Changes from report parliamentary committee draft to plenary report

Change 19

RemovedArticle 8 – paragraph 6: 6. eu-LISA shall collect statistics, for the sole purpose of evaluating the effectiveness of this Regulation, on the use of the EU Digital Travel application in accordance with Article 16(1), point (b), without such statistics allowing for the identification of the traveller concerned.

AddedArticle 8 – paragraph 5 a (new): 5a. Where the conditions set out in Article 35 of Regulation (EU) 2016/679 require that a data protection impact assessment be carried out, the competent border authorities referred to in Article 7(1) of this Regulation shall carry out that assessment before eu-LISA conducts the test referred to in paragraph 5.

RemovedArticle 8 a (new): Article 8a / Fundamental rights / Collection and processing of personal data in the context of this Regulation shall not result in discrimination against persons on the grounds listed in Article 21 of the Charter of Fundamental Rights of the European Union (the ‘Charter’). / It shall fully respect relevant Union law and fundamental rights, as enshrined in the Charter, including the right to respect for one’s private life and to the protection of personal data. / Particular attention shall be paid to vulnerable persons. / This Regulation shall respect freedom of movement.

AddedArticle 8 – paragraph 6: 6. eu-LISA shall collect and publish statistics, including on the number of users of the EU Digital Travel application, for the sole purpose of evaluating the usability of the mobile application and the effectiveness of this Regulation, in accordance with Article 16(1), point (b). Such statistics shall not allow for the identification of individual travellers.

Change 20

ChangedArticle 108 – paragraph 16 a (new): The information6a. campaignseu-LISA shall alsoensure includethat practicalthe informationEU onDigital theTravel scanningapplication ofdoes thenot chiptransfer ofor thedisclose travelany documentinformation toregarding ensureits theuse, correctperformance, or functioning ofto theany application.third party, other than those provided for in this Regulation.

Change 21

AddedArticle 8 – paragraph 7: 7. eu-LISA shall perform tasks related to the provision of training of the competent national authorities on the technical use of the EU Digital Travel application.

AddedArticle 8 – paragraph 7 a (new): 7a. eu-LISA shall conduct a penetration test and vulnerability assessment of the EU Digital Travel application within two years after the start of operations of the EU Digital Travel application and every four years thereafter. It shall, in case of a change to the system architecture of the EU Digital Travel application, or a potential or actual breach of that application that could impact data protection, update the data protection impact assessment accordingly.

AddedArticle 8 a (new): Article 8a / Fundamental rights / The application of this Regulation shall fully respect relevant Union law and fundamental rights, as enshrined in the Charter of Fundamental Rights of the European Union (the ‘Charter’), including the right to respect for one’s private life and to the protection of personal data. / Collection and processing of personal data for the purpose of this Regulation shall not result in discrimination against persons on the grounds listed in Article 21 of the Charter. / Particular attention shall be paid to vulnerable persons.

AddedArticle 9 – paragraph 1 – point a: (a) ensuring a secure connection between their national database and the Digital Travel Credential Router to receive data transmitted through the Digital Travel Credential Router to the competent border authorities;

AddedArticle 9 – paragraph 1 – point b a (new): (ba) ensuring the one-to-one verification through e-gates, as defined in Article 2, point (24), of Regulation (EU) 2016/399, or through any other infrastructure, between the individual traveller’s identity and their travel document for the purpose of carrying out border checks;

AddedArticle 9 – paragraph 1 – point c: (c) the management of and arrangements for access of duly authorised staff of border authorities to the data received through the Digital Travel Credential Router for the purpose of carrying out border checks in accordance with Regulation (EU) 2016/399.

AddedArticle 9 – paragraph 2: 2. Each Member State shall provide the staff of border authorities who have a right to access the data transmitted through the Digital Travel Credential Router with appropriate training covering, in particular, data security and data protection rules and applicable fundamental rights before authorising them to process such data.

AddedArticle 9 – paragraph 2 a (new): 2a. Each Member State shall ensure that travellers who do not wish to use the EU Digital Travel application or who withdraw their consent to their data being processed are provided with the necessary infrastructure to complete border checks using a physical travel document. Member States shall also ensure that the use of that infrastructure is not discouraged or made disadvantageous compared to the use of the EU Digital Travel application to complete border checks.

AddedArticle 9 – paragraph 2 b (new): 2b. This Regulation does not replace the existence of physical travel documents or the right to use such documents on their own.

AddedArticle 10 – paragraph 1: The Commission shall, in cooperation with eu-LISA, the European Border and Coast Guard Agency and national border authorities, support the start of operation of the EU Digital Travel application with an information campaign, informing the public, including third-country nationals, about the objectives, purposes, the main processing operations and other data protection and data security aspects, including the right to withdraw consent, and use cases of the EU Digital Travel application. The Commission shall use a cost-effective approach regarding that information campaign.

AddedArticle 10 – paragraph 1 a (new): The information campaign shall also include practical information on how to scan the chip of the travel document in order to ensure the correct use of the application.

AddedArticle 11 – paragraph 1: 1. Costs incurred by eu-LISA in relation to the development, operation, hosting and technical management of the EU Digital Travel application under this Regulation shall be borne by the general budget of the Union. The eu-LISA budget shall comply with the principles of economy, efficiency and effectiveness.

AddedArticle 11 – paragraph 2: 2. Costs incurred by Member States in relation to the development, operation and maintenance of their secure connections to receive data transmitted through the Digital Travel Credential Router shall be borne by Member States.

AddedRegulation (EC) No 2252/2024

AddedArticle 12 – paragraph 1 – point 1, Article 1– paragraph 1a – subparagraph 1 – introductory part: Passports and travel documents newly issued by Member States to their own nationals who are over the age of 16, or upon request from the applicant, passports and travel documents previously issued by Member States to their own nationals who are over the age of 16 shall be accompanied by a digital travel credential, which shall:

AddedRegulation (EC) No 2252/2024

AddedArticle 12 – paragraph 1 – point 1, Article 1 – paragraph 1a – subparagraph 1 – point b: (b) be in a format that enables their storage in the European Digital Identity Wallets, as qualified electronic attestation of attributes, provisions for which are laid down in Regulation (EU) No 910/2014 of the European Parliament and of the Council*;

Regulation (EC) No 2252/2004

Article 12 – paragraph 1 – point 1, Article 1 – paragraph 1a – subparagraph 3 a (new): The request for the digital travel credential may be made at any point in time.

Change 22

AddedRegulation (EC) No 2252/2024

AddedArticle 12 – paragraph 1 – point 1, Article 1 – paragraph 1a – subparagraph 3 b (new): The Commission is empowered to adopt delegated acts in accordance with Article 15a of Regulation (EU) .../2025 of the European Parliament and of the Council [EU Digital Travel application Regulation] in order to amend the minimum age referred to in paragraph 1 of this Article, provided that the necessary technical requirements and any other relevant conditions for granting digital travel credentials to persons under the age of 16, in particular as regards the facial image, are met.

Regulation (EC) No 2252/2004

Change 23

RemovedArticle 12 – paragraph 1 – point 3, Article 4 – paragraph 4: 4. Member States shall allow air carriers, for the purposes of Regulations (EU) 2025/12 and (EU) 2025/13, involved in the process of crossing the external borders, to access the storage medium in passports and travel documents, with the exception of fingerprints, with the consent of the person to whom the passport or travel document has been issued.

AddedArticle 12 – paragraph 1 – point 3, Article 4 – paragraph 4: deleted / (deleted)

RemovedArticle 15 – paragraph 1: 1. The Commission shall determine the date from which the EU Digital Travel application starts operations by means of an implementing act once eu-LISA has informed the European Parliament and the Commission of the successful completion of the test of the application referred to in Article 8(5).

AddedRegulation (EU) 2016/399

AddedArticle 13 – paragraph 1 – point 2 – point d, Article 8 – paragraph 10: 10. The Commission shall adopt implementing acts to establish minimum standards with regard to technology, methods and procedures to be used for the verification of the authenticity and validity of travel documents, and digital travel credentials according to this Article.

AddedRegulation (EU) 2016/399

AddedArticle 13 – paragraph 1 – point 3, Article 8a – paragraph 4a: deleted / (deleted) / (deleted) / (deleted) / (deleted)

AddedArticle 15 – paragraph 1: 1. The Commission shall determine the date from which the EU Digital Travel application starts operations by means of an implementing act once eu-LISA has informed the European Parliament, the Council and the Commission of the successful completion of the test of the application referred to in Article 8(5).

AddedArticle 15 – paragraph 1 a (new): 1a. The successful completion of the test of the EU Digital Travel application by eu-LISA shall be no later than one year after the entry into force of this Regulation.

AddedArticle 15 – paragraph 1 b (new): 1b. The date determined by the implementing act referred to in paragraph 1 shall be no later than 6 months after the successful completion of the test of the EU Digital Travel application.

AddedArticle 15 – paragraph 2: deleted

Article 15 a (new): Article 15a / Exercise of the delegation / 1. The power to adopt delegated acts is conferred on the Commission subject to the conditions laid down in this Article. / 2. The power to adopt delegated acts referred to in Article 4(7a) shall be conferred on the Commission for a period of five years from ... [the date of entry into force of this Regulation]. The Commission shall draw up a report in respect of the delegation of power not later than nine months before the end of the five-year period. The delegation of power shall be tacitly extended for periods of an identical duration, unless the European Parliament or the Council opposes such extension not later than three months before the end of each period. / 3. The delegation of power referred to in Article 4(7a) may be revoked at any time by the European Parliament or by the Council. A decision to revoke shall put an end to the delegation of the power specified in that decision. It shall take effect the day following the publication of the decision in the Official Journal of the European Union or at a later date specified therein. It shall not affect the validity of any delegated acts already in force. / 4. Before adopting a delegated act, the Commission shall consult experts designated by each Member State in accordance with the principles laid down in the Interinstitutional Agreement of 13 April 2016 on Better Law-Making. / 5. As soon as it adopts a delegated act, the Commission shall notify it simultaneously to the Europea…

Change 24

ChangedArticle 16 – paragraph 1 – point b:a: (b)(a) establish the statisticstechnical toarchitecture beof collectedthe byEU eu-LISA,Digital forTravel theapplication soleand purposeestablish ofthe evaluatingtechnical specifications for the effectivenessmobile ofapplication, thisbackend Regulation,services withoutand allowingDigital forTraveller Credential Router, ensuring the identificationhighest standards of anysecurity traveller,and ondata theprotection, useand ofcompatibility thewith EUEES, DigitalETIAS Traveland application;API;

Change 25

RemovedArticle 18 – paragraph 5: 5. By… [two years after the start of operations of the EU Digital Travel application] and every four years thereafter, the Commission shall conduct an overall evaluation of the EU Digital Travel application and its use. The overall evaluation report established on this basis shall include an assessment of the application of this Regulation and an examination of results that have been achieved relative to the objectives that were set and of the impact on fundamental rights. The report shall also include an overall assessment of whether the underlying rationale for operating the EU Digital Travel application continues to hold, of the appropriateness of the technical features of the application, of the security of the application and of any implications for future operations. The evaluation shall include necessary recommendations. The Commission shall transmit the report to the European Parliament, the Council, the European Data Protection Supervisor and the European Union Agency for Fundamental Rights.

AddedArticle 16 – paragraph 1 – point b: (b) establish the statistics to be collected and published by eu-LISA, including on the number of users of the EU Digital Travel application, for the sole purpose of evaluating the usability of the mobile application and effectiveness of this Regulation, without allowing for the identification of any traveller, on the use of the EU Digital Travel application;

AddedArticle 18 – paragraph 1: 1. eu-LISA shall put in place procedures to monitor the development of the EU Digital Travel application in light of the objectives relating to planning and costs and to monitor the functioning of the EU Digital Travel application in light of the objectives relating to the technical output, cost-effectiveness, security and quality of service.

AddedArticle 18 – paragraph 3: 3. The report referred to in paragraph 2 shall include detailed information about the costs incurred and information as to any risks which may impact the overall costs of the EU Digital Travel application to be borne by the general budget of the Union. The report shall also include detailed information about the technical implementation of the project and any technical problems and risks that may impact the security of travel data or the overall development and entry into operations of the EU Digital Travel application.

AddedArticle 18 – paragraph 5: 5. By… [two years from the start of operations of the EU Digital Travel application] and every four years thereafter, the Commission shall conduct an overall evaluation of the EU Digital Travel application and its use. The overall evaluation report established on this basis shall include an assessment of the application of this Regulation and an examination of results that have been achieved relative to the objectives that were set and of the impact on fundamental rights. The report shall also include an overall assessment of whether the underlying rationale for operating the EU Digital Travel application continues to hold, of the appropriateness of the technical features of the application, of the security of the application and of any implications for future operations. The evaluation shall include necessary recommendations. The Commission shall transmit the report to the European Parliament, the Council, the European Data Protection Supervisor and the European Union Agency for Fundamental Rights.