Confidential Safety Reporting – confidential reporting of alleged malpractices and irregularities to the European Union Aviation Safety Agency in the field of aviation safety Under Regulation (EU) 2018/1139, the European Union Aviation Safety Agency (hereafter “the Agency”) has in place a system for reporting Confidential Safety Reports (hereafter “CSR” or “CSRs”) to enable individuals to voluntary report to EASA alleged malpractices and irregularities in the field of aviation safety, without having to fear that their action may have adverse consequences for their person. Confidential safety reporting is an independent system set up by the Agency under Regulation (EU) 2018/1139 (‘Basic Regulation’) to facilitate the collection and exchange of aviation safety related information that is complementary to the standard filing and reporting lines of Regulation (EU) No 376/2014 and of the implementing rules to the Basic Regulation. It enables individuals to voluntary report alleged malpractices and irregularities in the field of aviation safety, without having to fear that their action may have adverse consequences for their person. Confidential Safety Reports (CSRs) can lead to effective detection and follow-up of breaches, irregularities, and malpractices of the EU aviation safety legal framework that otherwise might remain hidden and could cause serious harm to aviation safety. Therefore, information obtained through CSRs is an important source for the detection of potential safety hazards and is also used to make effective improvements in aviation safety taking into account the principles of the safety risk management process. The CSR system provides a high level of protection to whistle-blowers against any form of retaliation, such as suspension, demotion, or intimidation, when speaking up on aviation safety related irregularities that are of relevance for, or within the competence of, the Agency. A dedicated CSR team at the Agency is specially trained to deal with such reports. Reporters are encouraged to use the reporting channels within their Member State’s National Aviation Authority (NAA) first, before turning to the Agency. In any event, reporters will not lose their protection if they decide to use the Agency’s reporting channel in the first place, but the Agency might redirect the reporter to the NAA of the Member State if that is the competent authority overseeing the reported subject-matter. For contact information on Member States' National Aviation Authorities, please visit 'EASA by Country'. Who can report? CSRs can be submitted by any individual, reporting in their personal capacity, who acquired information on alleged malpractices and irregularities in the field of aviation safety, including, at least, the following: persons having the status of employees and contracted personnel including civil servants; persons working for airports, , operators, design, production, or maintenance or (training) organisations; persons belonging to the administration or management of an EU member state competent authority; any persons working under the supervision and direction of contractors, subcontractors, and suppliers; persons who report on breaches acquired in a work-based relationship that has since ended. Please note that representatives from trade unions or industry associations should communicate with the Agency through other channels, and are also encouraged to contact the relevant NAAs first. What can be reported? The EASA CSR reporting system allows to report any suspected, presumed, or alleged violations of the European Union’s legal framework for civil aviation safety. This includes acts or omissions that: are unlawful and relate to areas falling within the scope of competencies of the Agency; or defeat the object or the purpose of EU aviation rules acts falling within the scope of Regulation (EU) 2018/1139; Please note that the following topics, among others, are not CSRs as they do not fall under the scope of Regulation (EU) 2018/1139, and that EASA therefore has no legal mandate or power to take any action in relation to: Passenger rights complaints; Economic disputes or unfair competition grievances; Contractual or labour disputes; Issues that have been reported on in the media; Criminal offences; Matters concerning aircraft involved in military, customs, police, search and rescue, firefighting, border control, coastguard or similar activities or services unless the responsible Member State has decided to apply the common EU aviation legislation to such activities (for further information and list of opt-ins, please consult the EASA website). Before you submit your CSR please ensure that your information is: Relevant and related to civil aviation safety; Sufficiently specific, substantiated, and ideally supported by documentary evidence. Please note that unspecified or vague allegations cannot be followed up; Complete and comprehensive; do not submit multiple reports as this will hinder the administrative process and the follow-up. Instead, please aim to capture all information in a single comprehensive report. In most cases, the National Aviation Authorities (NAAs) of Member States are competent to receive, follow-up and give feedback on reports. They also ensure an independent and autonomous handling of the information on aviation safety related matters reported to them confidentially and for which they are the competent authority. For contact information on Member States' National Aviation Authorities, please visit 'EASA by Country'. Do you still want to report to EASA any aviation safety related malpractices or irregularities? Yes No How to report and what happens thereafter? Reports on suspected malpractices and irregularities should be submitted by completing the online Confidential Safety Reporting form. Please do not send the same or similar correspondence to any other EASA email addresses and please note that the size of documents attached should not exceed 10 MB. After submitting a report you may be asked for additional information or clarification. Therefore, please ensure that this email address remains active throughout the entire process. Information that falls within EASA’s remit, as set by Regulation (EU) 2018/1139, is registered and de-identified (so that you remain anonymous), unless you have agreed to disclose your personal data. EASA’s Confidential Safety Reporting team will ensure the completeness, integrity and confidentiality of the information processed and will prevent access thereto by non-authorised staff members. Your e-mail address and personal details will not be disclosed to anyone outside the EASA Confidential Safety Reporting team. Information and information about your identity will be kept confidential and protected in accordance with the applicable legal framework (Regulation (EC) No 1049/2001 on public access to documents and Regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union Institutions, bodies, offices and agencies and on the free movement of such data). After de-identification, the information is forwarded to the relevant technical unit for review. In case EASA concludes that the reported matter falls under the oversight of an EU Member State’s or a third-country’s aviation competent authority, EASA will inform you accordingly and the information you provided will be transmitted to the competent authority for further follow-up. Will I be informed about the outcome of any investigation? If the reported matter falls within one of the areas where EASA is the competent authority EASA will conduct the necessary investigation. Upon its conclusion, you will be informed about the outcome to the extent that this is possible without compromising the integrity of EASA’s actions. The duration of the investigation depends on the complexity of the case. Pending EASA’s investigation you will only be contacted in case additional information is required from you. Within the EASA Confidential Safety Reporting system, the reporter’s personal data will be processed in accordance with (i) Regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and (ii) the applicable EASA data protection policy. We thank you for your support and active interest in aviation safety! Confidential Safety Reporting form Title - None -Dr.Mr.Mrs.Ms.Other First name Last name Email Reporter Private individual Aviation professional Other Please specify Did you already contact the Competent Authority? Yes No Please explain why you did not contact the national Competent Authority (CA). What was the Competent Authority’s response to your concerns?(Please mention the name of the competent authority and explain why you consider it necessary to also bring your concern to EASA’s attention) Subject of the malpractices and irregularities Description of the malpractices and irregularitiesIf possible, please refer to any legal provisions that you consider may have been breached Attachment. Please upload any evidence or supporting files. ? For attachments exceeding the size limits, please use EASA FileBox. Please visit our website for more information on Aviation Safety Reporting. Do you agree that EASA communicates your personal data to the competent authority in case EASA concludes that the reported matter falls under the oversight of an EU Member State’s or a third-country’s aviation competent authority? Yes, I hereby give EASA free and voluntary consent to the transfer of my personal data included in the report: name, last name, email address, and as the case may be, also other information that I have provided within the report. The transfer shall be performed for the purpose of the processing of my report by the national aviation competent authority in the European Union (EU). In case the processing of personal data would involve their transfer to a national aviation competent authority outside the EU, this transfer will be based on standard EU-approved contract clauses, ensuring an adequate level of protection required by applicable law. No, I am aware that: (i) my report will be anonymised and no personal data will be communicated to the responsible aviation competent authority and (ii) the anonymised report may still be shared with the responsible aviation competent authority if necessary.