Article 43 — Data security
Entry/Exit System (EES), Regulation (EU) 2017/2226
What does ENTRY-EXIT-SYSTEM Article 43 say?
Short answer, straight from the official text
1. The Member State responsible shall ensure the security of the data before and during the transmission to the NUI. Each Member State shall ensure the security of the data it receives from the EES. 2.
Source: Entry/Exit System (EES), Regulation (EU) 2017/2226, read 2026-10-13.
| In the act | EU 2017/2226 |
| CELEX | 32017R2226 |
| Read on | 2026-10-13 |
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
Jump to a point: Point 1 · Point 2 · Point 3 · Point 4 · Point 5 · Point 6 · Point 7 · Point 8 · Point 9
1. The Member State responsible shall ensure the security of the data before and during the transmission to the NUI. Each Member State shall ensure the security of the data it receives from the EES.
2. Each Member State shall, in relation to its national border infrastructure, adopt the necessary measures, including a security plan and a business continuity and disaster recovery plan, in order to:
(a) physically protect data, including by making contingency plans for the protection of critical infrastructure;
(b) deny unauthorised persons access to data-processing equipment and national installations in which the Member State carries out operations in accordance with the purposes of the EES;
(c) prevent the unauthorised reading, copying, modification or removal of data media;
(d) prevent the unauthorised entering of data and the unauthorised inspection, modification or erasure of stored personal data;
(e) prevent the use of automated data-processing systems by unauthorised persons using data communication equipment;
(f) prevent the unauthorised processing of data in the EES and any unauthorised modification or erasure of data processed in the EES;
(g) ensure that persons authorised to access the EES have access only to the data covered by their access authorisation, by means of individual and unique user identities and confidential access modes only;
The article continues in the official text.
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Back to the act · EU acts, read down to the national law
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
