Kiri

14th Carrier Working Group 26 July 2022 Handling instructions for SENSITIVE information are given at https://europa.eu/!qG39Vd Carrier meetings - Calendar Carrier meetings – calendar 1/2 May 2022 • 4th of May: Carrier Updated since last Carrier WG Awareness session • 2nd of May: Technical Connectivity Session March 2022 with Carriers • 2nd of March: Carrier • 11th of May: Ad-hoc Awareness session meeting with Ryanair • 3rd of March: Adhoc and Navitaire meeting with Amadeus • 13th of May: Ad-hoc • 10th of March: Adhoc meeting with MSC July 2022 meeting with Res2 cruises • 6th of July: Carrier • 16th of March: Carrier • 18th of May: Carrier Awareness session Awareness session Awareness session • 14th of July : High level • 24th of March: Adhoc • 24th of May: EBAA meeting with Air Industry meeting with Sabre meeting - EBACE • 26th of July: Carrier Working • 30th of March: Carrier • 25th of May: Carrier Group Day Working Group Day Working Group Day February 2022 April 2022 June 2022 • 6th of April: Carrier • 1st of June: Carrier • 16th of Feb: Carrier Awareness session Awareness session Awareness session • 12th of April: Ad-hoc • 10th of June: UK • 23rd of Feb: Adhoc meeting on NIKO DCS Chamber of Shipping meeting with CLIA • 20th of April: Carrier meeting • 28th of Feb: Carrier Awareness session • 15th of June: Carrier Working Group Day • 21st of April: Ad-hoc Awareness session meeting with United • 27th of June: Carrier • 27th of April: Carrier identification - Working Group Day Business aviation operators • 29th of June: Carrier Working Group Day • 29th of June: Meeting with Airlines for America (A4A) 3 Carrier meetings – calendar 2/2 Updated since last Carrier WG October 2022 December 2022 • 11-12 October Industry • 15th of December: Round Table Carrier Working Group Day • 27th of October: Carrier Working Group Day November September 2022 2022 • 23rd of November * • 7th of September: • Carrier Working Group Awareness Session Day • 30th of September: Carrier Working Group Day * Original date was 11/ 24 (now changed to 11/23) 4  eu-LISA Carrier Meetings • Starting from September, eu-LISA will provide a new calendar dates for:  The Carrier Working Group (once per month)  The Carrier Awareness Session (sessions to be confirmed) • In addition, ad-hoc meetings could be organized upon request after a submission of an agenda to eu-LISA for evaluation 5  Sea routes scenarios 26 July 2022 1  Svalbard Status • Svalbard is under Norwegian sovereignty, but with limitations as defined by the Spitsbergen Treaty of 1920. (Russian/Norwegian condominium) • Due to the treaty regulations, Svalbard is not treated as part of Norway by customs. • Flights from Oslo to Longyearbyen start at the international part of the airport Oslo Gardermoen. • Norway is part of the Schengen treaty area, Svalbard is not, and this means that you are crossing a Schengen boundary when traveling to or from Svalbard. 2  Greenland Status Legal base: Memorandum from the implementation in Greenland of Article 5(2) of the Agreement on the Accession of the Kingdom of Denmark to the CISA 11488/99 Brussels, 30 September 1999 We can consider Greenland de facto as within the area without internal border controls (DK border guards carry out Schengen border controls at Greenland airports and ports for flights/ships coming from third countries and there are no border checks for flights/ships arriving from Schengen). Caveat: Security checks based on an analysis of risks to internal security or illegal immigration may be conducted (as mentioned in Annex VI) 3  Scenario 1 • If a USA guest for example arrives with a flight in Barcelona, gets checked by the Airline and receives an “ok ETIAS” from the Airline, sleeps 1 night in Hotel in Barcelona and then embarks onboard of an MSC Cruise ship from Barcelona with below itinerary calling only “Schengen Ports”, will MSC have to send again the ETIAS query though the related portal in order to check again if ok ETIAS or not? Itinerary: Barcelona – Marseille – Genoa – Naples – Messina – Valletta - Barcelona • Reply: NO 4  Scenario 2 • Chinese guest arrives in Barcelona with multiple schengen VISA with a flight, receives “ok EES” after check done by the Airline, also in this case sleeps in Hotel in Barcelona for 1 night and then embarks onboard of an MSC Cruise ship from Barcelona with below itinerary, will MSC have to send again the EES query though the related portal in order to check again if ok EES or not? Itinerary: Barcelona – Marseille – Genoa – Naples – Messina – Valletta - Barcelona • Reply: NO • 5  Scenario 3 • A USA guest for example arrives with a flight in Piraeus, gets checked by the Airline and receives an “ok ETIAS” from the Airline, sleeps 1 night in Hotel in Piraeus and then embarks onboard of an MSC Cruise ship from Piraeus with below itinerary calling also “Extra Schengen Ports”. MSC will have to send again the ETIAS query though the related portal in order to check again if ok ETIAS ? Itinerary: Piraeus – Santorini – Kusadasi – Haifa – Limassol – Mykonos - Piraeus • Reply: As the boat will leave the Schengen area and enter Cyprus, this American citizen needs to have an ETIAS to enter Cyprus. The ETIAS must be valid for the whole duration of the cruise, so the ETIAS must be valid for the last port in EU, ie, Pireus. The ETIAS must be checked for Limassol (as ETIAS is also required in CY) and for Mykonos (entering the Schengen area). • 6  Scenario 4 • Chinese guest arrives in Piraeus with multiple Schengen VISA with a flight, receives “ok EES” after check done by the Airline, also in this case sleeps in Hotel in Piraeus for 1 night and then embarks onboard of an MSC Cruise ship from Piraeus with below itinerary calling “Extra Schengen Ports” MSC will have to send again the EES query though the related portal in order to check again if ok EES or not? Itinerary: Piraeus – Santorini – Kusadasi – Haifa – Limassol – Mykonos - Piraeus • Reply: Multiple entry visas are not yet in the scope of EES, so far therefore they should only be checked manually (visually) to ensure they are valid for the dates of entry in the EU ports (including Limassol). • 7  Scenario 5 Joe is a UK citizen. He flies from London Gatwick to Croatia. Upon arrival in Croatia, he goes straight to the cruise terminal and boards our ship. He then makes day visits to ports in and out of the Schengen area, for instance, in Portugal, Spain and Turkey, but does not permanently leave the vessel. He then disembarks permanently in Italy, whereupon he takes a flight back to the UK. • Please can you clarify, in no uncertain terms, if we (the ship carrier) need to check EES / ETIAS in this situation, and at what stages? • For the itinerary between UK and Croatia, the verification of the ETIAS status is indeed under the responsibility of the air carrier. • This being said, the cruise needs to checks the ETIAS for the visits/permanent entry in Schengen area at the end of the passenger’s itinerary. It must be checked from Croatia to Portugal (entering the Schengen area) and from Turkey to 8 Italy (re-entering the Schengen area).  UK nationals • “Does a UK national, who embarks on a vessel in the UK, sails to Barcelona, enjoys a day trip in Barcelona, and returns to UK on the ship: would they need an ETIAS?” • “An ETIAS is required of UK nationals, with the exception of those who are beneficiaries of the Withdrawal Agreement”. 9  Carrier Interface vs EES Checks Carrier Interface is to be queried only when arriving in the Schengen area But Entry Exit Checks (as the name indicates) take place both at Entry and at Exit - Recommendation to MS on cruise ships harmonises the EES checks but Obligations on TCN to have their visa or ETIAS remain irrespective of the reduced EES checks 10  Scenarios / Checks Itinerary 1: Southampton, Hamburg, Southampton. No Way port leavers or joiners For guest who require a Visa and hold a single or double one: Check EES Carrier Interface (prior to first boarding at Southampton) For guest who require an ETIAS Check ETIAS Carrier Interface (prior to first boarding at Southampton) 11  Scenarios / Checks Itinerary 2: Southampton, La Coruna, Barcelona. Joiners only in Southampton, leavers only in Barcelona For guest who require a Visa and hold a single or double one: Check EES Carrier Interface (prior to first boarding at Southampton) For guest who require an ETIAS Check ETIAS Carrier Interface (prior to first boarding at Southampton) 12  Scenarios / Checks Itinerary 3: Southampton, Hamburg, Southampton. But we have leavers and joiners in Hamburg For guest who require a Visa and hold a single or double one: Check EES Carrier Interface (prior to first boarding at Southampton) For guest who require an ETIAS Check ETIAS Carrier Interface (prior to first boarding at Southampton) 13  Scenarios / Checks Itinerary 4: Suez, Barcelona, La Coruna, Southampton. Only leavers in Southampton For guest who require a Visa and hold a single or double one: Check EES Carrier Interface (prior to first boarding at Suez) For guest who require an ETIAS Check ETIAS Carrier Interface (prior to first boarding at Suez) 14  Scenarios / Checks Itinerary 5: Barcelona, La Coruna, Southampton. Joiners only in Barcelona, leavers only in Southampton For guest who require a Visa and hold a single or double one: For guest who require an ETIAS No interface check, as trip not from outside the Schengen area to a Schengen destination 15  Scenarios / Checks Itinerary 6: Barcelona, Naples, Barcelona For guest who require a Visa and hold a single or double one: For guest who require an ETIAS No interface check, as trip not from outside the Schengen area to a Schengen destination 16  Thank you © European Union 2020 Unless otherwise noted the reuse of this presentation is authorised under the CC BY 4.0 license. For any use or reproduction of elements that are not owned by the EU, permission may need to be sought directly from the respective right holders. 17 xx: element concerned, source: e.g. Fotolia.com; Slide xx: element concerned, source: e.g. iStock.com Slide  Technical updates 14th Carriers Working Group 26th July 2022 Handling instructions for SENSITIVE information are given at https://europa.eu/!qG39Vd Planning update • JHA council recently endorsed a new baseline for the EES and ETIAS EiO, affecting the carriers activities • Main milestones: • End of March 2023 “EES technical EiO”: deadline by when all the involved stakeholders and the EES System shall be ready for the go live • Estimated Mid-May 2023 EES EiO (depending on actual readiness): when the EES System and the Carriers Interfaces will start to be used in production • Progressive approach, passports will continue to be stamped during the following 3 months, allowing the carriers to visually check the passports in case the EES traveller status could not be checked via the Carrier Interfaces • Estimated Mid-August 2023 (3 months after EES EiO): the passports will be no longer stamped • Estimated February 2024 (9 months after EES EiO): the end of the progressive transitional period allowing for the possibility to create incomplete EES files (no biometric data) • November 2023: ETIAS EiO 2  Draft Planning overview Work in progress - version to be further confirmed: 2022 2023 July August September October November December January February March April May System2System Test Web/Mobile CIs (Web portal and Mobile App) Test App dev Physical infrastructure dev, configuration and test Transition System registration Connection to Simulator Carriers' developments Pre-CT testing Connection to Test Compliance tests (System2System) Connection to Production EiO Buffer Carriers staff training Accounts assignment Activity for Carriers using Web Portal and Mobile App eu-LISA development activity Activity for carriers using System2System eu-LISA tests Joint activity 15/06/2022 End date for activities are the one to be considered for EiO. The activities will be 3 continued for new carriers  Carriers Onboarding – outcomes of the discussion with Air Associations • The schedule for the MSs testing will be shared with carriers associations to coordinate with authorities • Next Carrier WG sessions will be organised to go more in detail in specific technical topics • A list of registered carriers will be shared with MSs and Carriers Associations • An escalation point is established: • In case of no reply after more than 5 working days, or if the quality of the reply provided is not sufficient, carriers can escalate the situation to [email protected] • IMPORTANT: indicate [ESCALATION] in the subject of your email and provide the details about the situation and the conversation with the onboarding team 15/06/2022 4  Security Requirements for MQ connectivity • The certificate based vpn solution is proposed based on Security Risk Assessment and DPIA outcomes • It offers a secure and modern implementation of system to system external connections • Different legislation is applicable to EU compared to US and Canada as per data protection and security requirements and also on the fact that EES is implemented many years after comparable american programs • The proposal is compliant with what EDPS (European Data Protection Supervisor) mandates • Once implemented, the certificate solution is less impactful in terms of resources to operate thanks to CLMS SW • For the carriers that cannot adopt certificate based on vpn on times, eu-LISA is offering alternative options. Carriers can choose one or several different options to be used temporarily until they are ready: • System to System with JSON or XML • Carriers Web Portal – bulk upload in csv format, JSON or XML • Mobile Application – bulk upload in csv format, JSON or XML + passport scanner • MQ Connectivity via Certificate is confirmed, no PSK option will be added. 15/06/2022 5  Registration update • As of 22/07: • 818 carriers registered (680 air, 47 sea, 91 land) • EU: 351, non-EU: 467 • Carriers using System to System: • 96 requests to use the simulator in total, out of 400 carriers using System to System: • 2 Service Providers connected • 1 carrier connected • 36 carriers service providers for carriers registered 6  Testing activities update – Current statistics (readiness) • 25% of Carriers declared using a DCS from a Service Carriers Connections for pre-CT and CT Campaign (Sys2Sys) Provider With Service Pre-CT with CT with • 3 Carriers (out of 85 willing to run pre CT) will test Requested their “internal” system Provider as xSIM as per PGD as per PROD only ! • 9 Service Providers will execute tests for 82 Carriers via Form 01 per Form 03 Form 04 Form 04 (out of 85 willing to run pre CT) • Reminder: once a Service Provider successfully 404 108 85 52 2 execute the tests for ONE carrier, all the carriers using the same DCS are declared compliant. • 1 Carrier is in the process of declaring its Internal Carriers Sys2Sys Channel Protocol DCS with MQ / Edifact MQ / Edifact REST / JSON • 1 Carrier has declared a REST / XML protocol MQ / Edifact REST / JSON with Service with Service • 9 Carriers having declared a Service Provider did Internal DCS Internal DCS not complete the Form providing the chosen Provider Provider protocol. 63 (1) 36 2 7 Carrier Registration Process Carrier Registration a. Carriers provide Information for the registration as per EES and ETIAS regulations b. The carrier complete the registration form F01 with authorized contacts to be involved during the implementation and after the entry into operation. c. Each Carrier Contact provided under the form F01 needs to sign the Security Convention d. The eu-LISA on-boarding team share with the Carrier SPOC and backup SPOC a key for encrypting or decrypting documents via a secured communication channel, when the Security Convention is signed e. For carriers using the Sys2Sys channel, Carrier System Registration Form F03 need to be completed to collect the data of the Carrier Service Provider Entity and about the System to integrate. The Carriers Service Provider may be an Entity in the Carrier’s Organisation, or an external Service Provider. f. For carriers using the Sys2Sys channel, the connection Information Form F04 and Carrier connection details are requested by the on-boarding team if not yet received for the declared system 8  Carriers Technical Guideline for Web Portal and Mobile App – deep dive • Description of the Web Portal and Mobile App • SPOC responsibilities • User creation and deletion • Multi Factor Authentication for SPOCs 15/06/2022 9  CSV Import Carrier Web Portal and Mobile Applications allow to import complete lists of passengers of the same itinerary from a prepared CSV file: • CSV file needs to have correct structure as attached to the CTG • Data in the file needs to follow format described in the CTG • Error will be displayed if application finds errors in the CSV • Partial loads are not supported. One missing mandatory value will cause file not to be imported • Single CSV file can have passengers only for the same itinerary • Each CSV import overwrites currently opened list • Passengers marked as ‘in transit’ or ‘out of scope’ are ignored during import • User can modify the list after import • User can import exported verification results. Verification status column will be ignored. 15/06/2022 10  CSV Import 15/06/2022 11  CSV Import 15/06/2022 12  Manual input Carrier Web Portal and Mobile Applications allow to create passenger lists directly in the application: • The list is created for single itinerary • User can input passenger details manually or use an MRZ scanner • Data read with MRZ scanner can be edited • List can have up to 99 passengers • Verification results can be exported to a similar CSV as used for import, with one additional column with status • User can search through the list • Web Portal, iOS application and Android application have common functionalities 15/06/2022 13  Manual input 15/06/2022 14  Manual input 15/06/2022 15  Manual input 15/06/2022 16  Manual input 15/06/2022 17  Manual input 15/06/2022 18  Carrier SPOC responsibilities • Distribution of temporary credentials for each Carrier Authorised User account within its own organization.  SPOC and backup SPOC will receive to their email accounts (specified during registration) separate email for each created user account.  Such email will contain a username and temporary password that will allow carrier staff to activate account and set up new password. • Maintaining the list of users and allocated accounts. • Disabling specific user if required. • Resetting password on behalf of users. 15/06/2022 19  Carrier SPOC responsibilities 15/06/2022 20  How many users each Carrier will have? • During onboarding process, each Carrier can specify the amount of Carrier Authorised Users is required. • After registration and onboarding, Carrier SPOC or backup SPOC can request eu-LISA more users if needed. • User accounts can be deleted per request. 15/06/2022 21  Multi Factor Authentication Carrier SPOC is required to use multi-factor authentication when logging into the Carrier Web Portal This can be done using one of two methods: • TOTP client on a smartphone • FIDO2 compatible device 15/06/2022 22 Thank you ! eu-LISA European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice www.eulisa.europa.eu  Technical updates 14th Carriers Working Group 26th July 2022 Handling instructions for SENSITIVE information are given at https://europa.eu/!qG39Vd Planning update • JHA council recently endorsed a new baseline for the EES and ETIAS EiO, affecting the carriers activities • Main milestones: • End of March 2023 “EES technical EiO”: deadline by when all the involved stakeholders and the EES System shall be ready for the go live • Estimated Mid-May 2023 EES EiO (depending on actual readiness): when the EES System and the Carriers Interfaces will start to be used in production • Progressive approach, passports will continue to be stamped during the following 3 months, allowing the carriers to visually check the passports in case the EES traveller status could not be checked via the Carrier Interfaces • Estimated Mid-August 2023 (3 months after EES EiO): the passports will be no longer stamped • Estimated February 2024 (9 months after EES EiO): the end of the progressive transitional period allowing for the possibility to create incomplete EES files (no biometric data) • November 2023: ETIAS EiO 2  Draft Planning overview Work in progress - version to be further confirmed: 2022 2023 July August September October November December January February March April May System2System Test Web/Mobile CIs (Web portal and Mobile App) Test App dev Physical infrastructure dev, configuration and test Transition System registration Connection to Simulator Carriers' developments Pre-CT testing Connection to Test Compliance tests (System2System) Connection to Production EiO Buffer Carriers staff training Accounts assignment Activity for Carriers using Web Portal and Mobile App eu-LISA development activity Activity for carriers using System2System eu-LISA tests Joint activity 15/06/2022 End date for activities are the one to be considered for EiO. The activities will be 3 continued for new carriers  Carriers Onboarding and testing additional outputs • The schedule for the MSs testing will be shared with carriers associations to coordinate with authorities in case of needs • Next Carrier WG sessions will be organised to go more in detail in specific technical topics • A list of registered carriers will be shared with MSs and Carriers Associations • An escalation point is established: • In case of no reply after more than 5 working days, or if the quality of the reply provided is not sufficient, carriers can escalate the situation to [email protected] • IMPORTANT: indicate [ESCALATION] in the subject of your email and provide the details about the situation and the conversation with the onboarding team 15/06/2022 4  Security Requirements for MQ connectivity • The certificate based vpn solution is proposed based on Security Risk Assessment and DPIA outcomes • It offers a secure and modern implementation of system to system external connections • Different legislation is applicable to EU compared to US and Canada as per data protection and security requirements and also on the fact that EES is implemented many years after comparable american programs • The proposal is compliant with what EDPS (European Data Protection Supervisor) mandates • Once implemented, the certificate solution is less impactful in terms of resources to operate thanks to CLMS SW • For the carriers that cannot adopt certificate based on vpn on times, eu-LISA is offering alternative options. Carriers can choose one or several different options to be used temporarily until they are ready: • System to System with JSON or XML • Carriers Web Portal – bulk upload in csv format, JSON or XML • Mobile Application – bulk upload in csv format, JSON or XML + passport scanner • MQ Connectivity via Certificate is confirmed, no PSK option will be added. 15/06/2022 5  Registration update • As of 22/07: • 818 carriers registered (680 air, 47 sea, 91 land) • EU: 351, non-EU: 467 • Carriers using System to System: • 96 requests to use the simulator in total, out of 400 carriers using System to System: • 2 Service Providers connected • 1 carrier connected • 36 carriers service providers for carriers registered 6  Testing activities update – Current statistics (readiness) • 25% of Carriers declared using a DCS from a Service Carriers Connections for pre-CT and CT Campaign (Sys2Sys) Provider With Service Pre-CT with CT with • 3 Carriers (out of 85 willing to run pre CT) will test Requested their “internal” system Provider as xSIM as per PGD as per PROD only ! • 9 Service Providers will execute tests for 82 Carriers via Form 01 per Form 03 Form 04 Form 04 (out of 85 willing to run pre CT) • Reminder: once a Service Provider successfully 404 108 85 52 2 execute the tests for ONE carrier, all the carriers using the same DCS are declared compliant. • 1 Carrier is in the process of declaring its Internal Carriers Sys2Sys Channel Protocol DCS with MQ / Edifact MQ / Edifact REST / JSON • 1 Carrier has declared a REST / XML protocol MQ / Edifact REST / JSON with Service with Service • 9 Carriers having declared a Service Provider did Internal DCS Internal DCS not complete the Form providing the chosen Provider Provider protocol. 63 (1) 36 2 7 Carrier Registration Process Carrier Registration a. Carriers provide Information for the registration as per EES and ETIAS regulations b. The carrier complete the registration form F01 with authorized contacts to be involved during the implementation and after the entry into operation. c. Each Carrier Contact provided under the form F01 needs to sign the Security Convention d. The eu-LISA on-boarding team share with the Carrier SPOC and backup SPOC a key for encrypting or decrypting documents via a secured communication channel, when the Security Convention is signed e. For carriers using the Sys2Sys channel, Carrier System Registration Form F03 need to be completed to collect the data of the Carrier Service Provider Entity and about the System to integrate. The Carriers Service Provider may be an Entity in the Carrier’s Organisation, or an external Service Provider. f. For carriers using the Sys2Sys channel, the connection Information Form F04 and Carrier connection details are requested by the on-boarding team if not yet received for the declared system 8  Carriers Technical Guideline for Web Portal and Mobile App – deep dive • Description of the Web Portal and Mobile App • SPOC responsibilities • User creation and deletion • Multi Factor Authentication for SPOCs 15/06/2022 9  CSV Import Carrier Web Portal and Mobile Applications allow to import complete lists of passengers of the same itinerary from a prepared CSV file: • CSV file needs to have correct structure as attached to the CTG • Data in the file needs to follow format described in the CTG • Error will be displayed if application finds errors in the CSV • Partial loads are not supported. One missing mandatory value will cause file not to be imported • Single CSV file can have passengers only for the same itinerary • Each CSV import overwrites currently opened list • Passengers marked as ‘in transit’ or ‘out of scope’ are ignored during import • User can modify the list after import • User can import exported verification results. Verification status column will be ignored. 15/06/2022 10  CSV Import 15/06/2022 11  CSV Import 15/06/2022 12  Manual input Carrier Web Portal and Mobile Applications allow to create passenger lists directly in the application: • The list is created for single itinerary • User can input passenger details manually or use an MRZ scanner • Data read with MRZ scanner can be edited • List can have up to 99 passengers • Verification results can be exported to a similar CSV as used for import, with one additional column with status • User can search through the list • Web Portal, iOS application and Android application have common functionalities 15/06/2022 13  Manual input 15/06/2022 14  Manual input 15/06/2022 15  Manual input 15/06/2022 16  Manual input 15/06/2022 17  Manual input 15/06/2022 18  Carrier SPOC responsibilities • Distribution of temporary credentials for each Carrier Authorised User account within its own organization.  SPOC and backup SPOC will receive to their email accounts (specified during registration) separate email for each created user account.  Such email will contain a username and temporary password that will allow carrier staff to activate account and set up new password. • Maintaining the list of users and allocated accounts. • Disabling specific user if required. • Resetting password on behalf of users. 15/06/2022 19  Carrier SPOC responsibilities 15/06/2022 20  How many users each Carrier will have? • During onboarding process, each Carrier can specify the amount of Carrier Authorised Users is required. • After registration and onboarding, Carrier SPOC or backup SPOC can request eu-LISA more users if needed. • User accounts can be deleted per request. 15/06/2022 21  Multi Factor Authentication Carrier SPOC is required to use multi-factor authentication when logging into the Carrier Web Portal This can be done using one of two methods: • TOTP client on a smartphone • FIDO2 compatible device 15/06/2022 22 Thank you ! eu-LISA European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice www.eulisa.europa.eu  Operational updates 14th meeting of the informal ad hoc Working Group for Carriers 26 July 2022 ETIAS Central Unit Division Assistance Centre Unit Agenda  Frequently Asked Questions(FAQs)  Standard Operating Procedures (SOPs) - New SOPs template - SOPs Technical Impossibility of carrier interface  Way Forward 2 Frequently Asked Questions (FAQs) 3 State of Play  First version of the public FAQs is published and available on eu-Lisa’s website, as seen below: https://www.eulisa.europa.eu/Organisation/GoverningBodies/Documents/WG%2 0Carriers/Documents/Carrier_FAQ.pdf  A new version with around 40 new FAQs, has just been published. New Q&A have been marked green;  Frontex continues to collect and add questions, raised during the Carrier Working Groups and the Awareness Sessions, in the FAQs. 4 Standard Operating Procedures (SOPs) 5 State of Play  A new template has been implemented to make the document more user friendly;  The first draft of the SOPs has been finalised;  The draft SOPs has been sent to the European Commission and eu-LISA for review. 6 New SOPs template 7 Technical impossibility of the Carrier Interface to receive or reply to queries  When the carrier interface (CI) is unavailable, the carrier is unable to send verification queries or receive results from queries;  The technical impossibility can be detected by eu-LISA and/or carriers;  The technical impossibility may occur when an EES/ETIAS component has failed (eu-LISA) or for other reasons than a failure of an EES/ETIAS component (e.g. at the carrier side);  When the technical impossibility concerns one of the EES/ETIAS components, eu-LISA is responsible of resolving it (Article 13 (1b));  When the technical impossibility does not concern any of the EES/ETIAS components the carrier is responsible of its resolution (Article 13(2) and (3)). 8 Technically impossible to send a verification query Failure of the carrier interface detected by eu-LISA (Art 13(1b) Implementing Regulation (EU) 2021/1217) ECU informs carriers and MSs. eu-LISA informs Carriers shall be eu-LISA resolves ECU informs ECU exempted from the failure carriers and MSs the obligation to verify the travel authorisation 9 Technically impossible to send a verification query Failure of the carrier interface detected by a carrier Art 13 (1a) Implementing Regulation (EU)2021/1217 ECU informs carriers and MSs. eu-LISA ECU Carrier ECU eu-LISA Carriers shall be exempted resolves informs informs informs confirms from the the failure carriers ECU eu-LISA the failure obligation to and MSs verify the travel authorisation 10 Technically impossible to send a verification query Failure to send verification queries or receive results from queries via the carrier interface, for other reasons than a failure of an EES/ETIAS component, detected by a carrier. Art 13(2) Implementing Regulation (EU) 2021/1217 ECU informs eu-LISA concerned MSs Carrier confirms resolves Carrier ECU that is not ECU Carrier onboard the failure informs informs informs a failure of passenger and ECU eu-LISA an without concerned consulting notifies MSs EES/ETIAS carrier interface ECU until resolution component of the issue 11 Carriers’ obligations in case of technical impossibility Failure to query or receive a reply from the carrier interface, for other reasons than a failure of an EES/ETIAS component  Carriers should inform ECU when they fail to access the carrier interface, for other reasons than a failure on the EES/ETIAS Information System;  Carriers should update ECU, every 12 hours, regarding the progress of the resolution of the failure;  Carriers may be requested to provide evidence of the start and resolution of the issue;  In case carriers fail to comply with this requirement or their justification is proven to be invalid, disconnection from the carrier interface will be considered. 12 Way Forward  Frontex will continue to work on the SOPs in close cooperation with eu-LISA and the European Commission;  Frontex will continue to collect and analyse new questions from carriers’ awareness and working group sessions be included in the FAQs. 13 Thank you  eu-LISA Industry Roundtable EES, ETIAS and Carriers: Getting ready for the Entry into Operation eu-LISA R&D and OPS Carriers WG, 26/07/2022  The eu-LISA Industry Roundtable (IR) • IR is a conference-type event organised TWICE every year – in October 16th edition • Organised in collaboration with the Presidency of the Council of the EU • WHY: The eu-LISA IR aims to bring together representatives of the industry, MS authorities and EU institutions; providing a forum to exchange views on developments of different technologies. 26/07/2022 2  The eu-LISA Industry Roundtable in October: Concept • WHEN: 11-12 of October • WHERE: Tallinn, Estonia (with the possibility of online participation) • WHAT: EES, ETIAS and Carriers: Getting ready for the Entry into Operation The IR will focus on: new technology solutions and business processes deployed by the industry (carriers and service providers), the MS and air/sea ports operators in relation with EES and ETIAS 26/07/2022 3  Agenda (preliminary) • 11 October (13:30 – 17:30 EET) • Opening • Session 1 – Setting the Scene: Legal Framework and updates (European Institutions) • Session 2 – Industry (Carriers Associations) • Cocktail Reception (19:30 EET) • 12 October (09:00 – 15:30 EET) • Session 3 – Industry (Carriers, Airports, Service providers, MS) • Session 4 – Industry (Carriers, Seaports/Land BCPs, Service providers, MS) • Session 5 – Industry (Service providers, Carriers, Airports/Seaports) • Closing 26/07/2022 4  Call for participation: Session 2 • WHAT: Session 2 - “Setting the scene: The carriers perspective” • WHO: Representatives of carriers associations Session 2 will focus on: Carriers new business and operational processes Solutions being considered to address the EiO of EES/ETIAS Preparations for the necessary pre-checks for travellers Pending tasks 26/07/2022 5  Call for participation: Sessions 3-4 • WHAT: Session 3 – “Operational pilot projects in air passenger transport” • WHAT: Session 4 – “Operational pilot projects in sea and land passenger transport” • WHO: • Carriers • Airports, seaports • Service providers • Representatives of MS Sessions 3 and 4 will focus on: Pilot projects in air (Session 3) and sea/land (Session 4) Evaluation in real operational conditions of new processes Lessons learned 26/07/2022 6  Call for participation: Session 5 • WHAT: Session 5 – “Industry solutions for air, sea and land passenger transport to support the EiO of EES and ETIAS” • WHO: • Industry / service providers • Carriers • Airports, seaports Session 5 will focus on: Industry innovations and new technology solutions Support of business processes related to the EiO of EES/ETIAS. Solutions may be directed to any stakeholder 26/07/2022 7  Timeline • 27/07/2022: Publication of the call for expression of interest (also shared with Carriers WG) • 09/09/2022: Call for expression of interest closes • 21/09/2022: Confirmation of participation to speakers • 11-12/10/2022: Industry Roundtable 26/07/2022 8 Thank you ! For questions regarding the Industry Roundtable please contact: [email protected] Examples of presentations from previous Industry Roundtables can be found on: https://www.eulisaroundtable.eu/ 26/07/2022 10  Video conference, 26 July 2022 Carriers Working Group of 26 of July 2022 Summary Subject: Monthly Carriers Working Group meeting 1st Session - Sea & Land Carriers at 09:00– 10:30 CET Participants: Carriers for the sea and coach industry, Carrier associations, European Commission (DG HOME), Member State (MS) experts, Frontex and eu-LISA 1. Introduction The meeting was opened and the agenda of the 14th Carriers Working Group was presented to the participants by eu-LISA. a. Agenda b. Carriers meeting calendar The WG took note of the carriers´ meeting calendar with highlights of the dates of previous and upcoming meetings. Monthly meetings of the Carrier Working Group have been scheduled up to the end of 2022. The next Carriers Working Group will take place on 30 September 2022. 2. Legal Updates The Carriers WG was informed of the updated planning regarding the (European entry-into-operation of EES and ETIAS. On 11 July 2022 the JHA Council Commission) endorsed a revised timeline whereby the entry-into-operation of EES is shifted to mid-May 2023 and of ETIAS to mid-November 2023 at the latest. In addition, the European Commission is working on a progressive approach for the go-live of EES with the objective to reduce as much as possible the length of queues at border crossing points at the launch of EES. The transitional period with the specific exception rules is estimated to last up nine months after the EiO. The Commission is considering measures such as the continued stamping of passports for three more months after the entry-into-operation of EES, European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 1 www.eulisa.europa.eu  allowing the carriers to check the status of the traveller in the passports in case the data cannot be checked via the Carrier Interface due to a technical impossibility. Furthermore, during this period national authorities would be allowed, under exceptional circumstances, to create incomplete EES files with obligatory capturing of solely alphanumeric data (i.e. no requirement to capture also biometric data). As a response to a question from the Working Group of June, the European Commission confirmed Greenland can be treated as if it was part of the Schengen Area. It was also clarified that Svalbard, although being under Norwegian sovereignty, Svalbard is not part of the Schengen Area. 3. Technical With regard to the new timeline for the EES and ETIAS entry-into-operation, Updates (eu- the activities of the carriers will be scheduled as follows: LISA)  The first milestone is the technical entry-into-operation of EES that is scheduled to the end of March 2023 by when all the involved stakeholders and the EES System shall be ready for the go-live.  The second milestone is the actual entry-into-operation of EES that is scheduled to mid-May 2023 (the exact date depends on actual readiness) by when the EES System and the Carriers Interface will start to be used in production mode. Additional details on the draft plan for carrier activities were provided. eu-LISA informed the participants of setting up an escalation process for solving open matters with carriers. It was suggested that, in case of no reply after more than five working days, since an administrative or technical query has been sent to the functional mailbox [email protected], or if the quality of the reply provided is not sufficient, the matter should be escalated to the functional mailbox [email protected]. Carriers were asked to indicate in the subject line that the matter is being escalated with [ESCALATION] in the subject and to provide the details of the issue in the email. In addition, the schedule of the Member States testing will be provided to carriers Associations, as well as a list of currently registered carriers. European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 2 www.eulisa.europa.eu  In the next Carriers Working Group sessions, more technical details will be provided and discussed. The Agency confirmed that the security requirement for MQ connectivity will not change and remains under VPN with certificates based as initially foreseen; this decision follows the outcomes of the security, project and data protection factors. The current status of registration and connectivity activities was provided, as well as details about the chosen connection means. The technical guidelines for the web portal and the mobile app were presented by eu-LISA, explaining the possibilities and procedures for CSV import and manual input. 4. Operational Frontex informed the Carriers WG about the status of the Frequently Asked Updates Questions (FAQ) document. An updated version has been published (Frontex) recently at eu-LISA´s carrier website: Carrier_FAQ.pdf (europa.eu). incorporating 40 new questions. Frontex invited carrier to go through the updated FAQ and provide their feedback as the primary purpose of the document is to assist carriers. The first version of the Standard Operating Procedures (SOP) document has been sent for review tothe European Commission and eu-LISA. A new template for a more user-friendly experience has been implemented throughout the document. The procedure in case of a technical impossibility of the Carrier Interface to receive or reply to queries was presented and illustrated by a few possible scenarios. The carriers were also reminded of their obligations in case of a technical impossibility to consult the Carrier Interface. European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 3 www.eulisa.europa.eu  5. eu-LISA eu-LISA informed the Carriers WG that the next eu-LISA Industry Industry Roundtable will be held in Tallinn (in person, with a possibility of online Roundtable – participation) on 11-12 October 2022. October 2022 The title of the event is “EES, ETIAS and Carriers: Getting ready for the Entry into Operation” and it will focus on presenting and discussing new technology solutions and the associated business and operational processes developed and deployed by carriers from all business areas and their respective service providers operating at air, sea and land borders in relation to EES and ETIAS, which will enter operations in 2023. The draft agenda of the event was presented, covering 2 sessions on the 11th and 3 sessions on the 12th. While the first session will be reserved to representatives from European Institutions, Carriers were invited to participate and propose presentations in all other sessions 2-5. The call for expression of interest to deliver a presentation has already been shared through the different eu-LISA communication channels and can be seen under: this link As of mid-August, regular updates on the IR will be published on: https://www.eulisaroundtable.eu/. 6. Q&A No additional questions were raised in the Q& A session. European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 4 www.eulisa.europa.eu  2nd Session – Air Carriers at 14:00–16:00 CET Participants: Carriers for the air industry, carrier associations, European Commission (DG HOME), Member State (MS) experts, Frontex and eu-LISA 1. Introduction The meeting was opened and the agenda of the 14th Carriers Working Group was presented to the participants by eu-LISA. a. Agenda b. Carriers meeting calendar The WG took note of the carriers´ meeting calendar with highlights of the dates of previous and upcoming meetings. Monthly meetings of the Carrier Working Group have been scheduled up to the end of 2022. The next Carriers Working Group will take place on 30 September 2022. 2. Legal Updates The Carriers WG was informed of the updated planning regarding the (European entry-into-operation of EES and ETIAS. On 11 July 2022 the JHA Council Commission) endorsed a revised timeline whereby the entry-into-operation of EES is shifted to mid-May 2023 and of ETIAS to mid-November 2023 at the latest. In addition, the European Commission is working on a progressive approach for the go-live of EES with the objective to reduce as much as possible the length of queues at border crossing points at the launch of EES. The transitional period with the specific exception rules is estimated to last up nine months after the EiO. The Commission is considering measures such as the continued stamping of passports for three more months after the entry-into-operation of EES, allowing the carriers to check the status of the traveller in the passports in case the data cannot be checked via the Carrier Interface due to a technical impossibility. Furthermore, during this period national authorities would be allowed, under exceptional circumstances, to create incomplete EES files with obligatory capturing of solely alphanumeric data (i.e. no requirement to capture also biometric data). European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 5 www.eulisa.europa.eu  As a response to a question from the Working Group of June, the European Commission clarified that there is no detailed planning yet for the entry-into-operation of the VIS Recast and therefore the shift of the EES entry-into-operation should not impact the entry-into-operation of the VIS Recast. 3. Technical With regard to the new timeline for the EES and ETIAS entry-into-operation, Updates (eu- the activities of the carriers will be scheduled as follows: LISA)  The first milestone is the technical entry-into-operation of EES that is scheduled to the end of March 2023 by when all the involved stakeholders and the EES System shall be ready for the go-live.  The second milestone is the actual entry-into-operation of EES that is scheduled to mid-May 2023 (the exact date depends on actual readiness) by when the EES System and the Carriers Interface will start to be used in production mode. Additional details on the draft plan for carrier activities were provided eu-LISA informed the participants of setting up an escalation process for solving open matters with carriers. It was suggested that, in case of no reply after more than five working days, since an administrative or technical query has been sent to the functional mailbox [email protected], or if the quality of the reply provided is not sufficient, the matter should be escalated to the functional mailbox [email protected]. Carriers were asked to indicate in the subject line that the matter is being escalated with [ESCALATION] in the subject and to provide the details of the issue in the email. In addition, the schedule of the Member States testing will be provided to carriers Associations, as well as a list of of currently registered carriers. In the next Carriers Working Group sessions more technical details will be provided and discussed. Concerns about the complexity of the registration procedure and the security rules were expressed by a few airlines and service providers. The Agency confirmed that the security requirement for MQ connectivity will be certificate based as initially foreseen; this decision follows the outcomes of the security, project, and data protection factors. Alternative options are available for Carriers that cannot adopt in time the certificate-based connectivity. European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 6 www.eulisa.europa.eu  The current status of registration and connectivity activities was provided, as well as details about the chosen connection means. The technical guidelines for the web portal and the mobile app were presented by eu-LISA, including explaining the possibilities and procedures for CSV import and manual input. 4. Operational Frontex informed the Carriers WG about the status of the Frequently Asked Updates (Frontex) Questions (FAQ) document. An updated version has been published recently at eu-LISA´s carrier website incorporating 40 new questions. Carrier_FAQ.pdf (europa.eu). Frontex invited carrier to go through the updated FAQ and provide their feedback as the primary purpose of the document is to assist carriers. The first version of the Standard Operating Procedures (SOP) document has been sent for review to the European Commission and eu-LISA. A new template for a more user-friendly experience has been implemented throughout the document. The procedure in case of a technical impossibility of the Carrier Interface to receive or reply to queries was presented and illustrated by a few possible scenarios. The carriers were also reminded of their obligations in case of a technical impossibility to consult the Carrier Interface. European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 7 www.eulisa.europa.eu  5. eu-LISA eu-LISA informed the Carriers WG that the next eu-LISA Industry Industry Roundtable will be held in Tallinn (in person, with a possibility of online Roundtable – participation) on 11-12 October 2022. October 2022 The title of the event is “EES, ETIAS and Carriers: Getting ready for the Entry into Operation” and it will focus on presenting and discussing new technology solutions and the associated business and operational processes developed and deployed by carriers from all business areas and their respective service providers operating at air, sea and land borders in relation to EES and ETIAS, which will enter operations in 2023. The draft agenda of the event was presented, covering 2 sessions on the 11th and 3 sessions on the 12th. While the first session will be reserved to representatives from European Institutions, Carriers were invited to participate and propose presentations in all other sessions 2-5. The call for expression of interest to deliver a presentation has already been shared through the different eu-LISA communication channels and can be seen under this link As of mid-August, regular updates on the IR will be published on: https://www.eulisaroundtable.eu/. 6. Q&A Several questions were raised during meeting, not all of which could be answered within the allocated time; answers will be provided in writing or consolidated in a presentation for the next meeting. European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 8 www.eulisa.europa.eu European Union Agency for the Operational Management of Large-Scale Vesilennuki 5, 10415 Tallinn, Estonia IT Systems in the Area of Freedom, Security and Justice 9 www.eulisa.europa.eu  DRAFT AGENDA 14th Carriers Working Group Video conference meeting 26 July 2022 1. Introduction a. Agenda b. Carriers meeting calendar 2. Legal updates (European Commission) 3. Technical updates (eu-LISA) 4. Operational updates (Frontex) 5. eu-LISA Industry Roundtable – October 2022 6. Q&A End of the meeting EUROPEAN UNION AGENCY FOR THE OPERATIONAL MANAGEMENT OF LARGE-SCALE Vesilennuki 5, 10415 Tallinn, Estonia IT SYSTEMS IN THE AREA OF FREEDOM, SECURITY AND JUSTICE www.eulisa.europa.eu Saatja: "EULISA CARRIERS" <[email protected]> Saaja: "EULISA CARRIERS" <[email protected]> Teema: Carriers WG: Invite to the 15th working group meeting on 30/09 Kuupäev: 2022-09-16 05:53 Dear Sir or Madam, We have the pleasure of inviting you to the 15th meeting of the Working Group for Carriers jointly organised by the European Commission (DG HOME) and eu-LISA. The meeting will take place online on September 30, 2022. The sessions for Sea and Land carriers have been combined as discussed during the last Working Group meeting. The allocated sessions per Business Area will therefore take place as follows: 10:00 – 12:00 (CEST*) Sea and Land Carriers 14:00 – 16:00 (CEST*) Air Carriers *CEST - Central European Summer Time Please note that you must confirm your participation via the following link: EUSurvey - Survey (europa.eu). The deadline to confirm your attendance is September 23, 2022 EoB! Enrolments past that date will not be accepted! Connection details and meeting agenda will be shared only with the confirmed and validated participants prior to the meeting. Kindly note that the participation is limited to registered carriers with their declared Service Providers (as per registration process) as well the Carrier Associations. We advise a maximum of 1-2 representatives per enterprise. For your reference, please find attached the meeting materials of the 14th Working Group meeting that took place on July 26. In addition, as mentioned previously, please note that a number of carrier related presentations have been published on the eu-LISA Carrier Working Group Website. There you will find a FAQ document, which includes answers to the most frequently asked questions , as well as several Explanatory Presentations.Please feel free to make reference to the presentations or share the link further as you find relevant. Should you have any question please contact [email protected]. We are looking forward to having a pleasant and productive meeting. Kind regards, on behalf of the eu-LISA Carrier team [email protected] www.eulisa.europa.eu ----------------------------- Disclaimer: This message is sent in confidence and is only intended for the named recipient. If you received this message by mistake, you may not use, copy or distribute this message or any part of its contents or rely upon the information contained in it. Please kindly notify the sender immediately by e-mail and delete the relevant e-mails from any computer. This message does not constitute a commitment by eu-LISA unless otherwise indicated.