Changes from plenary report to adopted text

AddedThe Commission shall inform the Member States of any withdrawal of an EU-type approval.

Added(8) EU type-approval certificates issued by Member States shall be mutually recognised.

Added(9) Where a Member State ascertains that a significant number of driving licences which include a microchip are repeatedly found not to be in conformity with this part of Annex I, that Member State shall communicate this to the Commission. The relevant EU type-approval certificate number connected to those driving licences as well as a description of the non-compliance shall be indicated. The Commission shall without undue delay inform all other Member States on the facts communicated to it under this paragraph.

Added(10) The Member State which issued those driving licences shall investigate the problem without delay and take appropriate corrective action, including withdrawal of the EU type-approval certificate where necessary.

AddedPART B1: General requirements for driving licences which include a microchip

AddedThe general requirements for driving licences including a microchip described in this Annex are based on international standards, in particular the ISO/IEC 18013-series standards. They cover:

Added(a) the specifications for the microchip and the logical data structure on the microchip;

Added(b) the specifications for harmonised and additional data to be stored;

Added(c) the specifications relating to data protection mechanisms for the digitally stored data on the microchip.

Added1. ABBREVIATIONS

Added2. DATA STORED ON THE MICROCHIP

Added(1) Harmonised mandatory and optional driving licence data

AddedThe microchip shall store the harmonised driving licence data specified in part D. If a Member State decides to include in the driving licence data items marked as optional in part D, those items shall be stored in the microchip.

Added(2) Additional data

AddedMember States may store additional data on the microchip which their national laws related to driving licences provide for. They shall inform the Commission thereof.

Added3. MICROCHIP

Added(1) Storage medium type

AddedThe storage medium for driving licence data shall be a microchip with a contact, contactless, or combined contact and contactless (dual) interface, as specified in part B2, item 1.

Added(2) Applications

AddedAll data on a microchip shall be stored in electronic applications. All applications on the microchip shall be identified by a unique code called Application Identifier (AID) as specified in part B2, item 2.

Added(a) EU Driving Licence Application

AddedMandatory and optional driving licence data, as referred to in Annex I, part D, shall be stored in the dedicated EU Driving Licence application. The AID for the EU Driving Licence application shall be:

Added‘A0 00 00 04 56 45 44 4C 2D 30 31’,

Addedconsisting of both of the following:

Added- the Registered Application Identifier (RID) for the European Commission: ‘A0 00 00 04 56’;

Added- the Proprietary Application Identifier Extension (PIX) for the EU Driving Licence application: ‘45 44 4C 2D 30 31’ (EDL-01).

AddedData shall be grouped in Data Groups (DGs) as part of a Logical Data Structure (LDS).

AddedDGs shall be stored as Elementary Files (EFs) in the EU Driving Licence application, and shall be protected in accordance with part B2, item 3.

Added(b) Other Applications

AddedOther additional data shall be stored in one or more dedicated applications apart from the EU Driving Licence Application. Each such application shall be identified by a unique AID.

Added4. LOGICAL DATA STRUCTURE OF THE EU DRIVING LICENCE APPLICATION

Added(1) Logical Data Structure

AddedDriving Licence Data shall be stored on the microchip in a Logical Data Structure (LDS) specified in part B2, item 4. This point specifies additional requirements for the mandatory and additional DGs.

AddedEach DG shall be stored in one EF. The EFs to be used for the EU Driving Licence Application shall be identified with the Elementary File Identifiers (EFIDs) and Short EF identifiers as specified in part B2, item 5.

Added(2) Mandatory Data Groups

AddedThe mandatory and optional data elements shall be stored in the following DGs:

Added(a) DG 1: all mandatory and optional data elements as printed on the document, except face image and signature image;

Added(b) DG 5: image of the licence holder’s signature;

Added(c) DG 6: image of the licence holder’s face.

AddedDG 1 data shall be structured as specified in point 6 and as specified in Part B2, item 6. Data contained in DG 5 and DG 6 shall be stored in accordance with the specifications of part B2, item 7.

Added(3) Additional Data Groups

AddedThe additional data elements, where provided for by the national legislation of Member States concerning driving licences, shall be stored in the following DGs:

Added(a) DG 2: details on the licence holder, except for biometric data;

Added(b) DG 3: details on issuing authority;

Added(c) DG 4: portrait image;

Added(d) DG 7: biometric data regarding fingerprint of the licence holder;

Added(e) DG 8: biometric data regarding iris of the licence holder; [Am. 138]

Added(f) DG 11: other details, such as the full name of the holder in national characters.

AddedData contained in these DGs shall be stored in accordance with the specifications of part B2, item 8.

Added5. DATA SECURITY MECHANISMS

AddedAppropriate mechanisms shall be used for the validation of authenticity and integrity of the microchip and data contained in it and for restricting access to driving licence data.

AddedData on the microchip shall be protected according the specifications laid down in part B2, item 3. This section specifies additional requirements that shall be complied with.

Added(1) Authenticity Verification

Added(a) Mandatory Passive Authentication

AddedAll DGs stored in the EU Driving Licence application shall be protected with passive authentication.

AddedData related to passive authentication shall comply with the requirements specified in part B2, item 9.

Added(b) Optional Active Authentication

AddedOptional Active Authentication mechanisms shall be applied to ensure that the original microchip has not been replaced.

Added(2) Access Restriction

Added(a) Mandatory Basic Access Protection