Security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members
This dossier concerns the security of identity cards of Union citizens and of residence documents issued to them and their family members. The amendments address the storage of biometric data such as facial images and fingerprints and the right to privacy and data protection, the absence of national or centralised databases, ICAO Document 9303 specifications, the inclusion of a person's sex or gender, the two-letter country code, exemptions for children under twelve from fingerprinting, retention and erasure of biometric identifiers, external service providers, and reporting and evaluation by the Commission.
Procedure timeline
- Committee amendments tabled16 Dec 2024 – 31 Jan 2025
- Plenary vote — Adopted2 Apr 2025 · On the Commission proposal (the draft law)
- Procedure completed
Plenary votes
7 roll-call votesIn plenary, Parliament usually votes in steps: first on amendments to the text (sometimes split into parts, so Members can accept one half of a sentence and reject the other), then on the text as a whole. The “main vote” is the one that adopts or rejects the text itself. Each vote below shows exactly which step it was. How voting works →
Show the 4 earlier votes
- 2 Apr 2025AdoptedOn the lead committee's amendments · amendment 8Official label: Amendements de la commission compétente - votes séparés - Am 8 · what was voted ↗432 for202 against25 abstentions59 did not voteForAgainstAbst.
Click a group to see each Member’s position.
- 2 Apr 2025RejectedOn amendment 26 · paragraph 2 · article 3 · subparagraph 2Official label: Article 3, § 2, alinéa 2 - Am 26 · what was voted ↗205 for460 against10 abstentions43 did not voteForAgainstAbst.
Click a group to see each Member’s position.
- 2 Apr 2025RejectedOn amendment 27 · paragraph 1 · point e · article 6Official label: Article 6, § 1, après le point e - Am 27 · what was voted ↗205 for463 against8 abstentions42 did not voteForAgainstAbst.
Click a group to see each Member’s position.
- 2 Apr 2025RejectedOn amendment 28 · text to be inserted after recital 2Official label: Après le considérant 2 - Am 28 · what was voted ↗125 for536 against10 abstentions47 did not voteForAgainstAbst.
Click a group to see each Member’s position.
- 2 Apr 2025RejectedOn amendment 29 · text to be inserted after recital 4Official label: Après le considérant 4 - Am 29 · what was voted ↗184 for479 against8 abstentions47 did not voteForAgainstAbst.
Click a group to see each Member’s position.
- 2 Apr 2025RejectedOn amendment 24 · recital 23Official label: Considérant 23 - Am 24 · what was voted ↗208 for465 against5 abstentions40 did not voteForAgainstAbst.
Click a group to see each Member’s position.
- 2 Apr 2025Main voteAdoptedOn the Commission proposal (the draft law)Official label: Proposition de la Commission · what was voted ↗377 for279 against16 abstentions46 did not voteForAgainstAbst.
Click a group to see each Member’s position.
Vote data: HowTheyVote.eu (ODbL, attribution) / European Parliament · roll-call votes only
Plenary amendments29 tabled on this text
Amendments tabled for the plenary sitting on this text, in their own numbering series. This is a different set from the committee amendments tracked elsewhere on AmendEU, and is not counted in any of the site’s amendment totals.
- Amendment 1Proposal for a regulation · Recital 19Current text
(19) This Regulation does not provide a legal basis for setting up or maintaining databases at national level for the storage of biometric data in Member
States,whichisamatterofnationallawthatneedstocomplywithUnionlawregardingdataprotection,includingitsnecessityandproportionalityrequirements.Moreover,thisRegulationdoesnotprovidealegalbasisfor setting up or maintaining a centralised database at Unionlevel.Amendment(19) This Regulation does not provide a legal basis for setting up or maintaining databases at national level for the storage of biometric data in Member States. Moreover, this Regulation does not provide a legal basis for setting up or maintaining a centralised database at Union level. As recalled by the European Data Protection Supervisor in his opinion 21/2024, setting up or maintaining databases at national level for storing biometric data in Member States, or similarly, setting up or maintaining a centralised database at Union level, along with the potential use of such data for other purposes, would need to meet a strict necessity and proportionality test under the Charter, as interpre…
Excerpt — full text in the official PDF. - Amendment 2Proposal for a regulation · Recital 20Current text
(20)
Biometric identifiers should be collectedandstored in the storage medium of identity cards and residence documentsforthepurposesofverifyingtheauthenticityofthedocumentandtheidentityoftheholder.Giventheelectronicsignatureonthestorage mediumofidentitycards,identifyingtheholder by meansof thestoragemedium,whichcontainsthesamebiographicdataasprintedonthedocument,ismorereliablethanavisualcheckofthedocument.Unioncitizensshouldthusbeallowedtousethedatastoredinthestoragemediumoftheiridentitycardtoidentifythemselvestowardsprivateentities.However,theverificationofthefingerprintsstoredonthestoragemediumshou…Amendment(20) Facial images stored in the storage medium of identity cards and residence documents should be accessed only by duly authorised staff of competent national authorities, Union agencies and private entities for the purposes of verifying the authenticity of the document and the identity of the holder. Such access should comply with Union data protection law. Facial images should not be retained for longer than is necessary for those purposes, should be deleted as soon as those purposes are achieved and should not be transferred to third countries or international organisations unless permitted by Union data protection law. Those safeguards are intended to ensure appropriate protection of t…
Excerpt — full text in the official PDF. - Amendment 3Proposal for a regulation · Recital 20 a (new)Amendment
(20a) The verification of the fingerprints stored on the storage medium should be carried out only by duly authorised staff of competent national authorities and Union agencies and only when the document is required to be produced by Union or national law.
- Amendment 4Proposal for a regulation · Recital 23Current text
(23) Member States should be able to decide whether to include a person’s gender on a document covered by this Regulation. Where a Member State includes a person’s gender on such a document, the specifications of ICAO Document 9303 ‘F’, ‘M’ or ‘X’ or the corresponding single initial used in the language or languages of that Member State should be used, as appropriate.
Amendment(23) Without prejudice to the case law of the Court of Justice1a, Member States should be able to decide whether to include a person’s gender on a document covered by this Regulation. Where a Member State includes a person’s gender on such a document, the specifications of ICAO Document 9303 ‘F’, ‘M’ or ‘X’ or the corresponding single initial used in the language or languages of that Member State should be used, as appropriate. _________________ 1a Judgment of the Court of Justice of 4 October 2024, Mirin, C-4/23, ECLI:EU:C:2024:845
- Amendment 5Proposal for a regulation · Recital 26Current text
(26) Where difficulties are encountered in the collection of biometric identifiers, Member States should ensure that appropriate procedures are in place to respect the dignity of the person concerned. Therefore, specific considerations relating to gender and to the specific needs of children and of vulnerable persons should be taken into account.
Amendment(26) Where difficulties are encountered in the collection of biometric identifiers, Member States should ensure that appropriate procedures are in place to respect the dignity of the person concerned. Therefore, specific considerations relating to gender and to the specific needs of children and of vulnerable persons should be taken into account. Qualified staff should receive training on best practices for collecting biometric identifiers from children and vulnerable persons, ensuring sensitivity to gender and age-specific needs while respecting the dignity of all individuals.
- Amendment 6Proposal for a regulation · Recital 32Current text
(32) Member States should exchange with each other such information as is necessary to access, authenticate and verify the information contained on the secure storage medium. The formats used for the secure storage medium should be interoperable, including in respect of automated border crossing points.
Amendment(32) Member States should exchange with each other such information as is necessary to access, authenticate and verify the information contained on the secure storage medium. The formats used for the secure storage medium should be interoperable, including in respect of automated border crossing points. The Commission should promote Member States’ cooperation in support of such objectives.
- Amendment 7Proposal for a regulation · Recital 43Current text
(43) In accordance with the Interinstitutional Agreement of 13 April 2016 on Better Law-Making9 , the Commission should,
no sooner thansix years after the date ofapplicationof thisRegulationcarry out an evaluation of this Regulation, including on the basis of information gathered through specific monitoring arrangements, in order to assess the actual effects of this Regulation and theneed for any further action. For the purpose of monitoring, Member States should collect statistics on the number of identity cards and residence documents which they issued. _________________ 9 OJ L 123, 12.5.2016, p. 1, ELI: http://data.europa.eu/eli/agree_interinstit/2016/512/oj.Amendment(43) The Commission should report on the implementation of this Regulation two years, and 11 years, after the date of its entry into force, including on the appropriateness of the level of security, taking into account its impact on fundamental rights and data protection principles. In accordance with the Interinstitutional Agreement of 13 April 2016 on Better Law-Making9 , the Commission should, six years after the date of entry into force of this Regulation, and every six years thereafter, carry out an evaluation of this Regulation, including on the basis of information gathered through specific monitoring arrangements, in order to assess the actual effects of this Regulation and the need…
Excerpt — full text in the official PDF. - Amendment 8Proposal for a regulation · Article 3 – paragraph 2 – subparagraph 2Current text
By way of derogation from the first subparagraph, the document number may be inserted in zone I and the designation of a person’s gender shall be optional.
AmendmentBy way of derogation from the first subparagraph, the document number may be inserted in zone I and the designation of a person’s gender shall be optional. Where a Member State includes a person’s gender on a document covered by this Regulation, the specifications of ICAO Document 9303 ‘F’, ‘M’ or ‘X’ or the corresponding single initial used in the official language or languages of that Member State shall be used, as appropriate.
- Amendment 9Proposal for a regulation · Article 3 – paragraph 5Current text
5. Identity cards shall include a highly secure storage medium which shall contain a facial image of the holder of the card and two fingerprints in interoperable digital formats. For the capture of biometric identifiers, Member States shall apply the technical specifications as established by Commission Implementing Decision C(2018) 776712 as amended by Commission Implementing Decision C(2021) 372613 . _________________ 12 Commission Implementing Decision C(2018) 7767 of 30 November 2018 laying down the technical specifications for the uniform format for residence permits for third country nationals and repealing Decision C(2002) 3069. 13 Commission Implementing Decision
C(2021) 3726 of 4 Ju…Amendment5. Identity cards shall include a highly secure storage medium which shall contain a facial image of the holder of the card and two fingerprints in interoperable digital formats. For the capture of those two types of biometric identifiers, Member States shall apply the technical specifications as established by Commission Implementing Decision C(2018) 776712 as amended by Commission Implementing Decision C(2021) 372613 . _________________ 12 Commission Implementing Decision C(2018) 7767 of 30 November 2018 laying down the technical specifications for the uniform format for residence permits for third country nationals and repealing Decision C(2002) 3069. 13 Commission Implementing Decision C…
Excerpt — full text in the official PDF. - Amendment 10Proposal for a regulation · Article 10 – paragraph 3Current text
3.
Other than where required for the purpose of processing in accordance with Union and national law, biometricidentifiers stored for the purpose of personalisation of identity cards or residence documents shall be kept in a highly secure manner and only until the date of collection of the document and, in any case, no longer than 90 days from the date of issue. After this period,thesebiometric identifiers shall be immediately erased or destroyed.Amendment3. Biometric identifiers stored for the purpose of personalisation of identity cards or residence documents shall be kept in a highly secure manner and only until the date of collection of the document and, in any case, no longer than 90 days from the date of issue. After this period, those biometric identifiers shall be immediately erased or destroyed. Processing of those data for other purposes shall be subject to the limitations and conditions provided for in national law or Union data protection law.
- Amendment 11Proposal for a regulation · Article 11 – paragraph 4Current text
4. Cooperation with external service providers shall not exclude any liability on the part of a Member State which may arise under Union or national law in respect of breaches of obligations with regard to personal data.
Amendment4. Cooperation with external service providers shall not exclude any liability on the part of a Member State which may arise under Union or national law in respect of breaches of obligations with regard to personal data. Member States shall ensure that all external providers comply with Union and national data protection law, and appropriate measures shall be adopted to prevent any unauthorised access or misuse of personal data during outsourced processes.
- Amendment 12Proposal for a regulation · Article 11 – paragraph 6 – subparagraph 1 – introductory partCurrent text
Biometricdatastored in the storage medium of identity cards and residence documents shall only beusedin accordance with Unionandnationallaw for thepurposeof verifying:AmendmentThe facial image of the holder stored in the storage medium of identity cards and residence documents shall only be accessed by duly authorised staff of competent national authorities, Union agencies and private entities in accordance with Union data protection law for the purposes of verifying:
- Amendment 13Proposal for a regulation · Article 11 – paragraph 6 – subparagraph 1 a (new)Amendment
Access to the facial image by private entities shall also require the consent of the holder, unless access regardless of consent is strictly necessary for the purposes set out in the first subparagraph and provided for by Union or national law in compliance with Union data protection law.
- Amendment 14Proposal for a regulation · Article 11 – paragraph 6 – subparagraph 2Current text
The two fingerprints stored in the storage medium shall only be accessed by duly authorised staff of competent national authorities and Union
agencies.AmendmentThe two fingerprints of the holder stored in the storage medium shall only be accessed by duly authorised staff of competent national authorities and Union agencies for the purposes set out in the first subparagraph in accordance with Union and national data protection law.
- Amendment 15Proposal for a regulation · Article 13 – titleCurrent text
EvaluationAmendmentReporting and evaluation
- Amendment 16Proposal for a regulation · Article 13 – paragraph -1 (new)Amendment
-1. By [two years after the date of entry into force of this Regulation] and by [11 years after the date of entry into force of this Regulation] the Commission shall report to the European Parliament, to the Council and to the European Economic and Social Committee on the implementation of this Regulation, in particular on the protection of fundamental rights and personal data.
- Amendment 17Proposal for a regulation · Article 13 – paragraph 1 – introductory partCurrent text
1. No
soonerthan [six years after the entry into force of this Regulation], the Commission shall carry out an evaluation of this Regulation and present a report on the main findings to the European Parliament, to the Council and to the European Economic and Social Committee. The report shall in particular focus on:Amendment1. No later than [six years after the entry into force of this Regulation], and every six years thereafter, the Commission shall carry out an evaluation of this Regulation and present a report on the main findings to the European Parliament, to the Council and to the European Economic and Social Committee. The report shall in particular focus on:
- Amendment 18Proposal for a regulation · Article 13 – paragraph 1 – point d a (new)Amendment
(da) the necessity of introducing common security features of identification documents used on a provisional basis in view of their better recognition;
- Amendment 19Proposal for a regulation · Article 13 – paragraph 1 – point d b (new)Amendment
(db) the necessity of further harmonising the security features of residence documents.
- Amendment 20ECRProposal for a regulation · Recital 23Current text
(23) Member States should be able to decide whether to include a person’s
genderon a document covered by this Regulation. Where a Member State includes a person’sgenderon such a document, the specificationsof ICAO Document 9303 ‘F’, ‘M’or‘X’or the corresponding single initial used in the language or languages of that Member State should be used, as appropriate.Amendment(23) Member States should be able to decide whether to include a person’s sex on a document covered by this Regulation. Where a Member State includes a person’s sex on such a document, the specifications ‘F’ or ‘M’ or the corresponding single initial used in the language or languages of that Member State should be used, as appropriate.
- Amendment 21ECRProposal for a regulation · Recital 26Current text
(26) Where difficulties are encountered in the collection of biometric identifiers, Member States should ensure that appropriate procedures are in place to respect the dignity of the person concerned. Therefore, specific considerations relating to
genderand to the specific needs of children and of vulnerable persons should be taken into account.Amendment(26) Where difficulties are encountered in the collection of biometric identifiers, Member States should ensure that appropriate procedures are in place to respect the dignity of the person concerned. Therefore, specific considerations relating to the sex and to the specific needs of children and of vulnerable persons should be taken into account.
- Amendment 22ECRProposal for a regulation · Article 3 – paragraph 2 – subparagraph 2Current text
By way of derogation from the first subparagraph, the document number may be inserted in zone I and the designation of a person’s
gendershall be optional.AmendmentBy way of derogation from the first subparagraph, the document number may be inserted in zone I and the designation of a person’s sex shall be optional.
- Amendment 23PfEProposal for a regulation · Recital 22Current text
(22) The specifications of ICAO Document 9303, which ensure global interoperability including in relation to machine readability and use of visual inspection, should be
taken intoaccountfor the purpose of this Regulation.Amendment(22) The specifications of ICAO Document 9303, which ensure global interoperability including in relation to machine readability and use of visual inspection, should be the benchmark for the purpose of this Regulation.
- Amendment 24PfEProposal for a regulation · Recital 23Current text
(23) Member States should
be able to decide whether toinclude a person’sgenderon a document covered by thisRegulation. Where a Member State includes a person’s gender on suchadocument,the specifications of ICAO Document9303 ‘F’, ‘M’ or ‘X’orthecorresponding single initial used in thelanguageorlanguagesofthatMemberStateshouldbeused,asappropriate.Amendment(23) Member States should include a person’s sex on a document covered by this Regulation, according to the specifications of ICAO Document 9303. Displaying the holder's sex enables documents to be used more effectively to identify the holder.
- Amendment 25PfEProposal for a regulation · Recital 26Current text
(26) Where difficulties are encountered in the collection of biometric identifiers, Member States should ensure that appropriate procedures are in place to respect the dignity of the person concerned. Therefore, specific considerations relating to
gender and tothe specific needs of children and of vulnerable persons should be taken into account.Amendment(26) Where difficulties are encountered in the collection of biometric identifiers, Member States should ensure that appropriate procedures are in place to respect the dignity of the person concerned. Therefore, specific considerations relating to the specific needs of children and of vulnerable persons should be taken into account.
- Amendment 26PfEProposal for a regulation · Article 3 – paragraph 2 – subparagraph 2Current text
By way of derogation from the first subparagraph, the document number may be inserted in zone
I and the designation of a person’s gender shall be optional.AmendmentBy way of derogation from the first subparagraph, the document number may be inserted in zone I.
- Amendment 27PfEProposal for a regulation · Article 6 – paragraph 1 – point e a (new)Amendment
(e a) the sex of the holder;
- Amendment 28ESNProposal for a regulation · Recital 2 a (new)Amendment
(2 a) The design of identity documents is a competence of the Member States. That competence must not be transferred to the Union.
- Amendment 29ESNProposal for a regulation · Recital 4 a (new)Amendment
(4 a) The fact that the European Union is equipping itself with tools to combat the various forms of fraud is to be welcomed. It is essential that it also put in place the necessary safeguards to prevent any form of social credit system interfering with the privacy of citizens and limiting their rights.
Official amendment documents
Connections
See these connections as a navigable graph — and walk from there to anything else.
Explore the graphMembers who amended this procedure
31 Members · by amendment count
























The amendments, in full text
86 amendmentsEvery amendment as tabled — original text, proposed change and justification, with a link to the official PDF.