1. Access to the ETIAS Information System shall be reserved exclusively for duly authorised staff of the ETIAS Central Unit and of the ETIAS National Units.
2. Access by border authorities to the ETIAS Central System in accordance with Article 47 shall be limited to searching the ETIAS Central System to obtain the travel authorisation status of a traveller present at an external border crossing point and to the data referred to in points (a), (c) and (d) of Article 47(2). In addition, border authorities shall be informed automatically of the flags referred to in Article 36(2) and (3) and of the reasons for the flags.
When exceptionally, according to a flag, a second line check is recommended at the border or additional verifications are needed for the purpose of a second line check, border authorities shall access the ETIAS Central System to obtain the additional information provided for in point (e) of Article 39(1) or point (f) of Article 44(6).
3. Access by carriers to the ETIAS Information System in accordance with Article 45 shall be limited to sending queries to the ETIAS Information System to obtain the travel authorisation status of a traveller.
4. Access by immigration authorities to the ETIAS Central System in accordance with Article 49 shall be limited to obtaining the travel authorisation status of a traveller present on the territory of the Member State, and to certain data as referred to in that Article.
Access by immigration authorities to the ETIAS Central System in accordance with Article 65(3) shall be limited to the data referred to in that Article.
4a. Access to the ETIAS identity data and travel document data stored in the CIR shall also be reserved exclusively for the duly authorised staff of the national authorities of each Member State and for the duly authorised staff of the Union agencies that are competent for the purposes laid down in Articles 20, 20a and 21 of Regulation (EU) 2019/817. Such access shall be limited according to the extent that the data are required for the performance of their tasks for those purposes, and proportionate to the objectives pursued.
4b. The screening authorities as defined in Article 2, point (10), of Regulation (EU) 2024/1356 (the ‘screening authorities’) shall also have access to ETIAS to consult the data in order to perform the checks in accordance with Article 15(2) of that Regulation.
A search in accordance with this paragraph shall be performed by using the data referred to in Article 14(1), points (a) and (b), of Regulation (EU) 2024/1356 and ETIAS shall return a hit where a decision refusing, annulling or revoking a travel authorisation based on Article 28(7) or on Article 37(1), points (a), (b) and (e), of this Regulation is included in a matching application file.
Where a hit is obtained, the screening authorities shall have access to all relevant data in the file.
If the search carried in accordance with this paragraph indicates that there is a correspondence between the data used for the search and the data recorded in the ETIAS watchlist referred to in Article 34, the ETIAS National Unit or Europol having entered the data in the ETIAS watchlist shall be notified of the correspondence and shall be responsible for accessing the data in the ETIAS watchlist and for providing an opinion in accordance with Article 35a.
5. Each Member State shall designate the competent national authorities referred to in paragraphs 1, 2, 4 and 4a of this Article, and the screening authorities referred to in paragraph 4b of this Article, and shall communicate a list of those authorities to eu-LISA without delay, in accordance with Article 87(2) of this Regulation. That list shall specify for which purpose the duly authorised staff of each authority shall have access to the data in the ETIAS Information System in accordance with paragraphs 1, 2, 4 and 4a of this Article.