Commission Delegated Regulation (EU) 2025/22 of 19 December 2024 amending Delegated Regulation (EU) 2022/1645 as regards requirements on information security for organisations providing ground handling services

Delegated Regulation (EU) 2022/1645 is amended as follows: (1) in Article 2(1), the following point (c) is added: ‘(c) ground handling organisations subject to Commission Delegated Regulation (EU) 2025/20 that: (i) in order to provide the respective services, have to collect, store, analyse or otherwise process data provided by third parties; or (ii) provide directly to aircraft operators data that will be used for operational purposes. (2) in Article 5(1), the following point (c) is added: ‘(c) with regard to organisations referred to in Article 2 point (c), the competent authority designated in accordance with the Annex (Part-ARGH) to Commission Implementing Regulation (EU) 2025/23.

The Annex to Delegated Regulation (EU) 2022/1645 is amended in accordance with the Annex to this Regulation.

1 This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

2 Article 1 shall apply from 27 March 2031.

3 Article 2 shall apply from 16 October 2025.