Updated on April 10^th 2024 based on the version and article numbering approved by the EU Parliament on March 13^th 2024.

The use of those systems for the purpose of law enforcement should therefore be prohibited, except in exhaustively listed and narrowly defined situations, where the use is strictly necessary to achieve a substantial public interest, the importance of which outweighs the risks. Those situations involve the search for certain victims of crime including missing people; certain threats to the life or to the physical safety of natural persons or of a terrorist attack; and the localisation or identification of perpetrators or suspects of the criminal offences listed in an annex to this Regulation, where those criminal offences are punishable by a custodial sentence or a detention order for a maximum period of at least four years in the Member State concerned in accordance with the law of that Member State. Such a threshold for the custodial sentence or detention order in accordance with national law contributes to ensuring that the offence should be serious enough to potentially justify the use of ‘real-time’ remote biometric identification systems.

Moreover, those criminal offences are based on the 32 criminal offences listed in the Council Framework Decision 2002/584/JHA¹⁹, taking into account that some of those offences are, in practice, likely to be more relevant than others, in that the recourse to ‘real- time’ remote biometric identification is, foreseeably, necessary and proportionate to highly varying degrees for the practical pursuit of the localisation or identification of a perpetrator or suspect of the different criminal offences listed and having regard to the likely differences in the seriousness, probability and scale of the harm or possible negative consequences. An imminent threat to life or the physical safety of natural persons could also result from a serious disruption of critical infrastructure, as defined in Article 2, point (4) of Directive (EU) 2022/2557 of the European Parliament and of the Council²⁰, where the disruption or destruction of such critical infrastructure would result in an imminent threat to life or the physical safety of a person, including through serious harm to the provision of basic supplies to the population or to the exercise of the core function of the State. In addition, this Regulation should preserve the ability for law enforcement, border control, immigration or asylum authorities to carry out identity checks in the presence of the person that is concerned in accordance with the conditions set out in Union and national law for such checks. In particular, law enforcement, border control, immigration or asylum authorities should be able to use information systems, in accordance with Union or national law, to identify persons who, during an identity check, either refuse to be identified or are unable to state or prove their identity, without being required by this Regulation to obtain prior authorisation. This could be, for example, a person involved in a crime, being unwilling, or unable due to an accident or a medical condition, to disclose their identity to law enforcement authorities.

‍

¹⁹Council Framework Decision 2002/584/JHA of 13 June 2002 on theEuropean arrest warrant and the surrender procedures between Member States (OJ L 190, 18.7.2002, p. 1).

²⁰Directive(EU) 2022/2557 of the European Parliament and of the Council of 14 December2022 on the resilience of critical entitiesand repealing CouncilDirective 2008/114/EC (OJ L 333, 27.12.2022, p. 164).

‍

[Previous version]

Removed on Feb 6^th 2024 based on the version endorsed by the Coreper I on Feb 2^nd