1. Each Member State shall be responsible for:
(a)
ensuring a secure connection between its national criminal records and fingerprints databases and the national central access point;
(b)
the development, operation and maintenance of the connection referred to in point (a);
(c)
ensuring a connection between its national systems and the ECRIS reference implementation;
(d)
the management of and arrangements for access of duly authorised staff of the central authorities to ECRIS-TCN in accordance with this Regulation and for establishing and regularly updating a list of such staff and the profiles referred to in point (g) of Article 19(3).
2. Each Member State shall give the staff of its central authority who have a right to access ECRIS-TCN appropriate training covering, in particular, data security and data protection rules and applicable fundamental rights, before authorising them to process data stored in the central system.