The Republic of Slovenia and the Kingdom of Spain hereinafter referred to as the 'Parties',
wishing to ensure the protection of Classified Information exchanged between the Parties or between public and private entities under their jurisdiction
have agreed on the following:
In accordance with their national laws and regulations and in respect of national interests and security, both Parties shall take all appropriate measures to ensure the protection of Classified Information, which is transmitted or generated according to this Agreement.
(1) This Agreement sets out procedures for the protection of Classified Information exchanged between the Parties.
(2) Neither Party shall invoke this Agreement in order to obtain Classified Information that the other Party has received from a Third Party.
For the purposes of this Agreement these terms mean the following:
Classified Contract: Acontract or a subcontract, including pre-contractual negotiations, that contains Classified Information or involves access to it.
Classified Information: Any information, regardless of its form, that is transmitted or generated between the Parties under the national laws and regulations of either Party and requires, in the interests of national security, protection against unauthorised disclosure or other compromise, and is designated as such and marked appropriately by a Party.
Contractor: A legal entity possessing the legal capacity to conclude contracts.
Facility Security Clearance: A positive determination by the Competent Security Authority that, from a security point of view, a Contractor has the capability to handle Classified Information, in accordance with national laws and regulations.
Need-to-Know: A principle by which access to Classified Information may be granted to an individual only in connection with his/her official duties or tasks.
Originating Party: The Party, including any public or private entities under its jurisdiction, that releases Classified Information to the Recipient Party.
Personnel Security Clearance: A positive determination following an accomplished vetting procedure in accordance with national laws and regulations, on the basis of which an individual is eligible to have access to and to handle Classified Information up to the level defined in the clearance.
Recipient Party: The Party, including any public or private entities under its jurisdiction, that receives Classified Information from the Originating Party.
Third Party: A state, including any public or private entities under its jurisdiction, or an international organisation that is not a Party to this Agreement.
COMPETENT SECURITY AUTHORITIES
(1) The National Security Authorities designated by the Parties as responsible for the general implementation and the relevant controls of all aspects of this Agreement are:
In the Republic of Slovenia:
Urad Vlade Republike Slovenije za varovanje tajnih podatkov;
In the Kingdom of Spain:
Secretario de Estado, Director del Centro Nacional de Inteligencia
Oficina Nacional de Seguridad.
(2) The National Security Authorities shall notify each other of any other Competent Security Authorities that are responsible for the implementation of this Agreement.
(3) The Parties shall inform each other through diplomatic channels of any subsequent changes of the National Security Authorities.
(1) Classified Information released under this Agreement shall be marked with the appropriate security classification level in accordance with national laws and regulations.
(2) The following national security classification markings are equivalent:
|
Republic of Slovenia
|
Kingdom of Spain
|
|
STROGO TAJNO
|
SECRETO
|
|
TAJNO
|
RESERVADO
|
|
ZAUPNO
|
CONFIDENCIAL
|
|
INTERNO
|
DIFUSIÓN LIMITADA
|
(3) The level of security classification to be given to the information generated in the process of the mutual cooperation of the Parties shall only be determined, modified or declassified by mutual consent. In the case of disagreement on the level of security classification to be given to such information, the Parties shall adopt the higher level proposed by any of them.
ACCESS TO CLASSIFIED INFORMATION
(1) Access to Classified Information shall be allowed only to those individuals with a Need-to-Know, who have been briefed on the handling and protection of Classified Information, and who have been duly authorised in accordance with national laws and regulations.
(2) The Parties shall mutually recognise their Personnel and Facility Security Clearances. Paragraph 2 of Article 5 shall apply accordingly.
PROTECTION OF CLASSIFIED INFORMATION
(1) The Parties shall afford to the Classified Information referred to in this Agreement the same protection as to their own Classified Information of the corresponding security classification level.
(2) The Competent Security Authority of the Originating Party shall:
a) ensure that the Classified Information is marked with an appropriate security classification marking in accordance with its national laws and regulations, and
b) inform the Recipient Party of any conditions of release or limitations on the use of the Classified Information and of any subsequent changes in the security classification.
(3) The Competent Security Authority of the Recipient Party shall:
a) ensure that the Classified Information is marked with an equivalent security classification marking in accordance with Paragraph 2 of Article 5, and
b) ensure that the security classification level is not changed unless authorised in writing by the Originating Party.
(4) Each Party shall ensure that appropriate measures are implemented for the protection of the Classified Information processed, stored or transmitted in communication and information systems. Such measures shall ensure the confidentiality, integrity, availability and, where applicable, non-repudiation and authenticity of the Classified Information, as well as an appropriate level of accountability and traceability of actions in relation to that information.
RESTRICTION ON THE USE AND ACCESS TO CLASSIFIED INFORMATION
(1) The Recipient Party shall use Classified Information only for the purpose for which it has been released and within the limitations stated by the Originating Party.
(2) The Recipient Party shall not release or allow access to Classified Information to a Third Party or its nationals without prior written consent of the Originating Party.
TRANSMISSION OF CLASSIFIED INFORMATION
(1) Classified Information shall be transmitted between the Parties through diplomatic channels or through other secure channels mutually approved by their National Security Authorities, in accordance with national laws and regulations.
(2) Information classified as INTERNO/DIFUSIÓN LIMITADA may also be transmitted by post or another delivery service in accordance with national laws and regulations.
(3) The Parties may transmit Classified Information through approved and secured electronic means in line with security procedures agreed between the National Security Authorities.
REPRODUCTION, TRANSLATION AND DESTRUCTION OF CLASSIFIED INFORMATION
(1) All reproductions and translations shall bear appropriate security classification markings and they shall be protected as the original Classified Information. Translations and the number of reproductions shall be limited to the minimum required for an official purpose.
(2) All translations shall be marked with the original security classification marking and shall contain a suitable annotation, in the language of translation, indicating that they contain Classified Information of the Originating Party.
(3) The individuals translating or reproducing Classified Information shall hold the appropriate Personnel Security Clearance, where necessary.
(4) Classified Information marked STROGO TAJNO/SECRETO, both in the original and in the translation, shall be reproduced only upon the written permission of the Originating Party.
(5) Classified Information marked STROGO TAJNO/SECRETO shall not be destroyed. It shall be returned to the Originating Party after it is no longer considered necessary by the recipient Party.
(6) Information classified TAJNO/RESERVADO shall be destroyed by the Recipient Party in accordance with its national laws and regulations after it is no longer considered necessary with a notification to the Originating Party.
(7) Information classified ZAUPNO/CONFIDENCIAL or below shall be destroyed by the Recipient Party in accordance with its national laws and regulations, after it is no longer considered necessary.
(1) Before providing Classified Information related to a Classified Contract to Contractors, sub-contractors or prospective contractors, the Recipient Party shall inform the Originating Party whether:
a) their facilities have the capability to adequately protect Classified Information;
b) they possess the Facility Security Clearance for handling Classified Information to the appropriate level;
c) its personnel has the appropriate level of Personnel Security Clearance to perform functions that require access to the Classified Information;
d) all persons having access to the Classified Information are informed of their responsibilities and obligations to protect the Classified Information in accordance with the appropriate laws and regulations of the Recipient Party.
(2) Each National Security Authority may request that a security inspection be carried out at a facility to ensure continuing compliance with security standards in accordance with national laws and regulations.
(3) A Classified Contract shall contain provisions on the security requirements and on the classification of each aspect or element of the Classified Contract. A copy of this document shall be submitted to the Competent Security Authorities of the Parties.
(1) Visits entailing access to Classified Information shall be subject to the prior permission of the National Security Authority of the host Party.
(2) A request for a visit shall be submitted through the National Security Authority of the sending facility to the National Security Authority of the hosting facility at least 20 days prior to the commencement of the visit. The request for the visit shall include the following data, which shall be used for the purpose of the visit only:
a) the visitor's name, date and place of birth, citizenship and identification card/passport number;
b) the visitor's position, with a specification of the employer that the visitor represents;
c) a specification of the project in which the visitor participates;
d) the validity and level of the visitor's Personnel Security Clearance, if required;
e) the name, address, phone/fax number, e-mail and point of contact of the facility to be visited;
f) the purpose of the visit, including the highest security classification level of Classified Information to be involved;
g) the date and duration of the visit. In case of recurring visits, the total period covered by the visits shall be stated;
h) the date and signature of the sending National Security Authority.
(3) In urgent cases, the National Security Authorities can agree on a shorter period for the submission of the request for visit.
(4) The validity of the visit authorisation shall not exceed one year.
(5) The National Security Authorities may agree on a list of visitors entitled to recurring visits. Once the list has been approved, visits may be arranged directly between the facilities involved, in accordance with the terms and conditions agreed upon.
(6) Each Party shall guarantee the protection of personal data of the visitors in accordance with its national laws and regulations.
(7) Any Classified Information acquired by a visitor shall be considered to be Classified Information under this Agreement.
(1) In order to achieve and maintain comparable standards of security, the National Security Authorities shall, on request, provide each other with information about their national security standards, procedures and practices for the protection of Classified Information. To this end, the National Security Authorities may visit each other.
(2) The Competent Security Authorities shall inform each other of exceptional security risks that may endanger the released Classified Information.
(3) When requested, the National Security Authorities shall assist each other in carrying out security clearance procedures.
(4) The National Security Authorities shall promptly inform each other about any changes in mutually recognised Personnel and Facility Security Clearances.
(1) In case of a security breach resulting in unauthorised disclosure, misappropriation or loss of Classified Information or the suspicion of such a breach, the National Security Authority of the Recipient Party shall immediately inform the National Security Authority of the Originating Party thereof in writing.
(2) The competent Party shall immediately initiate an investigation and undertake all possible appropriate measures in accordance with national laws and regulations so as to limit the consequences of the breach referred to in Paragraph 1 of this Article and to prevent further breaches. When requested, the other Party shall provide appropriate assistance; it shall be informed of the outcome of the proceedings and the measures undertaken due to the breach.
(3) When the breach of security has occurred in a Third Party, the National Security Authority of the sending Party shall take the actions referred to in paragraph 2 of this Article without delay.
(1) This Agreement does not include the generation of any costs.
(2) In case that, in the course of the implementation of this Agreement, there are unexpected costs for any of the Parties, each Party shall bear its own expenses.
Any dispute regarding the interpretation or application of this Agreement shall be settled by consultations and negotiations between the Parties and shall not be referred to any international tribunal or Third Party for settlement.
(1) This Agreement shall enter into force on the first day of the second month from the date of receipt of the latest written notification by which the Parties have informed each other, through diplomatic channels, that their internal legal requirements necessary for its entry into force have been fulfilled.
(2) This Agreement may be amended, at any moment, at the request of either Party, but on the basis of the mutual written consent of the Parties. Amendments shall enter into force in accordance with paragraph 1 of this Article.
(3) This Agreement is concluded for an indefinite period of time. Either Party may cancel this Agreement by giving the other Party notice in writing through diplomatic channels. In that case, this Agreement shall terminate six months from the date on which the other Party has received the notice of cancellation.
(4) In case of termination of this Agreement, all Classified Information transferred pursuant to this Agreement shall continue to be protected in accordance with the provisions set forth herein until the Recipient Party is released from this obligation in writing or is requested to return it to the Originating Party.
(5) Implementing arrangements may be concluded for the implementation of this Agreement.
In witness whereof the undersigned, being duly authorised thereto, have signed this Agreement.
Done in Madrid, 21. October 2014 in two originals in the Slovenian, Spanish and English languages, all texts being equally authentic. In case of any divergence of interpretation, the English text shall be used as a reference.
|
For the Republic of Slovenia
Boris Mohar (s)
|
For the Kingdom of Spain
Félix Sanz Roldán (s)
|