Agreement

between the European Union and Montenegro on security procedures for exchanging and protecting classified information

the EUROPEAN UNION, hereinafter referred to as "the EU",

and

MONTENEGRO;

hereinafter "the Parties";

CONSIDERING that the Parties share the objectives of strengthening their own security in all ways;

CONSIDERING that the Parties agree that consultations and cooperation should be developed between them on questions of common interest relating to security;

CONSIDERING that, in this context, a permanent need therefore exists to exchange classified information between the Parties;

RECOGNISING that full and effective consultation and cooperation may require access to and exchange of classified information and related material of the Parties;

CONSCIOUS that such access to and exchange of classified information and related material require that appropriate security measures be taken,

HAVE AGREED AS FOLLOWS:

Article 1

1. The subject of this Agreement shall be security procedures for exchanging and protecting classified information or material in any form and in any field either provided by or exchanged between the Parties in order to fulfil the objectives of strengthening the security of each of the Parties in all ways.

2. Each Party shall protect classified information received from the other Party from unauthorised disclosure in accordance with the terms set forth herein and in accordance with the Parties’ respective laws and regulations.

Article 2

For the purposes of this Agreement, "classified information" shall mean any information or material, in any form, which:

(a) is determined by either of the Parties to require protection, as its unauthorised disclosure could cause varying degrees of damage or harm to the interests of Montenegro, or of the EU or one or more of its Member States; and

(b) bears a classification marking.

Article 3

The EU institutions and entities to which this Agreement applies shall be: the European Council, the Council of the European Union (the Council), the General Secretariat of the Council, the High Representative of the Union for Foreign Affairs and Security Policy, the European Commission and the European External Action Service (the EEAS). For the purposes of this Agreement, these institutions and entities shall be referred to as "the EU".

Article 4

Each of the Parties, and the EU institutions and entities referred to in Article 3, shall ensure that they have a security system and security measures in place, based on the basic principles and minimum standards of security laid down in their respective laws or regulations, and reflected in the security arrangements to be established pursuant to Article 12, in order to ensure that an equivalent level of protection is applied to classified information provided or exchanged under this Agreement.

Article 5

Each of the Parties, and the EU institutions and entities referred to in Article 3, shall:

(a) protect classified information provided by or exchanged with the other Party under this Agreement in a manner at least equivalent to the protection given to it by the providing Party;

(b) ensure that classified information provided or exchanged under this Agreement keeps the security classification marking given to it by the providing Party, and that it is not downgraded or declassified without the prior written consent of the providing Party. The receiving Party shall protect the classified information according to the provisions set out in its own security regulations for information or material holding an equivalent security classification as specified in Article 7;

(c) not use such classified information for purposes other than those established by the originator or those for which the information is provided or exchanged;

(d) not disclose such classified information to third parties, or to any EU institution or entity not referred to in Article 3, without the prior written consent of the providing Party;

(e) not allow access to classified information to individuals unless they have a need to know and have been security-cleared as appropriate and authorised by the relevant Party;

(f) ensure the security of facilities where classified information provided by the other Party is kept; and

(g) ensure that all individuals having access to classified information are informed of their responsibilities to protect the information in accordance with the applicable laws and regulations.

Article 6

1. Classified information shall be disclosed or released in accordance with the principle of originator consent.

2. For release to recipients other than the Parties, a decision on disclosure or release of classified information will be made by the receiving Party on a case-by-case basis subject to the written consent of the providing Party and in accordance with the principle of originator consent.

3. No generic release shall be possible unless procedures are agreed between the Parties regarding certain categories of information, relevant to their specific requirements.

4. Nothing in this Agreement shall be regarded as a basis for mandatory release of classified information between the Parties.

5. Classified information received from the providing Party may be provided to a contractor or prospective contractor only with the prior written consent of the providing Party. Prior to such release, the receiving Party shall ensure that the contractor or prospective contractor and the contractor’s facility are able to protect the information and have an appropriate clearance.

Article 7

In order to establish an equivalent level of protection for classified information provided by or exchanged between the Parties, the security classifications shall correspond as follows:

EU | Montenegro |

RESTREINT UE | INTERNO |

CONFIDENTIEL UE | POVJERLJIVO |

SECRET UE | TAJNO |

TRES SECRET UE/EU TOP SECRET | STROGO TAJNO |

Article 8

1. The Parties shall ensure that all persons who, in the conduct of their official duties require access, or whose duties or functions may afford them access, to information classified CONFIDENTIEL UE or POVJERLJIVO or above provided or exchanged under this Agreement are security-cleared as appropriate before they are granted access to such information.

2. The security clearance procedures shall be designed to determine whether an individual, taking into account his or her loyalty, trustworthiness and reliability, may have access to classified information.

Article 9

The Parties shall provide mutual assistance with regard to the security of classified information provided or exchanged under this Agreement and matters of common security interest. Reciprocal security consultations and assessment visits shall be conducted by the authorities referred to in Article 12 to assess the effectiveness of the security arrangements within their respective responsibility to be established pursuant to that Article.

Article 10

1. For the purpose of this Agreement:

(a) as regards the EU, all correspondence shall be sent through the Chief Registry Officer of the Council and shall be forwarded by him to the Member States and to the institutions or entities referred to in Article 3, subject to paragraph 2;

(b) as regards Montenegro, all correspondence shall be sent to the Central Registry of the Directorate for the Protection of Classified Information via the Mission of Montenegro to the European Union.

2. Exceptionally, correspondence from one Party which is accessible only to specific competent officials, organs or services of that Party may, for operational reasons, be addressed and be accessible only to specific competent officials, organs or services of the other Party specifically designated as recipients, taking into account their competencies and according to the need-to-know principle. As far as the EU is concerned, such correspondence shall be transmitted through the Chief Registry Officer of the Council, the Chief Registry Officer of the European Commission or the Chief Registry Officer of the EEAS, as appropriate.

Article 11

The Minister of Foreign Affairs and the Director of the Directorate for the Protection of Classified Information of Montenegro, the Secretary-General of the Council and the Member of the European Commission responsible for security matters shall oversee the implementation of this Agreement.

Article 12

1. In order to implement this Agreement, security arrangements shall be established between the three authorities designated below, each acting under the direction and on behalf of its organisational superiors, in order to lay down the standards for the reciprocal protection of classified information under this Agreement:

- the Directorate for the Protection of Classified Information of Montenegro, for classified information provided to Montenegro under this Agreement,

- the Security Office of the General Secretariat of the Council, for classified information provided to the EU under this Agreement,

- the European Commission Security Directorate, for classified information provided or exchanged under this Agreement within the European Commission and its premises.

2. Before classified information is provided or exchanged between the Parties under this Agreement, the competent security authorities referred to in paragraph 1 shall agree that the receiving Party is able to protect the information in a way consistent with the security arrangements to be established pursuant to that paragraph.

Article 13

1. The competent authority of either of the Parties referred to in Article 12 shall immediately inform the competent authority of the other Party of any proven or suspected cases of unauthorised disclosure or loss of classified information provided by that Party, and shall conduct an investigation and shall report the results to the other Party.

2. The competent authorities referred to in Article 12 shall establish procedures to be followed in such cases.

Article 14

Each Party shall bear its own costs incurred in implementing this Agreement.

Article 15

Nothing in this Agreement shall alter existing agreements or arrangements between the Parties nor agreements between Montenegro and Member States of the EU. This Agreement shall not preclude the Parties from concluding other agreements relating to the provision or exchange of classified information subject to this Agreement provided they are not incompatible with the obligations under this Agreement.

Article 16

Any disputes between the Parties arising out of the interpretation or application of this Agreement shall be addressed by negotiation between the Parties. During the negotiation both Parties shall continue to fulfil all of their obligations under this Agreement.

Article 17

1. This Agreement shall enter into force on the first day of the first month after the Parties have notified each other of the completion of the internal procedures necessary for this purpose.

2. Each Party shall notify the other Party of any changes in its laws and regulations that could affect the protection of classified information referred to in this Agreement.

3. This Agreement may be reviewed for consideration of possible amendments at the request of either of the Parties.

4. Any amendment to this Agreement shall be made in writing only and by common agreement of the Parties. It shall enter into force upon mutual notification as provided under paragraph 1.

Article 18

This Agreement may be terminated by one Party by written notice of termination given to the other Party. Such termination shall take effect six months after receipt of notification by the other Party, but shall not affect obligations already entered into under this Agreement. In particular, all classified information provided or exchanged pursuant to this Agreement shall continue to be protected in accordance with the provisions set forth herein.

In witness whereof the undersigned, respectively duly authorised, have signed this Agreement.

Done at Brussels, this thirteenth day of September in the year 2010 in two copies each in the English language.

For Montenegro

The Minister for Foreign Affairs

+++++ TIFF +++++

For the European Union

The High Representative of the Union for Foreign Affairs and Security Policy

+++++ TIFF +++++

--------------------------------------------------