Article 11 — Safety requirements

1.The application data of the electronic central register shall be backed up and the backup copies shall be stored for the purposes of disaster recovery.

2.In the event that any security issues are detected, EBA shall be able to immediately shut down the application of the electronic central register and prevent any access to the server.

3.The application of the electronic central register shall be able to recover from crashes without undue delay and to continue its normal operation.

4.In the event that the application of the electronic central register is down and cannot process batch files transmitted by the competent authorities, that application shall process the most recent files which were transmitted by each competent authority after restoring its normal operation.

5.EBA shall notify the competent authorities of any failure or down-time of the application of the electronic central register.

6.Where a failure of the application of the electronic central register has affected the processing of a batch file transmitted by a competent authority, EBA shall request the competent authority to submit a new batch file. Where the competent authority is unable to do so, it shall request EBA to roll-back the data to the version that was submitted with the last validated batch file prior to the failure.

7.EBA shall develop its register in accordance with the international standards for cyber security.