LISA shall be responsible for the technical development of the EU VAP referred to in Article 2a. eu-LISA shall define the technical specifications of the EU VAP. Those technical specifications shall be adopted by eu-LISA’s Management Board, provided that the Commission has communicated a favourable opinion on those technical specifications.

1. eu-LISA shall develop and implement the EU VAP as soon as possible after the entry into force of Regulation (EU) 2023/2667 of the European Parliament and of the Council[^ntr*7-L_202302667EN.000101-E0034] and the adoption by the Commission of:

• (a) the implementing acts provided for in Article 45(2), points (g) to (r) of this Regulation; and

• (b) the delegated acts provided for in Article 7b(7) of this Regulation.

1. eu-LISA shall be responsible for the operational management of the EU VAP.

The operational management of the EU VAP shall consist of all the tasks necessary to keep the EU VAP functioning 24 hours a day, 7 days a week in accordance with this Regulation. It shall consist, in particular, of the maintenance work and technical developments necessary to ensure that the EU VAP functions at a satisfactory level of operational quality.

The VIS Advisory Group referred to in Article 49a of this Regulation and in Article 27(1), point (b), of Regulation (EU) 2018/1726 of the European Parliament and of the Council[^ntr*8-L_202302667EN.000101-E0035] shall provide the Management Board of eu-LISA with expertise relating to the EU VAP.

During the designing and development phase of the EU VAP, a Programme Management Board composed of a maximum of ten members shall be established. It shall be composed of seven members appointed by eu-LISA’s Management Board from among its members or alternate members, the Chair of the VIS Advisory Group, a member representing eu-LISA appointed by its Executive Director and one member appointed by the Commission.

The Programme Management Board shall meet regularly and at least once per quarter. It shall ensure the adequate management of the design and development phase of the EU VAP and ensure consistency between central and national EU VAP projects.

The Programme Management Board shall submit written reports every month to eu-LISA’s Management Board on the progress of the project. The Programme Management Board shall have no decision-making power nor any mandate to represent the members of eu-LISA’s Management Board.

eu-LISA’s Management Board shall establish the rules of procedure of the Programme Management Board which shall include in particular rules on:

• (a) chairmanship;

• (b) meeting venues;

• (c) the preparation of meetings;

• (d) the admission of experts to meetings;

• (e) communication plans ensuring the provision of full information to non-participating members of eu-LISA’s Management Board.

The chairmanship of the Programme Management Board shall be held by a Member State which is fully bound under Union law by the legislative instruments governing the development, establishment, operation and use of all the large-scale IT systems managed by eu-LISA.

All travel and subsistence expenses incurred by the members of the Programme Management Board shall be paid by eu-LISA and Article 10 of the eu-LISA Rules of Procedure shall apply mutatis mutandis. eu-LISA shall provide the Programme Management Board with a secretariat.

[^ntr*7-L_202302667EN.000101-E0034]: Regulation (EU) 2023/2667 of the European Parliament and of the Council of 22 November 2023 amending Regulations (EC) No 767/2008, (EC) No 810/2009 and (EU) 2017/2226 of the European Parliament and of the Council, Council Regulations (EC) No 693/2003 and (EC) No 694/2003 and Convention implementing the Schengen Agreement, as regards the digitalisation of the visa procedure (OJ L, 2023/2667, 7.12.2023, ELI: http://data.europa.eu/eli/reg/2023/2667/oj)."

[^ntr*8-L_202302667EN.000101-E0035]: Regulation (EU) 2018/1726 of the European Parliament and of the Council of 14 November 2018 on the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA), and amending Regulation (EC) No 1987/2006 and Council Decision 2007/533/JHA and repealing Regulation (EU) No 1077/2011 (OJ L 295, 21.11.2018, p. 99).’;"

• (21) in Article 45(2), the following points are added:

• ‘(g) for laying down requirements concerning the format of the personal data referred to in Article 7b(3) and 7b(6) to be inserted in the online application form, in accordance with Article 7b, as well as parameters and verifications to be implemented for ensuring the completeness of the application and the coherence of those data;

• (h) for laying down the technical requirements concerning the format of supporting documents, travel medical insurance and copy of travel document in digital format to be provided via the EU VAP, in accordance with Articles 7c and 7d;

• (i) for laying down the requirements of the secure account service, including the arrangements for access and authentication, the retention period for data stored therein and for uncompleted applications or applications which do not pass the competence and admissibility check, in accordance with Article 7b;

• (j) for laying down the requirements concerning the payment tool, including the procedures for reimbursing applicants, in accordance with Article 7e;

• (k) for laying down the requirements concerning the appointment tool referred to in Article 7e(2), including the procedure for confirming of appointments, and the link to existing appointment tools or information on walk-in appointments to be configured by the consulates or external service providers, in accordance with Article 7e, as well as the technical arrangements to ensure that any family member of a Union citizen to whom Directive 2004/38/EC applies or of a third-country national enjoying the right to free movement equivalent to that of Union citizens under an agreement between the Union and its Member States, on the one hand, and a third country, on the other, or of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement in the host State, as defined in the EU-UK Withdrawal Agreement, for which the visa application is made can benefit from an accelerated procedure;

• (l) for laying down the authentication scheme for external service provider staff members using the external service provider gateway, in accordance with Article 7f;

• (m) for laying down technical specifications of the notifications, including details on their format and printable versions, in accordance with Article 7g;

• (n) for laying down detailed rules on the conditions for the operation of the web service and the data protection and security rules applicable to the web service, in accordance with Article 7h, including unique identifiers for applicants;

• (o) for laying down model contingency plans regarding fall-back procedures for the cases of a technical impossibility to access data at the external borders referred to in Article 18e(1) and (2), including the procedures to be followed by border authorities, in accordance with Article 18e;

• (p) for laying down the technical specifications and functionalities of the chatbot hosted by the EU VAP in accordance with Article 7a(6);

• (q) for specifying the responsibilities and the relationships between Member States as joint controllers for the processing of the personal data in EU VAP;

• (r) for specifying the relationship between the joint controllers and the processor, and the responsibilities of the processor.’;

• (22) in Article 48a(2), (3) and (6), the references to ‘Article 9, Article 9h(2), Article 9j(2) and Article 22b(18)’ are replaced by references to ‘Article 7b(7), Article 9, Article 9h(2), Article 9j(2) and Article 22b(18)’;

• (23) Article 50 is amended as follows:

• (a) the following paragraph is inserted:

‘3a.   After the date of start of operations of the EU VAP referred to in Article 2a(1), point (fa), the report on the technical functioning of the VIS referred to in paragraph 3 of this Article shall also include the technical functioning of the EU VAP.’

;

• (b) paragraphs 6 and 7 are replaced by the following:

‘6.   Member States shall provide eu-LISA and the Commission with the information necessary to draft the reports referred to in paragraphs 3, 4, 5 and 8.

1. eu-LISA shall provide the Commission with the information necessary to produce the overall evaluation referred to in paragraphs 5 and 8.’

;

• (c) the following paragraph is added:

‘8.   Three years after the date of start of operations of the EU VAP referred to in Article 2a(1), point (fa), of this Regulation, the Commission shall evaluate the operation of the EU VAP. That evaluation shall include an examination of the results achieved against objectives and of the implementation of Regulation (EC) No 810/2009 and this Regulation.

The Commission shall transmit the evaluation referred to in paragraph 1 to the European Parliament and the Council. On the basis of the evaluation, the Commission shall submit, where necessary, appropriate legislative proposals.’

.

Article 3

Amendments to Regulation (EC) No 694/2003

Regulation (EC) No 694/2003 is amended as follows:

• (1) Article 1 is replaced by the following:

‘Article 1

1. Facilitated Transit Documents (FTD) issued by the Member States as referred to in Article 2(1) of Regulation (EC) No 693/2003 shall be issued in digital format referred to in Regulation (EC) No 1683/95 and contain the data fields set out in Annex I to this Regulation. They shall have the same value as limited territorial validity visas with the purpose of transit. In addition, the digital format shall clearly indicate that the issued document is an FTD.

1. Facilitated Rail Transit Documents (FRTD) issued by the Member States as referred to in Article 2(2) of Regulation (EC) No 693/2003 shall be issued in digital format referred to in Regulation (EC) No 1683/95 and contain the data fields set out in Annex II to this Regulation. They shall have the same value as limited territorial validity visas with the purpose of transit. In addition, the digital format shall clearly indicate that the issued document is an FRTD.’

;

• (2) in Article 2(1), the introductory wording is replaced by the following:

‘1.   Technical specifications for the digital format for FTD and FRTD, including relating to the following, shall be established in accordance with the procedure referred to in Article 4(2):’

;

• (3) in Article 2(1), points (a) and (b) are replaced by the following:

• ‘(a) technical standards and methods for:

• (i) encoding the information contained in the digital FTD and digital FRTD in the form of a 2D barcode;

• (ii) the facial image;

• (b) specifications for generating the printable version of the digital FTD and digital FRTD;’;

• (4) in Article 2, paragraph 2 is replaced by the following:

‘2.   Commission may decide, by means of an implementing act, adopted in accordance with the examination procedure to be applied as referred to in Article 4(2) of this Regulation in conjunction with the transitional provision in Article 13(1), point (c), of Regulation (EU) No 182/2011 of the European Parliament and of the Council[^ntr*9-L_202302667EN.000101-E0036] that the technical specifications referred to in paragraph 1 of this Article are to be secret and not be published. In that case those technical specifications shall be made available only to persons duly authorised by a Member State or by the Commission.

[^ntr*9-L_202302667EN.000101-E0036]: Regulation (EU) No 182/2011 of the European Parliament and of the Council of 16 February 2011 laying down the rules and general principles concerning mechanisms for control by Member States of the Commission’s exercise of implementing powers (OJ L 55, 28.2.2011, p. 13).’;"

• (5) Article 3 is deleted;

• (6) in Article 5, the second sentence is deleted;

• (7) in Article 6, the first paragraph is replaced by the following:

‘Member States which have decided to do so shall issue the digital format for FTD and FRTD as referred to in Article 1 no later than one year after the adoption of the technical specifications referred to in Article 2.’;

• (8) Annexes I and II to Regulation (EC) No 694/2003 are replaced by the text set out in Annex II to this Regulation.

Article 4

Amendment to the Convention implementing the Schengen Agreement

Article 18 of the Convention implementing the Schengen Agreement is amended as follows:

• (1) paragraph 1 is replaced by the following:

‘1.   Visas for stays exceeding 90 days (long-stay visas) shall be national visas issued by one of the Member States in accordance with its national law or with Union law. Such visas shall be issued in digital format in accordance with Article 1 of Council Regulation (EC) No 1683/95¹, with the type of visa being indicated with the letter “D”.

Long-stay visas issued in digital format shall be filled out in accordance with the relevant provisions of the Commission implementing act setting out the rules for filling in the data fields of the visa, adopted in accordance with Article 27(1) of Regulation (EC) No 810/2009 of the European Parliament and of the Council².

• (2) the following paragraph is inserted:

‘1a.   Long-stay visas issued in digital format shall be communicated to applicants by electronic means by the competent authorities of the issuing Member State.’

.

Article 5

Amendments to Regulation (EC) No 693/2003

Regulation (EC) No 693/2003 is amended as follows:

• (1) in Article 2, paragraph 3 is replaced by the following:

‘3.   The FTD/FRTD shall be issued in digital format in accordance with Regulation (EC) No 694/2003.’

;

• (2) Article 5 is amended as follows:

• (a) in paragraph 1, the first sentence is replaced by the following:

‘The application for an FTD shall be submitted to the consular authorities of a Member State which has communicated its decision to issue the FTD/FRTD in accordance with Article 12.’;

• (b) the following paragraph is added:

‘5.   The application for an FTD/FRTD shall be carried out using an online application tool. The online application tool shall contain the data referred to in paragraphs 3 and 4.’

;

• (3) in Article 6, paragraphs 2, 3 and 4 are replaced by the following:

‘2.   No FTD/FRTD shall be issued for a travel document that has expired.

1. The period of validity of the travel document for which the FTD/FRTD is issued shall be longer than that of the FTD/FRTD.

1. No FTD/FRTD shall be issued for a travel document if that travel document is not valid for any of the Member States. If a travel document is only valid for one Member State or for a number of Member States, the FTD/FRTD shall be limited to the Member State or Member States in question.’

.

Article 6

Amendments to Regulation (EU) 2017/2226 of the European Parliament and of the Council ³⁰

Regulation (EU) 2017/2226 is amended as follows:

• (1) in Article 16(2), point (d) is replaced by the following:

• ‘(d) where applicable, the number of the short-stay visa, including the three-letter code of the issuing Member State, the type of short-stay visa, the end date of the maximum duration of the stay as authorised by the short-stay visa, which shall be updated at each entry, and the date of expiry of the validity of the short-stay visa;’;

• (2) Article 19 is amended as follows:

• (a) the title is replaced by the following:

‘Data to be added where an authorisation for short stay is revoked, annulled or extended and when a valid visa is confirmed in a new travel document’;

• (b) in paragraph 1, point (d) is replaced by the following:

• ‘(d) where applicable, the new number of the visa, including the three letter code of the issuing country;’;

• (c) the following paragraph is added:

‘7.   Where a decision has been taken to confirm a valid visa in a new travel document, the visa authority which has taken the decision shall immediately retrieve the data provided for in paragraph 1 of this Article from the VIS and import them directly into the EES in accordance with Articles 12a of Regulation (EC) No 767/2008.’

;

• (3) in Article 24(2), point (b) is replaced by the following:

• ‘(b) the number of the short-stay visa, including the three-letter code of the issuing Member State referred to in Article 16(2), point (d);’;

• (4) in Article 32(5), point (c) is replaced by the following:

• ‘(c) number of the visa and the date of expiry of the validity of the visa;’.

Article 7

Start of operations of the EU VAP

• (a) the implementing acts referred to in Article 45(2), points (g) to (r) of Regulation (EC) No 767/2008 and the delegated acts referred to in Article 7b(7) of that Regulation have been adopted;

• (b) eu-LISA has declared the successful completion of the comprehensive tests which are to be conducted by eu-LISA in cooperation with the Member States;

• (c) eu-LISA has validated the technical and legal arrangements, including that sufficient capacity and functionalities of the EU VAP exist, and notified them to the Commission.

During the transitional period of 7 years referred to in the first subparagraph, visa holders shall be able to verify the validity and the information in the digital visas using the web service of the EU VAP referred to in Article 7h of Regulation (EC) No 767/2008 if the Member State processing their visa application decided not to avail itself of the EU VAP.

The Commission shall determine the date from which that Member State shall avail itself of the EU VAP. The Commission decision shall be published in the Official Journal of the European Union.

Article 8

Entry into force and application

This Regulation shall be binding in its entirety and directly applicable in the Member States in accordance with the Treaties.

Done at Strasbourg, 22 November 2023.

For the European Parliament

The President

R. METSOLA

For the Council

The President

P. NAVARRO RÍOS

ANNEX I

Annex I to Regulation (EC) No 810/2009 is replaced by the following:

‘ANNEX I

Harmonised application form

Application for Schengen Visa

This application form is free

Image omitted; see official source  ³¹

Family members of EU, EEA or CH citizens or of UK nationals who are beneficiaries of the EU-UK Withdrawal Agreement shall not fill in fields No 21, 22, 30, 31 and 32 (marked with^*).

Fields 1–3 shall be filled in in accordance with the data in the travel document.