Aviation Security Aviation Security

This Regulation establishes common rules to protect civil aviation against acts of unlawful interference that jeopardise the security of civil aviation.

It also provides the basis for a common interpretation of Annex 17 to the Chicago Convention on International Civil Aviation.

The means of achieving the objectives set out in paragraph 1 shall be:

1. (a) the setting of common rules and common basic standards on aviation security;
2. (b) mechanisms for monitoring compliance.

This Regulation shall apply to the following:

1. (a) all airports or parts of airports located in the territory of a Member State that are not exclusively used for military purposes;
2. (b) all operators, including air carriers, providing services at airports referred to in point (a);
3. (c) all entities applying aviation security standards that operate from premises located inside or outside airport premises and provide goods and/or services to or through airports referred to in point (a).

The application of this Regulation to the airport of Gibraltar is understood to be without prejudice to the respective legal positions of the Kingdom of Spain and the United Kingdom with regard to the dispute over sovereignty over the territory in which the airport is situated.

For the purposes of this Regulation:

1. 1. ‘civil aviation’ means any air operation carried out by civil aircraft, excluding operations carried out by State aircraft referred to in Article 3 of the Chicago Convention on International Civil Aviation;
2. 2. ‘aviation security’ means the combination of measures and human and material resources intended to safeguard civil aviation against acts of unlawful interference that jeopardise the security of civil aviation;
3. 3. ‘operator’ means a person, organisation or enterprise engaged, or offering to engage, in an air transport operation;
4. 4. ‘air carrier’ means an air transport undertaking holding a valid operating licence or equivalent;
5. 5. ‘Community air carrier’ means an air carrier holding a valid operating licence granted by a Member State in accordance with Council Regulation (EEC) No 2407/92 of 23 July 1992 on licensing of air carriers;
6. 6. ‘entity’ means a person, organisation or enterprise, other than an operator;
7. 7. ‘prohibited articles’ means weapons, explosives or other dangerous devices, articles or substances that may be used to commit an act of unlawful interference that jeopardises the security of civil aviation;
8. 8. ‘screening’ means the application of technical or other means which are intended to identify and/or detect prohibited articles;
9. 9. ‘security control’ means the application of means by which the introduction of prohibited articles may be prevented;
10. 10. ‘access control’ means the application of means by which the entry of unauthorised persons or unauthorised vehicles, or both, may be prevented;
11. 11. ‘airside’ means the movement area of an airport, adjacent terrain and buildings or portions thereof, access to which is restricted;
12. 12. ‘landside’ means those parts of an airport, adjacent terrain and buildings or portions thereof that are not airside;
13. 13. ‘security restricted area’ means that area of airside where, in addition to access being restricted, other aviation security standards are applied;
14. 14. ‘demarcated area’ means an area that is separated by means of access control either from security restricted areas, or, if the demarcated area itself is a security restricted area, from other security restricted areas of an airport;
15. 15. ‘background check’ means a recorded check of a person’s identity, including any criminal history, as part of the assessment of an individual’s suitability for unescorted access to security restricted areas;
16. 16. ‘transfer passengers, baggage, cargo or mail’ means passengers, baggage, cargo or mail departing on an aircraft other than that on which they arrived;
17. 17. ‘transit passengers, baggage, cargo or mail’ means passengers, baggage, cargo or mail departing on the same aircraft as that on which they arrived;
18. 18. ‘potentially disruptive passenger’ means a passenger who is either a deportee, a person deemed to be inadmissible for immigration reasons or a person in lawful custody;
19. 19. ‘cabin baggage’ means baggage intended for carriage in the cabin of an aircraft;
20. 20. ‘hold baggage’ means baggage intended for carriage in the hold of an aircraft;
21. 21. ‘accompanied hold baggage’ means baggage, carried in the hold of an aircraft, which has been checked in for a flight by a passenger travelling on that same flight;
22. 22. ‘air carrier mail’ means mail whose origin and destination are both an air carrier;
23. 23. ‘air carrier materials’ means materials either whose origin and destination are both an air carrier or that are used by an air carrier;
24. 24. ‘mail’ means dispatches of correspondence and other items, other than air carrier mail, tendered by and intended for delivery to postal services in accordance with the rules of the Universal Postal Union;
25. 25. ‘cargo’ means any property intended for carriage on an aircraft, other than baggage, mail, air carrier mail, air carrier materials and in-flight supplies;
26. 26. ‘regulated agent’ means an air carrier, agent, freight forwarder or any other entity who ensures security controls in respect of cargo or mail;
27. 27. ‘known consignor’ means a consignor who originates cargo or mail for its own account and whose procedures meet common security rules and standards sufficient to allow carriage of cargo or mail on any aircraft;
28. 28. ‘account consignor’ means a consignor who originates cargo or mail for its own account and whose procedures meet common security rules and standards sufficient to allow carriage of that cargo on all-cargo aircraft or mail on all-mail aircraft;
29. 29. ‘aircraft security check’ means an inspection of those parts of the interior of the aircraft to which passengers may have had access, together with an inspection of the hold of the aircraft in order to detect prohibited articles and unlawful interferences with the aircraft;
30. 30. ‘aircraft security search’ means an inspection of the interior and accessible exterior of the aircraft in order to detect prohibited articles and unlawful interferences that jeopardise the security of the aircraft;
31. 31. ‘in-flight security officer’ means a person who is employed by a state to travel on an aircraft of an air carrier licensed by it with the purpose of protecting that aircraft and its occupants against acts of unlawful interference that jeopardise the security of the flight.

The common basic standards for safeguarding civil aviation against acts of unlawful interference that jeopardise the security of civil aviation shall be as laid down in the Annex.

Additional common basic standards not foreseen at the entry into force of this Regulation should be added to the Annex in accordance with the procedure referred to in Article 251 of the Treaty.

General measures, designed to amend non-essential elements of the common basic standards referred to in paragraph 1 by supplementing them, shall be adopted in accordance with the regulatory procedure with scrutiny referred to in Article 19(3).

These general measures shall concern:

1. (a) methods of screening allowed;
2. (b) categories of articles that may be prohibited;
3. (c) as regards access control, grounds for granting access to airside and security restricted areas;
4. (d) methods allowed for the examination of vehicles, aircraft security checks and aircraft security searches;
5. (e) criteria for recognising the equivalence of security standards of third countries;
6. (f) conditions under which cargo and mail shall be screened or subjected to other security controls, as well as the process for the approval or designation of regulated agents, known consignors and account consignors;
7. (g) conditions under which air carrier mail and air carrier materials shall be screened or subjected to other security controls;
8. (h) conditions under which in-flight supplies and airport supplies shall be screened or subjected to other security controls, as well as the process for the approval or designation of regulated suppliers and known suppliers;
9. (i) criteria for defining critical parts of security restricted areas;
10. (j) criteria for staff recruitment and methods of training;
11. (k) conditions under which special security procedures or exemptions from security controls may be applied; and
12. (l) any general measures designed to amend non-essential elements of the common basic standards referred to in paragraph 1 by supplementing them not foreseen at the date of entry into force of this Regulation.

On imperative grounds of urgency, the Commission may use the urgency procedure referred to in Article 19(4).

Detailed measures for the implementation of the common basic standards referred to in paragraph 1 and the general measures referred to in paragraph 2 shall be laid down in accordance with the regulatory procedure referred to in Article 19(2).

These shall include:

1. (a) requirements and procedures for screening;
2. (b) a list of prohibited articles;
3. (c) requirements and procedures for access control;
4. (d) requirements and procedures for the examination of vehicles, aircraft security checks and aircraft security searches;
5. (e) decisions to recognise the equivalence of security standards applied in a third country;
6. (f) as regards cargo and mail, procedures for the approval or designation of, and the obligations to be fulfilled by, regulated agents, known consignors and account consignors;
7. (g) requirements and procedures for security controls of air carrier mail and air carrier materials;
8. (h) as regards in-flight supplies and airport supplies, procedures for the approval or designation of, and the obligations to be fulfilled by, regulated suppliers and known suppliers;
9. (i) definition of critical parts of security restricted areas;
10. (j) staff recruitment and training requirements;
11. (k) special security procedures or exemptions from security controls;
12. (l) technical specifications and procedures for approval and use of security equipment; and
13. (m) requirements and procedures concerning potentially disruptive passengers.

The Commission shall, by amending this Regulation through a decision in accordance with the regulatory procedure with scrutiny referred to in Article 19(3), set criteria to allow Member States to derogate from the common basic standards referred to in paragraph 1 and to adopt alternative security measures that provide an adequate level of protection on the basis of a local risk assessment. Such alternative measures shall be justified by reasons relating to the size of the aircraft, or by reasons relating to the nature, scale or frequency of operations or of other relevant activities.

On imperative grounds of urgency, the Commission may use the urgency procedure referred to in Article 19(4).

The Member States shall inform the Commission of such measures.

Member States shall ensure the application in their territory of the common basic standards referred to in paragraph 1. Where a Member State has reason to believe that the level of aviation security has been compromised through a security breach, it shall ensure that appropriate and prompt action is taken to rectify that breach and ensure the continuing security of civil aviation.

Subject to the relevant rules of Community law, each Member State may determine in which circumstances, and the extent to which, the costs of security measures taken under this Regulation to protect civil aviation against acts of unlawful interference should be borne by the State, the airport entities, air carriers, other responsible agencies, or users. If appropriate, and in conformity with Community law, Member States may contribute with users to the costs of more stringent security measures taken under this Regulation. As far as may be practicable, any charges or transfers of security costs shall be directly related to the costs of providing the security services concerned and shall be designed to recover no more than the relevant costs involved.

Member States may apply more stringent measures than the common basic standards referred to in Article 4. In doing so, they shall act on the basis of a risk assessment and in compliance with Community law. Τhose measures shall be relevant, objective, non-discriminatory and proportional to the risk that is being addressed.

Member States shall inform the Commission of such measures as soon as possible after their application. Upon reception of such information, the Commission shall transmit this information to the other Member States.

Member States are not required to inform the Commission where the measures concerned are limited to a given flight on a specific date.

Without prejudice to any bilateral agreements to which the Community is a party, a Member State shall notify the Commission of measures required by a third country if they differ from the common basic standards referred to in Article 4 in respect of flights from an airport in a Member State to, or over, that third country.

At the request of the Member State concerned or on its own initiative, the Commission shall examine the application of any measures notified under paragraph 1 and may, in accordance with the regulatory procedure referred to in Article 19(2), draw up an appropriate response to the third country concerned.

Paragraphs 1 and 2 shall not apply if:

1. (a) the Member State concerned applies the measures concerned in accordance with Article 6; or
2. (b) the requirement of the third country is limited to a given flight on a specific date.

Without prejudice to Article 300 of the Treaty, the Commission may conclude a Memorandum of Understanding concerning audits with the International Civil Aviation Organisation (ICAO) in order to avoid duplicate monitoring of Member States’ compliance with Annex 17 to the Chicago Convention on International Civil Aviation.

Where, within a single Member State, two or more bodies are involved in civil aviation security, that Member State shall designate a single authority (hereinafter referred to as the appropriate authority) to be responsible for the coordination and monitoring of the implementation of the common basic standards referred to in Article 4.

Every Member State shall draw up, apply and maintain a national civil aviation security programme.

That programme shall define responsibilities for the implementation of the common basic standards referred to in Article 4 and shall describe the measures required by operators and entities for this purpose.

The appropriate authority shall make available in writing on a ‘need to know’ basis the appropriate parts of its national civil aviation security programme to operators and entities which it deems to have a legitimate interest.

Every Member State shall draw up, apply and maintain a national quality control programme.

That programme shall enable the Member State to check the quality of civil aviation security in order to monitor compliance both with this Regulation and with its national civil aviation security programme.

The specifications for the national quality control programme shall be adopted by amending this Regulation through the addition of an annex in accordance with the regulatory procedure with scrutiny referred to in Article 19(3).

On imperative grounds of urgency, the Commission may use the urgency procedure referred to in Article 19(4).

The programme shall allow for the swift detection and correction of deficiencies. It shall also provide that all airports, operators and entities responsible for the implementation of aviation security standards that are located in the territory of the Member State concerned shall be regularly monitored directly by, or under the supervision of, the appropriate authority.

Every airport operator shall draw up, apply and maintain an airport security programme.

That programme shall describe the methods and procedures which are to be followed by the airport operator in order to comply both with this Regulation and with the national civil aviation security programme of the Member State in which the airport is located.

The programme shall include internal quality control provisions describing how compliance with these methods and procedures is to be monitored by the airport operator.

The airport security programme shall be submitted to the appropriate authority, which may take further action if appropriate.

Every air carrier shall draw up, apply and maintain an air carrier security programme.

That programme shall describe the methods and procedures which are to be followed by the air carrier in order to comply both with this Regulation and with the national civil aviation security programme of the Member State from which it provides services.

The programme shall include internal quality control provisions describing how compliance with these methods and procedures is to be monitored by the air carrier.

Upon request, the air carrier security programme shall be submitted to the appropriate authority, which may take further action if appropriate.

Where a Community air carrier security programme has been validated by the appropriate authority of the Member State granting the operating licence, the air carrier shall be recognised by all other Member States as having fulfilled the requirements of paragraph 1. This is without prejudice to a Member State’s right to request from any air carrier details of its implementation of:

1. (a) the security measures applied by that Member State under Article 6; and/or
2. (b) local procedures that are applicable at the airports served.

Every entity required under the national civil aviation security programme referred to in Article 10 to apply aviation security standards shall draw up, apply and maintain a security programme.

That programme shall describe the methods and procedures which are to be followed by the entity in order to comply with the national civil aviation security programme of the Member State in respect of its operations in that Member State.

The programme shall include internal quality control provisions describing how compliance with these methods and procedures is to be monitored by the entity itself.

Upon request, the security programme of the entity applying aviation security standards shall be submitted to the appropriate authority, which may take further action if appropriate.

The Commission, acting in cooperation with the appropriate authority of the Member State concerned, shall conduct inspections, including inspections of airports, operators and entities applying aviation security standards, in order to monitor the application by Member States of this Regulation and, as appropriate, to make recommendations to improve aviation security. For this purpose, the appropriate authority shall inform the Commission in writing of all airports in its territory serving civil aviation other than those covered by Article 4(4).

The procedures for conducting Commission inspections shall be adopted in accordance with the regulatory procedure referred to in Article 19(2).

Commission inspections of airports, operators and entities applying aviation security standards shall be unannounced. The Commission shall in good time before an inspection inform the Member State concerned thereof.

Each Commission inspection report shall be communicated to the appropriate authority of the Member State concerned, which shall, in its answer, set out the measures taken to remedy any identified deficiencies.

The report, together with the answer of the appropriate authority, shall subsequently be communicated to the appropriate authority of the other Member States.

Every year the Commission shall present a report to the European Parliament, the Council and the Member States informing them of the application of this Regulation and of its impact on improving aviation security.

Without prejudice to the role of the Committee referred to in Article 19, the Commission shall establish a Stakeholders’ Advisory Group on Aviation Security, composed of European representative organisations engaged in, or directly affected by, aviation security. The role of this group shall be solely to advise the Commission. The Committee referred to in Article 19 shall keep the Stakeholders’ Advisory Group informed during the entire regulatory process.

As a general rule, the Commission shall publish measures that have a direct impact on passengers. However, the following documents shall be regarded as EU classified information within the meaning of Decision 2001/844/EC, ECSC, Euratom:

1. (a) measures and procedures as referred to in Articles 4(3), 4(4), 6(1) and 7(1), if containing sensitive security information;
2. (b) the Commission inspection reports and the answers of the appropriate authorities referred to in Article 15(3).

The Commission shall be assisted by a Committee.

Where reference is made to this paragraph, Articles 5 and 7 of Decision 1999/468/EC shall apply, having regard to the provisions of Article 8 thereof.

The period laid down in Article 5(6) of Decision 1999/468/EC shall be set at one month.

Where reference is made to this paragraph, Article 5a(1) to (4) and Article 7 of Decision 1999/468/EC shall apply, having regard to the provisions of Article 8 thereof.

Where reference is made to this paragraph, Article 5a(1), (2), (4), and (6) and Article 7 of Decision 1999/468/EC shall apply, having regard to the provisions of Article 8 thereof.

When appropriate, and in conformity with Community law, agreements recognising that the security standards applied in a third country are equivalent to Community standards could be envisaged in aviation agreements between the Community and a third country in accordance with Article 300 of the Treaty, in order to advance the goal of ‘one-stop security’ for all flights between the European Union and third countries.

Member States shall lay down the rules on penalties applicable to infringements of the provisions of this Regulation and shall take all measures necessary to ensure that they are implemented. The penalties provided for must be effective, proportionate and dissuasive.

The Commission will report, no later than 31 December 2008, on the principles of the financing of the costs of civil aviation security measures. That report will consider what steps need to be taken in order to ensure that security charges are used exclusively to meet security costs, and to improve the transparency of such charges. The report will also address the principles necessary to safeguard undistorted competition between airports and between air carriers, and the different methods to ensure consumer protection as regards the distribution of the costs of security measures between taxpayers and users. The Commission report will be accompanied, if appropriate, by a legislative proposal.

Regulation (EC) No 2320/2002 is hereby repealed.

This Regulation shall enter into force on the 20th day following its publication in the Official Journal of the European Union.

It shall apply as from the date specified in the implementing rules adopted in accordance with the procedures referred to in Article 4(2) and (3), but not later than 24 months after the entry into force of this Regulation.

By way of exception to paragraph 2, Articles 4(2), 4(3), 4(4), 8, 11(2), 15(1) second subparagraph, 17, 19 and 22 shall apply from the date of entry into force of this Regulation.