Prováděcí rozhodnutí Komise (EU) 2026/1065 ze dne 8. června 2026, kterým se stanoví prováděcí pravidla k nařízení Evropského parlamentu a Rady (EU) 2024/982, pokud jde o automatizované vyhledávání a výměnu policejních záznamů prostřednictvím EPRIS

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2024/982 of the European Parliament and of the Council of 13 March 2024 on the automated search and exchange of data for police cooperation, and amending Council Decisions 2008/615/JHA and 2008/616/JHA and Regulations (EU) 2018/1726, (EU) 2019/817 and (EU) 2019/818 of the European Parliament and of the Council (the Prüm II Regulation)OJ L 2024/982, 5.4.2024, ELI: http://data.europa.eu/eli/reg/2024/982/oj. , and in particular Article 31 and Article 44(6) thereof,

For the purposes of this Decision, the following definitions apply::

(a) entity means either a Member State or Europol;

(b) requesting entity means a Member State or Europol that initiates a query;

(c) requested entity means a Member State that receives a search;

(d) transaction means one query, converted into one or several searches and its corresponding results;

(e) query means the input initiated and sent by a requesting entity to the query service deployed in its own infrastructure;

(f) search means a message sent by the query service of a requesting entity to the search service of requested entities to retrieve a list of results;

(g) result means the information sent from the search service of a requested entity to the query service of a requesting entity following a search, indicating either a match, including its related details, or a no-match outcome;

(h) response means the aggregation of all results related to a query;

(i) query service means a micro-service to query entities;

(j) search service means a micro-service to manage and search the index(es).

OJ L 2024/982, 5.4.2024, ELI: http://data.europa.eu/eli/reg/2024/982/oj.

(1) Regulation (EU) 2024/982 establishes a framework for the automated search and exchange of certain categories of data for cross-border police cooperation.

(2) Pursuant to Regulation (EU) 2024/982, the Commission is to specify the technical procedure for automated search and exchange of police records to be done via the European Police Record Index System (EPRIS).

(3) Establishment of uniform technical and operational specifications for the functioning of EPRIS is necessary to ensure the effective, secure and interoperable exchange of police records. Such specifications should define the procedures, formats, protocols, and security requirements to guarantee a consistent and reliable automated information exchange under Regulation (EU) 2024/982.

(4) The EPRIS central routing infrastructure to be operated by Europol is to serve as a trusted intermediary for the exchange of queries and results between national police record indexes. The technical design of that infrastructure should ensure end-to-end encryption, pseudonymisation of data and strict segregation between routing functions and data content, thereby preserving data protection and confidentiality throughout all EPRIS transactions.

(5) To maintain operational continuity and mutual trust between participating entities, it is necessary to establish common requirements for system availability, configuration management and logging, as well as procedures for error handling and statistical reporting. These requirements should support the monitoring, evaluation and improvement of EPRIS performance in line with the principles of accountability, transparency and data minimisation.

(6) In accordance with Articles 1 and 2 of Protocol No 22 on the position of Denmark, annexed to the Treaty on European Union and to the Treaty on the Functioning of the European Union, Denmark did not take part in the adoption of Regulation (EU) 2024/982 and is not bound by it or subject to its application. Denmark is therefore not bound by this Decision or subject to its application.

(7) Ireland is bound by Regulation (EU) 2024/982 and is therefore bound by this Decision.

(8) EPRIS contributes to the provision of a cross-border digital public service. As this Decision introduces binding requirements affecting its development, an interoperability assessment is required under Article 3 of Regulation (EU) 2024/903 of the European Parliament and of the CouncilRegulation (EU) 2024/903 of the European Parliament and of the Council of 13 March 2024 laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act) (OJ L, 2024/903, 22.3.2024, ELI: http://data.europa.eu/eli/reg/2024/903/oj). (Interoperable Europe Act). The assessment has been carried out, and the resulting report will be published on the Interoperable Europe Portal.

(9) The European Data Protection Supervisor delivered an opinion on 27 January 2026 .

(10) The measures provided for in this Decision are in accordance with the opinion of the Prüm II Committee, established by Article 77 of Regulation (EU) 2024/982.

The specifications relating to the technical rules for automated search and exchange of police records via EPRIS shall be as set out in the Annex.

Regulation (EU) 2024/903 of the European Parliament and of the Council of 13 March 2024 laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act) (OJ L, 2024/903, 22.3.2024, ELI: http://data.europa.eu/eli/reg/2024/903/oj).

Article 1 Article 1

Article 2 Article 2

Article 3 Article 3

This Decision shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union .

HAS ADOPTED THIS DECISION: