Supervision at national level
The processing of data stored in the second generation Schengen Information System (SIS II) must comply with the relevant data protection requirements. The authorities in each country using SIS II verify the information they enter in the system. The European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA) and the European Commission have both taken measures to ensure the physical protection of data in SIS II.
The SIS II Supervision Coordination Group, consisting of representatives of the EU Member States’ national supervisory authorities and the European Data Protection Supervisor (EDPS), ensures that the data contained in SIS II are processed in accordance with the data protection rules. The EDPS oversees personal data processing in the central system. The supervisory data protection authority of the respective Member State oversees the processing of data by the national authorities, ensuring the observance of data subjects’ rights.
All data subjects have the right to be informed of the data on them that are stored in SIS II and to request correction of inaccuracies or deletion of unlawfully stored data. This process is managed by the national data protection authorities.
Supervision at European level
Supervision of the central SIS II is exercised by the European Data Protection Supervisor (EDPS). Supervision of each national SIS II is entrusted to the data protection authorities in each country.
The SIS II Supervision Coordination Group was set up in 2013 to ensure a coordinated supervision between the EDPS and the national supervisory authorities. Further information about the Group can be found HERE.