
COMMISSION DELEGATED REGULATION (EU) No 363/2012 of 23 February 2012 on the procedural rules for the recognition and withdrawal of recognition of monitoring organisations as provided for in Regulation (EU) No 995/2010 of the European Parliament and of the Council laying down the obligations of operators who place timber and timber products on the market (Text with EEA relevance) 

THE EUROPEAN COMMISSION,
Having regard to the Treaty on the Functioning of the European Union,
Having regard to Regulation (EU) No 995/2010 of the European Parliament and of the Council of 20 October 2010 laying down the obligations of operators who place timber and timber products on the market, and in particular Article 8(7) thereof,
Whereas:

(1) Regulation (EU) No 995/2010 aims, in particular, at minimising the risk of placing illegal timber and products derived from such timber on the internal market. Monitoring organisations should assist operators in meeting the requirements of that Regulation. To that end, they should develop a due diligence system, grant the operators the right to use it, and verify its proper use.

(2) The procedure under which the Commission recognises monitoring organisations should be fair, transparent and independent. Therefore, applicants should be assessed after consulting the competent authorities of the Member States and after collecting sufficient information about an applicant. Where necessary, the collection of information should include visits to an applicant’s premises.

(3) It is necessary to specify the appropriate expertise and capacity that monitoring organisations should have in order to determine the compliance of wood with relevant legislation in its country of harvest and to propose measures to assess the risk of placing illegal timber and products derived from such timber on the market. Where the risk identified is not negligible, monitoring organisation should also be able to propose adequate measures to effectively minimising it.

(4) It should be ensured that monitoring organisations exercise their functions in a transparent and independent manner, avoiding any conflict of interest arising out of their functions and providing their services to operators in a non-discriminatory manner.

(5) The Commission should decide upon a withdrawal of recognition following a procedure, which is fair, transparent and independent. Before taking a decision the Commission should consult the Member States’ competent authorities concerned and should collect sufficient information, including on-the-spot visits where necessary. The monitoring organisation concerned should be given the opportunity to submit comments before a decision is taken.

(6) In accordance with the principle of proportionality, the Commission should be able to withdraw recognition either in a temporary and/or conditional basis, or permanently, as it may deem required by the level of shortcomings detected, where a monitoring organisation no longer fulfils the functions or meets the requirements laid down in Article 8 of Regulation (EU) No 995/2010.

(7) It is necessary to ensure that the level of protection of individuals with regard to the processing of their personal data within the scope of this Regulation, in particular as regards the processing of personal data in the applications for recognition as a monitoring organisation complies with the requirements laid down in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individual with regard to the processing of personal data and on the free movement of such data and with Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data,
HAS ADOPTED THIS REGULATION:

Definitions
Article 1 
For the purpose of this Regulation, in addition to the definitions laid down in Article 2 of Regulation (EU) No 995/2010, the following definitions shall apply:

((1)) ...
((2)) ‘evidence of formal qualifications’ means diplomas, certificates and other evidence issued by an authority in a State, designated pursuant to legislative or administrative provisions of that State and certifying successful completion of professional training;
((3)) ‘professional experience’ means the actual and lawful pursuit of the profession concerned.
Application for recognition
Article 2 

1. Any entity, public or private, being a company, corporation, firm, enterprise, institution or authority, legally established in the United Kingdom, may submit to the competent authority an application to be recognised as a monitoring organisation.
2. To be recognised as a monitoring organisation, an applicant shall demonstrate that it fulfils all requirements provided in Article 8(2) of Regulation (EU) No 995/2010 and in Articles 5 to 8 of this Regulation.
3. The  competent authority  shall acknowledge the receipt of an application and provide the applicant with a reference number within 10 working days from the date of receipt.It shall also provide the applicant with an indicative time limit within which it will decide on the application. The competent authority shall inform the applicant anytime it revises the indicative time limit due to the necessity to obtain additional information or documents for the assessment of the application.
4. Where three months have lapsed since the receipt of an application or the  competent authority's  last written communication to an applicant, whichever is later, and the  competent authority  has not adopted a recognition decision or rejected the application, the competent authority shall inform the applicant in writing of the progress in assessment of the application.The first subparagraph may apply more than once to the handling of one application.
5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Additional documents and access to premises
Article 3 

1. Upon request by the competent authority, an applicant must submit any additional information or documents required by the competent authority within a specified time limit.
2. The applicant must grant the competent authority access to its premises to verify that all requirements provided in Article 8 of Regulation (EU) No. 995/2010 and in Articles 5 to 8 are fulfilled. The competent authority must inform the applicant of a visit in advance. The applicant must offer all assistance necessary to facilitate such visits.
Recognition decision
Article 4 
Where the competent authority has adopted a recognition decision pursuant to Article 8(3) of Regulation (EU) No. 995/2010, it must notify the applicant concerned within 10 working days beginning with the day after the date of adoption of that decision.
The competent authority must also provide the applicant with a certificate of recognition without delay.
Legal personality and legal establishment
Article 5 
An applicant must provide information about its registered office, central administration or principal place of business in the United Kingdom, as well as about all its agencies, branches or subsidiaries set up in the United Kingdom.

Appropriate expertise
Article 6 

1. For the purpose of ensuring proper exercise of the functions of a monitoring organisation as required by Article 8(2)(b) of Regulation (EU) No 995/2010, the technically competent personnel of an applicant shall meet the following minimum criteria, attested by evidence of formal qualifications and professional experience:
(a) formal professional training in a discipline relevant to the functions of a monitoring organisation;
(b) for senior technical positions, at least five years of professional experience in function related to the functions of a monitoring organisation.For the purposes of point (a) of the first subparagraph, disciplines related to forestry, environment, law, business management, risk management, trade, auditing, financial control or supply chain management shall be considered relevant disciplines.
2. An applicant shall maintain records documenting the duties and responsibilities of its personnel. The applicant shall have in place procedures for monitoring the performance and technical competence of its personnel.
Capacity to exercise functions as a monitoring organisation
Article 7 

1. An applicant shall demonstrate that it has in place all of the following:
(a) an organisational structure that ensures a proper exercise of the functions of a monitoring organisation;
(b) a due diligence system to be made available to and used by operators;
(c) policies and procedures that allow for the evaluation and improvement of the due diligence system;
(d) procedures and processes to verify the proper use of its due diligence system by operators;
(e) procedures for corrective actions to be taken in a case of a failure by an operator to properly use its due diligence system.
2. In addition to requirements of paragraph 1, an applicant shall demonstrate that it has financial and technical capacity to exercise the functions of a monitoring organisation.
Absence of conflict of interest
Article 8 

1. An applicant shall be organised so as to safeguard the objectivity and impartiality of its activities.
2. An applicant shall identify, analyse and maintain records documenting risks of conflict of interest arising as a result of it exercising functions as a monitoring organisation, including any conflicts arising from its relationships with related bodies or subcontractors.
3. Where a risk of a conflict of interest has been identified the applicant shall have in place written policies and procedures to avoid conflicts of interest at organisational and individual level. The written policies and procedures shall be maintained and implemented. Those policies and procedures may include third party audits.
Information on subsequent changes
Article 9 

1. A monitoring organisation shall inform the  competent authority  without delay of any of the following situations occurring after its recognition:
(a) a change that may affect the ability of that monitoring organisation to comply with the requirements in Articles 5 to 8, which have occurred after its recognition;
(b) the monitoring organisation sets up agencies, branches or subsidiaries within the  United Kingdom, other than those declared in its application;
(c) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(d) the monitoring organisation ceases to provide services in  Great Britain.
2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Review of the recognition decision
Article 10 

1. The competent authority may review a decision recognising a monitoring organisation at any time.The competent authority must carry out such a review in any of the following situations:
(a) the competent authority has determined that a monitoring organisation no longer fulfils the functions laid down in Article 8(1) of Regulation (EU) No. 995/2010 or no longer complies with the requirements laid down in Article 8(2) of Regulation (EU) No. 995/2010 as specified in Articles 5 to 8 of this Regulation;
(b) the competent authority is in possession of relevant information, including substantiated concerns from third parties, that a monitoring organisation no longer complies with the requirements laid down in Article 8(1) and (2) of Regulation (EU) No. 995/2010 and in Articles 5 to 8 of this Regulation;
(c) a monitoring organisation has informed the competent authority of changes referred to in Article 9(1)(a) of this Regulation.
2. An applicant must grant the competent authority access to its premises to verify that all requirements provided in Article 8 of Regulation (EU) No. 995/2010 and in Articles 5 to 8 of this Regulation are fulfilled.The applicant must offer all assistance necessary to facilitate such visits.
3. The competent authority must draft a report stating its findings. Supporting evidence must be annexed to the review report.The review report must include a recommendation as to whether the recognition of a monitoring organisation should be withdrawn.The competent authority must provide the monitoring organisation concerned with a summary of the findings and conclusions of the report. The organisation may provide comments to the competent authority within three weeks beginning with the day after the date of transmission of the summary.
Decision to withdraw recognition
Article 11 

1. The  competent authority  shall decide whether to withdraw recognition of a monitoring organisation on a temporary and/or conditional basis, or permanently, taking into account the review report referred to in Article 10.
2. The  competent authority  may issue a notice of remedial actions or an official warning where the level of detected shortcomings does not lead to a determination, in accordance with Article 8(6) of Regulation (EU) No 995/2010 that the monitoring organisation no longer fulfils the functions or the requirements laid down in Article 8(2) of that Regulation.
3. A decision to withdraw recognition of a monitoring organisation as well as a notice or a warning pursuant to paragraph 2 shall be notified to the monitoring organisation concerned ....
Data protection
Article 12 
This Regulation is without prejudice to any provision or rule concerning the processing of personal data under any enactment or rule of law.
Final provisions
Article 13 
This Regulation shall enter into force on the 20th day following its publication in the Official Journal of the European Union.
...Done at Brussels, 23 February 2012.
For the Commission
The President
José Manuel BARROSO
ANNEX
List of supporting documents


 Legal personality; legal establishment; provision of services:
— certified copies of evidence ...,
— ...
 Appropriate expertise:
— description of the organisation and structure of the entity,
— list of technically competent personnel with copies of CVs,
— description of duties and responsibilities and their division,
— detailed describing of procedures for monitoring the performance and competences of the technically competent personnel.
 Capacity to exercise functions as a monitoring organisation:
A detailed description of the following:
— a due diligence system,
— policies and procedures for evaluation and improvement of the due diligence system,
— policies and procedures for dealing with complaints from operators or third parties,
— procedures and processes to verify the proper use of the due diligence system by operators,
— procedures for corrective actions to be taken in the case of a failure by an operator to properly use the due diligence system,
— a record keeping system.
 Financial capacity:
— copies of financial statements for the last financial year, or
— a declaration concerning the sales turnover, or
— other substantiating documents if the applicant cannot, for valid reasons, provide those indicated above,
— proof of liability insurance.
 Absence of conflict of interest:
— declaration of absence of conflict of interest,
— description of the written policies and procedures for avoidance of conflict of interest at organisational and individual level, which may include third party audits.
 Subcontracting:
— description of tasks subcontracted,
— evidence that all subcontractors or the subsidiaries, where these are established, meet the relevant requirements above.
