See Full Document Text
Official Journal EN
of the European Union L series
2026/1156 29.5.2026
COMMISSION IMPLEMENTING DECISION(EU) 2026/1156
of 28 May 2026
determining the date from which the common identity repository is to start operations pursuant to
Regulations (EU) 2019/817 and (EU) 2019/818 of the European Parliament and of the Council
THE EUROPEAN COMMISSION,
Having regard to the Treaty on the Functioning of the European Union,
Having regard to Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing
a framework for interoperability between EU information systems in the field of borders and visa and amending
Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861
of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA(1), and in
particular Article 72(3) thereof,
Having regard to Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing
a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum
and migration and amending Regulations (EU) 2018/1726, (EU) 2018/1862 and (EU) 2019/816(2), and in particular
Article 68(3) thereof,
Whereas:
(1) Regulation (EU) 2019/817 and Regulation (EU) 2019/818 establish a framework for interoperability between the EU
information systems in the fields of borders, visa, police and judicial cooperation, asylum and migration.
(2) That framework comprises a number of interoperability components, including the common identity repository
(CIR). The CIR creates an individual file for each person that is registered in the Entry/Exit System (EES), the Visa
Information System (VIS), the European Travel Information and Authorisation System (ETIAS), the European
Asylum Dactyloscopy Database (Eurodac) or the European Criminal Records Information System for Third-Country
Nationals (ECRIS-TCN). This component is established to facilitate and assist in the correct identification of persons
registered in the systems, support the Multiple-Identity Detector (MID), and streamline access for designated
authorities as specified by the related provisions in the Regulations.
(3) Pursuant to Regulations (EU) 2019/817 and (EU) 2019/818, the Commission is to determine the date from which the
CIR is to start operations, once the conditions in Article 72(3) of Regulation (EU) 2019/817 and Article 68(3) of
Regulation (EU) 2019/818 have been met. That date is to be set within 30 days from adoption of the
implementing act.
(1) OJ L 135, 22.5.2019, p. 27, ELI: http://data.europa.eu/eli/reg/2019/817/oj.
(2) OJ L 135, 22.5.2019, p. 85, ELI: http://data.europa.eu/eli/reg/2019/818/oj.
ELI: http://data.europa.eu/eli/dec_impl/2026/1156/oj 1/3EN
OJ L, 29.5.2026
(4) The Commission has verified that the implementing acts necessary for the operation of the CIR were adopted(3); that
the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom,
Security and Justice (eu-LISA) declared the successful completion of a comprehensive test of the CIR, which it has
conducted in cooperation with the Member States authorities; that eu-LISA has validated the technical and legal
arrangements to collect and transmit the data referred to in Article 18 of Regulations (EU) 2019/817 and
(EU) 2019/818 and has notified them to the Commission; that eu-LISA has declared the successful completion of a
comprehensive test of the automated data quality control mechanisms and procedures, the common data quality
indicators and the minimum data quality standards, which it has conducted in cooperation with the Member States
authorities.
(5) It is therefore appropriate to determine the date on which the operations of the CIR start.
(6) Given that Regulations (EU) 2019/817 and (EU) 2019/818 build upon the Schengen acquis, in accordance with
Article 4 of Protocol No 22 on the Position of Denmark, annexed to the Treaty on European Union and to the Treaty
on the Functioning of the European Union, Denmark notified the implementation of Regulations (EU) 2019/817 and
(EU) 2019/818 in its national law. Denmark is therefore bound by this Decision.
(7) This Decision constitutes a development of the provisions of the Schengen acquisin which Ireland does not take part
in accordance with Protocol No 19 on the Schengen acquis integrated into the framework of the European Union,
annexed to the Treaty on European Union and the Treaty on the Functioning of the European Union, and, subject to
the application of Article 4 of that Protocol, Ireland is not bound by it or subject to its application.
(8) As regards Iceland and Norway, this Decision constitutes a development of the provisions of the Schengen acquis
within the meaning of the Agreement concluded by the Council of the European Union and the Republic of Iceland
and the Kingdom of Norway concerning the latters’ association with the implementation, application and
development of the Schengen acquis(4), which fall within the area referred to in Article 1, point A of Council
Decision 1999/437/EC(5).
(9) As regards Switzerland, this Decision constitutes a development of the provisions of the Schengen acquiswithin the
meaning of the Agreement between the European Union, the European Community and the Swiss Confederation on
the Swiss Confederation’s association with the implementation, application and development of the Schengen
acquis(6), which fall within the area referred to in Article 1, point A of Decision 1999/437/EC, read in conjunction
with Article 3 of Council Decision 2008/146/EC(7).
(3) Commission Implementing Decision of 16 September 2021 laying down the specifications of the cooperation procedure as regards
security incidents that have or may have an impact on the operation of the interoperability components or on the availability,
integrity and confidentiality of the data, pursuant to Article 43(5) of Regulation (EU) 2019/817 (C(2021) 6663); Commission
Implementing Decision of 16 September 2021 laying down the specifications of the cooperation procedure as regards security
incidents that have or may have an impact on the operation of the interoperability components or on the availability, integrity and
confidentiality of the data, pursuant to Article 43(5) of Regulation (EU) 2019/818 (C(2021) 6664); Commission Implementing
Decision of 20 January 2022 laying down the specifications for technical solutions to manage user access requests for the purpose of
Article 22 of Regulation (EU) 2019/817 and to facilitate the collection of the information for the purpose of generating reports and
statistics for the purpose of Article 78(7) and (9) of Regulation (EU) 2019/817 (C(2022) 46 final); Commission Implementing
Decision of 20 January 2022 laying down the specifications for technical solutions to manage user access requests for the purpose of
Article 22 of Regulation (EU) 2019/818 and to facilitate the collection of the information for the purpose of generating reports and
statistics for the purpose of Article 74(7) and (9) of Regulation (EU) 2019/818 (C(2022) 51 final).
(4) OJ L 176, 10.7.1999, p. 36, ELI: http://data.europa.eu/eli/agree_internation/1999/439(1)/oj.
(5) Council Decision 1999/437/EC of 17 May 1999 on certain arrangements for the application of the Agreement concluded by the
Council of the European Union and the Republic of Iceland and the Kingdom of Norway concerning the association of those two
States with the implementation, application and development of the Schengen acquis(OJ L 176, 10.7.1999, p. 31, ELI: http://data.
europa.eu/eli/dec/1999/437/oj).
(6) OJ L 53, 27.2.2008, p. 52, ELI: http://data.europa.eu/eli/agree_internation/2008/178(1)/oj.
(7) Council Decision 2008/146/EC of 28 January 2008 on the conclusion, on behalf of the European Community, of the Agreement
between the European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association with
the implementation, application and development of the Schengen acquis(OJ L 53, 27.2.2008, p. 1, ELI: http://data.europa.eu/eli/dec/
2008/146/oj).
2/3 ELI: http://data.europa.eu/eli/dec_impl/2026/1156/ojEN
OJ L, 29.5.2026
(10) As regards Liechtenstein, this Decision constitutes a development of the provisions of the Schengen acquiswithin the
meaning of the Protocol between the European Union, the European Community, the Swiss Confederation and the
Principality of Liechtenstein on the accession of the Principality of Liechtenstein to the Agreement between the
European Union, the European Community and the Swiss Confederation on the Swiss Confederation’s association
with the implementation, application and development of the Schengen acquis(8)which fall within the area referred
to in Article 1, point A of Decision 1999/437/EC read in conjunction with Article 3 of Council
Decision 2011/350/EU(9).
(11) As regards Cyprus, this Decision constitutes an act building upon, or otherwise relating to, the Schengen acquiswithin
the meaning of Article 3(1) of the 2003 Act of Accession,
HAS ADOPTED THIS DECISION:
Article 1
The operations of the common identity repository shall start on 12 June 2026.
Article 2
This Decision shall enter into force on the third day following that of its publication in the Official Journal of the European
Union.
Done at Brussels, 28 May 2026.
For the Commission
The President
Ursula VON DER LEYEN
(8) OJ L 160, 18.6.2011, p. 21.
(9) Council Decision 2011/350/EU of 7 March 2011 on the conclusion, on behalf of the European Union, of the Protocol between the
European Union, the European Community, the Swiss Confederation and the Principality of Liechtenstein on the accession of the
Principality of Liechtenstein to the Agreement between the European Union, the European Community and the Swiss Confederation
on the Swiss Confederation’s association with the implementation, application and development of the Schengen acquis, relating to the
abolition of checks at internal borders and movement of persons (OJ L 160, 18.6.2011, p. 19, ELI: http://data.europa.eu/eli/dec/2011/
350/oj).
ELI: http://data.europa.eu/eli/dec_impl/2026/1156/oj 3/3