S.L. 465.65 Art. 6Trust framework.

(1) Appropriate technical means based on a trust framework shall be used for the issuance and verification of vaccine certificates and recognized vaccine certificates, providing for the interoperability, integrity and authenticity of such certificates.

(2) The technical means and the trust framework pursuant to sub-article (1), may be defined in the bilateral agreement signed with the third country, including data protection by design and default.

(3) The trust framework shall provide for appropriate technical and organisational measures to ensure adequate security to safeguard the confidentiality, integrity, availability and resilience of personal data being processed for the purpose of these regulations.

(4) When a vaccine certificate is issued and verified, the only data that may be requested shall be that data which is necessary to avoid the use of forged vaccination certificates and to confirm its authenticity.

SCHEDULE

Data to be included in the vaccination certificate:

(a) name: surname(s) and forename(s), in that order;

(b) date of birth;

(c) disease or agent targeted;

(d) vaccine/prophylaxis;

(e) vaccine medicinal product;

(f) vaccine marketing authorization holder or manufacturer;

(g) number in a series of vaccinations/doses;

(h) date of vaccination, indicating the date of the latest dose received;

(i) country of vaccination;

(j) certificate issuer;

(k) a unique certificate identifier;

(l) passport number or other identification document number of the person.