vrd exchange / eucaris - european commission · vrd exchange / eucaris presentation of the...

VRD Exchange / EUCARIS Presentation of the preliminary findings for Tasks 02 and 05 of the evaluation / discussion

5th October 2015

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72

Evaluation of the CBE Directive: EUCARIS | 5 October 2015|© Kurt Salmon | 2

Disclaimer

The information and views set out in this publication are those of the author(s) and do not necessarily reflect the official opinion of the European Commission.

The European Commission does not guarantee the accuracy of the data included in this document. Neither the European Commission nor any person acting on the European Commission’s behalf may be held responsible for the use which may be made of the information contained therein.

© European Union, 2015

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Page

01: Presentation of EUCARIS 05

02: Task 02 09

03: Task 05 18

04: Q&A 21

Table of Contents

European Vehicle and Driving Licence Information System

Presentation of EUCARIS

01 02 03 04

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Legal basis establishing EUCARIS

› Treaty concerning a European Vehicle and Driving Licence Information System (EUCARIS), Luxembourg, 29 June 2000.

3

› Justice and citizens’ rights: DG HOME - Police Cooperation (PRÜM Decision)

› Transport and travel: DG MOVE – RESPER, ERRU, Tachonet; DG ENTR - Reregistration of vehicles DG CNECT – eCall

Policy areas supported by EUCARIS 5

Presentation of EUCARIS (1/3) Key facts

Source: EUCARIS Treaty,; Assessment of TES supporting EU policies , Self-assessment questionnaire on EUCARIS , 12.07.2013.

Objectives of EUCARIS 2

› To ensure that the central vehicle and driving licence registers of EU countries are accurate and reliable;

› To assist in preventing, investigating and prosecuting offences against the laws of individual States in the field of driving licences, vehicle registration and other vehicle-related fraud and criminality;

› To exchange information rapidly in order to increase the efficiency of administrative measures taken by the relevant authorities according to the legal and administrative regulations of EU countries.

Description of EUCARIS 1

› The European Vehicle and Driving Licence Information System (EUCARIS) is an information system, established by the EUCARIS Treaty, for the exchange of vehicle and driving licence data between Member States (MSs).

Year of operation

› Operational since 31 December 1994.

4

Cost of EUCARIS

6

Expenditure Amount of the funding (in €m)

2013 2014 2015 2016 2017 Total (per year)

Development 0.3 0.3 0.3 0.3 0.3 0.3

Maintenance 0.1 0.1 0.1 0.1 0.1 0.1

Support 0.3 0.3 0.3 0.3 0.3 0.3

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72

Evaluation of the CBE Directive: EUCARIS | 5 October 2015|© Kurt Salmon | 6 Source: Presentation from Association of European Vehicle and Driver Registration Authorities, 21.11.2012

Presentation of EUCARIS (2/3) Overall architecture

Closed Network

NL

UK

Police

Customs

Other enforcement authorities

Registration Authority

Registration Authority

BE

DE

...

SE

Technical Vehicle Inspection Centres

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72

Evaluation of the CBE Directive: EUCARIS | 5 October 2015|© Kurt Salmon | 7 Source: Working group on Information Exchange and Data Protection (DAPIX), 21.08.2012

Presentation of EUCARIS (3/3) CBE implementation

Police system Prüm

Police system traffic checks

Justice system traffic fine collection

EUCARIS EUCARIS

Online provision of Prüm data

Online provision of

CBE data

Batch provision of

CBE data

Vehicle registration

Batch requests, multi‐ vehicle, asynchronous processing

Single requests, case by case, for online checks

Requesting MS sTESTA Providing MS

sTESTA network

• A requesting MS can develop an online real-time facility; a procedure to send out requests in batch mode, or both for retrieval of vehicle and owner/holder data.

• EUCARIS is responsible for services for the exchange of vehicle and owner/holder data.

• A providing MS is obliged to support provision of vehicle and owner/holder data both in online real-time mode and in batch exchange mode.

Task 02

01 02 03 04

Scope, preliminary findings & recommendations

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Scope Assessment of EUCARIS effectiveness

Scope

› Assessment of whether EUCARIS guarantees an effective, expeditious, secure and confidential exchange of

specific vehicle registration data.

“To what extent are the costs involved in the cross-border exchange of data and for the follow-up

procedures adequate to achieve the objectives of the CBE Directive?”

› Quantitative analysis on how many of road safety related traffic offences detected automatically are

followed by the searches via EUCARIS in 2013/2015.

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


› Implementation of EUCARIS/CBE between 2013 and 2015

› EUCARIS/CBE application was operational in 14 EU countries at the end of 2014.

› EUCARIS/CBE application was operational in 16 EU countries, as of June 2015.

› 2 EU countries passed the implementation test with RDW/NL and are now waiting for the final decision of their competent ministry.

› 9 EU countries had not yet started implementing the application, out of which 3 have until 06 May 2017 to do so (i.e. UK, IE, DK).

Source: Report from RDW/NL on the implementation of the CBE directive (2013, 2014 and 2015)

20

8 9

3

3

7

2

1416

32

2

2013 2014 2015

1

No initiative (yet) Under construction

Opt-out In acceptance

Accepted, pending

In production

Preliminary finding Implementation of the EUCARIS/CBE application (1/2)

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


› Implementation of EUCARIS/CBE in 2015

Source: Report from RDW/NL on the implementation of the CBE directive (2013, 2014 and 2015)

SI

PL NL

ES

LV

RO

DE

CZ

IE

FI

BG

SE

HU

IT

UK

BE

FR

PT

SK

DK

HR

EE

LT

LU

CY

MT

GR

NO

CH

AT

In production Accepted, pending In acceptance Under construction

Opt-out No initiatives (yet)

› Croatia and Estonia are the two latest countries having implemented the EUCARIS/CBE application.

› Italy and Greece passed the implementation test with RDW/NL and are now waiting for the final decision of their competent ministry.

› Luxembourg and Malta are in the testing phase.

› The EUCARIS/CBE application is under construction in Slovenia.

Preliminary finding Implementation of the EUCARIS/CBE application (2/2)

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


› While data tend to be scarce per type of offence, 8 countries (57%) were able to report on the total number of outgoing searches performed and failed searches.

Preliminary finding Failed outgoing searches

Article 6 of the CBE Directive: “Member States shall send a preliminary report to the Commission by 7 November 2014. They shall also

send a comprehensive report to the Commission by 6 May 2016 and every two years thereafter..”

BE

665

1,680 74

BG 54

1,406,263 66,351

DE

FR

3,424

2,794 167,973

AT 77,479

138,281

7,484 PL

1,363

LT 1,902 5,337

HU 2,540

Failed searches

Outgoing searches

Source: Preliminary reports submitted by MSs to the Commission by 7 November 2014 (AT, BE, BG, DE, ES, FR, HU, LV, LT, NL, PL, RO, SK, SE).

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Source: Interview with RDW/NL on 15.09.2015; Working group on Information Exchange and Data Protection (DAPIX), 21.08.2012

2. Secure Sockets Layer

The exclusiveness of the data exchange is

guaranteed by encryption of the

message by means of one-

sided SSL.

3. XML-signing

XML-signing guarantees the integrity of the communication

and authenticates the sender of the

message.

4. Separated user groups

Users of other functionalities of EUCARIS have no access to the CBE

functionalities.

1. Closed EU network sTESTA

All traffic over this network is encrypted/

decrypted by hardware devices at the endpoints of the network.

5. Logging

Both requests and responses are

logged.

6. Configurable maximum

legal storage period

Security measures used by EUCARIS

Article 4(4) of the CBE Directive: “Member States shall ensure that this exchange of information is conducted in a cost efficient and

secure manner and ensure the security and protection of the data transmitted, as far as possible using existing software applications such

as the one especially designed for the purposes of Article 12 of Decision 2008/615/JHA, and amended versions of those software

applications, in compliance with Annex I to this Directive and with points 2 and 3 of Chapter 3 of the Annex to Decision 2008/616/JHA.“

Preliminary finding Compliance of EUCARIS/CBE application with security provisions

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Article 7 of the CBE Directive: “The provisions on data protection set out in Framework Decision 2008/977/JHA shall apply to personal

data processed under this Directive. “[…] “All relevant provisions on data protection set out in the Prüm Decisions shall also apply to

personal data processed under this Directive.”

Preliminary finding Compliance of EUCARIS/CBE application with data protection provisions

› EUCARIS only transfers data from one MS to another: EUCARIS does not store any information apart from these included in the logging (as part of the security measures).

› The system can thus be considered as fully compliant with the data protection provisions from the CBE Directive.

Mem

ber

Sta

te

Mem

ber

Sta

te

Mem

ber

Sta

te

The client: - Checks the server certificate - Signs the message

One-sided SSL tunnel The server: - Terminates the SSL-tunnel - - Checks the signature

Plain text message

TCP/IP network

Signed XML-message

Signed XML-message

External organisation (client applications)

Data centre

Requesting MS

Router EUCARIS Back-end

Source: Interview with RDW/NL on 15.09.2015; Council Decision 2008/616/JHA

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


1. To what extent do you agree that the EUCARIS application supports the proper implementation of the CBE Directive?*

2. What is your overall satisfaction with the EUCARIS application?*

3. To what extent has EUCARIS met your expectations?*

4. In your opinion, how is the EUCARIS application compared with an ideal information exchange system?*

5. What is your overall satisfaction with the other functionalities (e.g. for Prüm) offered by EUCARIS?*

6. How likely is it that you would recommend EUCARIS within your MS to exchange VRD for other purposes such as tolls, parking fees etc. provided that a legal base for the exchange is present?*

7. What is your overall satisfaction with the EUCARIS helpdesk support?*

8. To what extent do you agree that the EUCARIS helpdesk support has been helpful to assist you in deploying and performing operations with the system?*

› A satisfaction survey aims to be distributed at the next EUCARIS General Assembly, to assess target user groups’ degree of satisfaction with EUCARIS/CBE application.

Source: American Customer Satisfaction Index (ACSI) and Net Promoter Score (NPS)

EUCARIS Assembly

Satisfaction survey

Preliminary finding Degree of satisfaction in the use of EUCARIS/CBE application

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Recommendations Assessment of EUCARIS effectiveness

Recommendations

1. EUCARIS/CBE application guarantees an effective, expeditious, secure and

confidential exchange of specific vehicle registration data.

It is recommended that Member States actively use the system (searches

following the offences i.e. active investigation), since this remains unsatisfactory.

2. Moreover, even though MSs seem to be satisfied with the EUCARIS/CBE application (no user

reported any major issue to RDW/NL on the operation of EUCARIS/CBE application), it is

recommended to conduct a survey to measure the satisfaction of EUCARIS/CBE

application user groups with the system, since this has never been done in the past.

Task 05

01 02 03 04

Scope & preliminary findings

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Scope Assessment of EUCARIS efficiency

Scope

› Quantitative assessment of administrative costs, including for the cross-border exchange of data and for

the follow-up procedures.

“To what extent are the costs involved in the cross-border exchange of data and for the follow-up

procedures adequate to achieve the objectives of the CBE Directive?”

“What aspects of the implementation of the CBE Directive generate unnecessary administrative

burden and how could this be improved?”

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Preliminary finding Total IT costs for administering, using and maintaining EUCARIS

› The overall cost for administering the EUCARIS application was estimated in 2013 by RDW/NL.

Expenditure Amount of the funding (in €m)

2013 2014 2015 2016 2017

Infrastructure 0.0 0.0 0.0 0.0 0.0

Development 0.3 0.3 0.3 0.3 0.3

Maintenance 0.1 0.1 0.1 0.1 0.1

Support 0.3 0.3 0.3 0.3 0.3

Training 0.0 0.0 0.0 0.0 0.0

› In addition, the costs (per MS and per year) related to the development and implementation of the EUCARIS/CBE application were as follows:

• 2013: € 8,805

• 2014: € 2,633

• 2015: € 1,680

• 2016: € 1,250 (€ 750 + € 500 to cover the operational costs for the CBE).

Source: Interview with RDW/NL on 15.09.2015; Council Decision 2008/616/JHA

Q&A

01 02 03 04

Questions ?

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Thank you for your participation

0.00 0.10 0.10

2.05

0.45 0.55

0.35

2.94

4.72 4.72


Kurt Salmon Luxembourg

41, Zone d’activité Am Bann

L-3372 Leudelange

Luxembourg

T +352 26 37 74 1

F +352 26 37 74 982

www.kurtsalmon.com

Alessandro Zamboni Senior Manager

T +352 26 37 74 72 M +352 621 321 053

[email protected]

Céline Monteiro Consultant

M +352 691 321 210

[email protected]

Ludovic Mayot Senior Consultant

T +352 26 37 74 50 M +352 691 321 007

[email protected]

vrd exchange / eucaris - european commission · vrd exchange / eucaris presentation of the...

Documents