Zakon o ratifikaciji Sporazuma med Vlado Republike Slovenije in Vlado Republike Finske o izmenjavi in medsebojnem varovanju tajnih podatkov (BFIVTP)

Ratificira se Sporazum med Vlado Republike Slovenije in Vlado Republike Finske o izmenjavi in medsebojnem varovanju tajnih podatkov, sklenjen v Ljubljani 6. maja 2008.

Sporazum se v izvirniku v slovenskem in angleškem jeziku glasi:(*) sta se ob upoštevanju državnih interesov in varnosti, v želji, da bi zagotovili varovanje tajnih podatkov, izmenjanih med njima ali med javnimi in zasebnimi subjekti v njuni pristojnosti, dogovorili:

V tem sporazumu izrazi pomenijo: tajni podatek: podatek, dokument ali gradivo, ki se ne glede na obliko prenese ali nastane med pogodbenicama po notranji zakonodaji pogodbenice, zahteva varovanje pred nepooblaščenim razkritjem, odtujitvijo ali izgubo in je kot tako ustrezno označeno; pogodba s tajnimi podatki: pogodba z izvajalcem ali podizvajalcem, vključno s pogajanji pred sklenitvijo pogodbe, ki vsebuje tajne podatke ali vključuje dostop do njih; pogodbenica izvora: pogodbenica, vključno z javnimi ali zasebnimi subjekti v njeni pristojnosti, ki da tajne podatke pogodbenici prejemnici; pogodbenica prejemnica: pogodbenica, vključno z javnimi ali zasebnimi subjekti v njeni pristojnosti, ki prejme tajne podatke od pogodbenice izvora; tretja stran: država, vključno z javnimi ali zasebnimi subjekti v njeni pristojnosti, ali mednarodna organizacija, ki ni pogodbenica tega sporazuma; potreba po seznanitvi: načelo, s katerim se posamezniku lahko dovoli dostop do tajnih podatkov le za opravljanje njegovih uradnih dolžnosti ali nalog.

Namen tega sporazuma je varovati tajne podatke, ki jih ena pogodbenica zagotovi drugi zlasti zaradi zunanjih zadev, obrambe, varnosti in policijskih zadev ter industrijskih ali tehnoloških zadev, ali se prenesejo pri izvajanju ali pripravi pogodb s tajnimi podatki ali nastajajo pri dejavnosti, povezani s področjem uporabe tega sporazuma, ali iz nje izhajajo.

1. Nacionalna varnostna organa pogodbenic, pristojna za splošno izvajanje in nadzor vseh vidikov tega sporazuma, sta: v Republiki Sloveniji: Urad Vlade Republike Slovenije za varovanje tajnih podatkov; v Republiki Finski: Ulkoasiainministeriö, turvallisuusyksikkö. 2. Nacionalna varnostna organa se obveščata o drugih pristojnih varnostnih organih, odgovornih za izvajanje tega sporazuma. 3. Pogodbenici se obveščata o poznejših spremembah nacionalnih varnostnih organov.

1. Tajni podatki, dani na podlagi tega sporazuma, so označeni z ustreznimi oznakami stopnje tajnosti po notranji zakonodaji pogodbenice. 2. Enakovredne oznake stopnje tajnosti so: text="+----------------------+--------------------+------------------+ | Republika Slovenija | Republika Finska | angleški prevod | +----------------------+--------------------+------------------+ | STROGO TAJNO | ERITTÄIN SALAINEN | TOP SECRET | +----------------------+--------------------+------------------+ | TAJNO | SALAINEN | SECRET | +----------------------+--------------------+------------------+ | ZAUPNO | LUOTTAMUKSELLINEN | CONFIDENTIAL | +----------------------+--------------------+------------------+ | INTERNO | KÄYTTÖ RAJOITETTU | RESTRICTED | +----------------------+--------------------+------------------+"

1. Dostop do podatkov stopnje INTERNO/KÄYTTÖ RAJOITETTU je omejen na osebe, ki imajo potrebo po seznanitvi in so za to ustrezno usposobljene. 2. Dostop do podatkov stopnje ZAUPNO/LUOTTAMUKSELLINEN in višje stopnje je omejen na osebe, ki imajo potrebo po seznanitvi in so bile v skladu z notranjo zakonodajo varnostno preverjene in pooblaščene za dostop do tovrstnih podatkov ter ustrezno usposobljene za to. 3. Pogodbenici si priznavata varnostna dovoljenja. Drugi odstavek 4. člena se uporablja skladno s tem.

1. Pogodbenici zagotavljata tajnim podatkom iz tega sporazuma enako raven varovanja kakor svojim podatkom enake stopnje tajnosti. 2. Pristojni varnostni organ pogodbenice izvora: a) zagotovi, da so tajni podatki označeni z ustrezno oznako stopnje tajnosti v skladu z notranjo zakonodajo, in b) obvesti pogodbenico prejemnico o: – pogojih za dajanje tajnih podatkov ali omejitvah njihove uporabe in – vseh poznejših spremembah stopnje tajnosti. 3. Pristojni varnostni organ pogodbenice prejemnice: a) zagotovi, da so tajni podatki označeni z enakovrednimi oznakami stopnje tajnosti skladno z drugim odstavkom 4. člena, in b) zagotovi, da se stopnja tajnosti ne spreminja, razen s pisnim dovoljenjem pogodbenice izvora.

1. Pogodbenica prejemnica tajne podatke uporabi izključno za namen, za katerega so ji bili dani, in z omejitvami, ki jih je navedla pogodbenica izvora. 2. Pogodbenica prejemnica tajnih podatkov ne da tretji strani brez pisnega soglasja pogodbenice izvora.

1. Prenos tajnih podatkov med pogodbenicama poteka po diplomatskih ali vojaških poteh ali po drugih poteh, ki jih odobrijo pristojni varnostni organi v skladu z notranjo zakonodajo. 2. Podatki stopnje INTERNO/KÄYTTÖ RAJOITETTU se lahko prenašajo tudi po pošti ali z drugo dostavno službo v skladu z notranjo zakonodajo.

1. Vsi izvodi in prevodi imajo ustrezno oznako stopnje tajnosti in so varovani kot tajni podatki izvirnika. Prevodi in izvodi so omejeni na najmanjše število, potrebno za uradne namene. 2. Vsak prevod mora imeti v jeziku prevoda ustrezno navedbo, da prevod vsebuje tajne podatke pogodbenice izvora. 3. Tajni podatki z oznako STROGO TAJNO/ERITTÄIN SALAINEN se prevajajo ali razmnožujejo izključno s pisnim dovoljenjem pogodbenice izvora. 4. Tajni podatki z oznako STROGO TAJNO/ERITTÄIN SALAINEN se ne smejo uničiti. Ko jih pogodbenica ne potrebuje več, jih vrne pogodbenici izvora. 5. Podatki stopnje TAJNO/SALAINEN ali nižje stopnje se v skladu z notranjo zakonodajo uničijo, ko jih pogodbenica prejemnica ne potrebuje več.

1. Če namerava pristojni varnostni organ pogodbenice izvora odobriti pogajanja za sklenitev pogodbe s tajnimi podatki z izvajalcem v pristojnosti pogodbenice prejemnice, na podlagi zaprosila pridobi vsa ustrezna varnostna dovoljenja od pristojnega varnostnega organa pogodbenice prejemnice. 2. Pristojni varnostni organ pogodbenice prejemnice lahko pri odprtem razpisu s tajnimi podatki pristojnemu varnostnemu organu pogodbenice izvora zagotovi ustrezna varnostna dovoljenja tudi brez zaprosila. 3. Za podizvajalce veljajo enake varnostne zahteve, vključno z ustreznimi dovoljenji, kot za izvajalca, ki je sklenil glavno pogodbo s tajnimi podatki. 4. Pristojni varnostni organ pogodbenice izvora lahko predlaga varnostne preglede, ki jih v organizacijah za zagotavljanje skladnosti s tem sporazumom izvede pristojni varnostni organ pogodbenice prejemnice, in sodeluje pri njih.

1. Za obiske, pri katerih je potreben dostop do tajnih podatkov, je potrebno predhodno dovoljenje pristojnega varnostnega organa pogodbenice gostiteljice. 2. Zaprosilo za obisk se predloži ustreznemu pristojnemu varnostnemu organu vsaj 20 dni pred začetkom obiska in vsebuje: a) ime in priimek obiskovalca, datum in kraj rojstva, državljanstvo in številko osebne izkaznice ali potnega lista; b) položaj obiskovalca s podatki o delodajalcu, ki ga obiskovalec zastopa; c) podatke o projektu, pri katerem obiskovalec sodeluje; d) po potrebi veljavnost in stopnjo dovoljenja za dostop do tajnih podatkov obiskovalca; e) ime, naslov, telefonsko številko, številko telefaksa, elektronski naslov organizacije, v kateri bo obisk, in ime osebe za stike v organizaciji; f) namen obiska, vključno z najvišjo stopnjo obravnavanih tajnih podatkov; g) datum in trajanje obiska. Pri večkratnih obiskih se navede celotno obdobje obiskov; h) datum in podpis pristojnega varnostnega organa pošiljatelja. 3. V nujnih primerih se pristojni varnostni organi lahko dogovorijo za krajši rok. 4. Pristojni varnostni organi se lahko dogovorijo o seznamu obiskovalcev, ki imajo pravico do večkratnih obiskov. Seznam velja največ 12 mesecev in se lahko podaljša še za največ 12 mesecev. Zaprosilo za večkratne obiske se predloži v skladu z drugim odstavkom tega člena. Ko je seznam potrjen, se lahko sodelujoče organizacije neposredno dogovarjajo o obiskih. 5. Tajni podatki, ki jih pridobi obiskovalec, se štejejo kot tajni podatki po tem sporazumu.

1. Zaradi doseganja in ohranjanja primerljivih varnostnih standardov se pristojni varnostni organi na podlagi zaprosila obveščajo o državnih varnostnih standardih, postopkih in praksah za varovanje tajnih podatkov. V ta namen se lahko pristojni varnostni organi obiskujejo. 2. Pristojni varnostni organi se obveščajo o izjemnih varnostnih tveganjih, ki lahko ogrozijo dane tajne podatke. 3. V skladu z notranjo zakonodajo si pristojni varnostni organi na podlagi zaprosila pomagajo pri izvajanju postopkov varnostnega preverjanja. 4. Pristojni varnostni organi se takoj obvestijo o vsaki spremembi medsebojno priznanih varnostnih dovoljenj. 5. Varnostne službe pogodbenic si lahko v skladu z notranjo zakonodajo neposredno izmenjavajo operativne in/ali obveščevalne podatke. 6. Sodelovanje po tem sporazumu poteka v angleškem jeziku.

1. Vsaka pogodbenica takoj obvesti drugo o sumu ali odkritju kršitve ali ogrožanja varovanja tajnih podatkov. 2. Pristojna pogodbenica sprejme vse možne ustrezne ukrepe v skladu z notranjo zakonodajo, da omeji posledice kršitev varovanja ali ogrožanja iz prvega odstavka tega člena in prepreči nadaljnje kršitve. Na podlagi zaprosila ji pri preiskavi pomaga druga pogodbenica, ki je obveščena o izidu preiskave in o ukrepih, sprejetih zaradi kršitve.

Vsaka pogodbenica krije svoje stroške, ki nastanejo pri izvajanju tega sporazuma.

Vse spore glede razlage ali uporabe tega sporazuma rešujeta pogodbenici izključno z medsebojnimi posvetovanji.

1. Sporazum je sklenjen za nedoločen čas. Odobren mora biti v skladu z notranjepravnimi postopki pogodbenic in začne veljati prvi dan drugega meseca po prejemu zadnjega uradnega obvestila o tem, da so izpolnjene vse zahteve, potrebne za začetek veljavnosti tega sporazuma. 2. Pogodbenica ima pravico, da ta sporazum kadar koli pisno odpove. V takem primeru sporazum preneha veljati šest mesecev po dnevu, ko je druga pogodbenica prejela obvestilo o odpovedi sporazuma. 3. Ne glede na odpoved tega sporazuma se vsi tajni podatki, dani na njegovi podlagi, še naprej varujejo v skladu z njim, dokler pogodbenica izvora pogodbenice prejemnice ne razreši te obveznosti. 4. Sporazum se lahko kadar koli spremeni s pisnim soglasjem obeh pogodbenic. Spremembe začnejo veljati v skladu s prvim odstavkom tega člena. 5. Sporazum ne vpliva na pravice in obveznosti pogodbenic iz drugih mednarodnih sporazumov. 6. Za izvajanje tega sporazuma se lahko sklenejo dogovori o izvajanju. Sestavljeno v Ljubljani, 6. maja 2008 v dveh izvirnikih v slovenskem, finskem in angleškem jeziku, pri čemer so vsa besedila enako verodostojna. Pri različni razlagi prevlada angleško besedilo. V potrditev tega so podpisani, ki so bili za to pravilno pooblaščeni, podpisali ta sporazum. Za Vlado Republike Slovenije Milan Tarman l.r. Za Vlado Republike Finske Brigitta Stenius-Mladenov l.r wishing to ensure the protection of Classified Information exchanged between the Parties or between public and private entities under their jurisdiction, in respect of national interests and security, have agreed on the following: For the purposes of this Agreement these terms mean the following: Classified Information: Any information, document or material, regardless of its form, which is transmitted or generated between the Parties under the national legislation of either Party, requires protection against unauthorised disclosure, misappropriation or loss and is designated as such and marked appropriately. Classified Contract: A contract or a subcontract, including pre-contractual negotiations, which contains Classified Information or involves access to it. Originating Party: The Party, including any public or private entities under its jurisdiction, which releases Classified Information to the Recipient Party. Recipient Party: The Party, including any public or private entities under its jurisdiction, which receives Classified Information from the Originating Party. Third Party: A state, including any public or private entities under its jurisdiction, or an international organisation that is not a Party to this Agreement. Need-to-Know: A principle by which access to Classified Information may be granted to an individual only in connection with his/her official duties or tasks. The purpose of this Agreement is to protect Classified Information provided by one Party to the other Party mainly for purposes of foreign affairs, defence, security and police matters as well as industrial or technological matters, or transmitted within the context of the implementation or preparation of Classified Contracts, or arising or produced within the context of an activity falling within the scope of application of this Agreement. 1. The National Security Authorities designated by the Parties as responsible for the general implementation and the relevant controls of all aspects of this Agreement are: In the Republic of Slovenia: Urad Vlade Republike Slovenije za varovanje tajnih podatkov In the Republic of Finland: Ulkoasiainministeriö, turvallisuusyksikkö 2. The National Security Authorities shall notify each other of any other Competent Security Authorities that are responsible for the implementation of this Agreement. 3. The Parties shall inform each other of any subsequent changes of the National Security Authorities. 1. Classified Information released under this Agreement shall be marked with the appropriate security classification level under the national legislation of the Parties. 2. The equivalence of the national security classification markings is as follows: text="+------------------+----------------------+--------------------+ | Republic of | Republic of Finland |English translation | | Slovenia | | | +------------------+----------------------+--------------------+ | STROGO TAJNO | ERITTÄIN SALAINEN | TOP SECRET | +------------------+----------------------+--------------------+ | TAJNO | SALAINEN | SECRET | +------------------+----------------------+--------------------+ | ZAUPNO | LUOTTAMUKSELLINEN | CONFIDENTIAL | +------------------+----------------------+--------------------+ | INTERNO | KÄYTTÖ RAJOITETTU | RESTRICTED | +------------------+----------------------+--------------------+" 1. Access to information classified as INTERNO/KÄYTTÖ RAJOITETTU shall be limited to persons who have a Need-to-Know and who have been briefed accordingly. 2. Access to information classified as ZAUPNO/LUOTTAMUKSELLINEN and above shall be limited to persons who have a Need-to-Know and who, in accordance with national legislation, have been security cleared and authorized to have access to such information as well as briefed accordingly. 3. The Parties shall mutually recognise their respective security clearances. Paragraph 2 of Article 4 shall apply accordingly. 1. The Parties shall afford to Classified Information referred to in this Agreement the same protection as to their own information of the corresponding level of security classification. 2. The Competent Security Authority of the Originating Party shall: a) ensure that the Classified Information is marked with an appropriate security classification marking in accordance with its national legislation, and b) inform the Recipient Party – of any conditions of release or limitations on the use of the Classified Information, and – of any subsequent changes in the classification. 3. The Competent Security Authority of the Recipient Party shall: a) ensure that the Classified Information is marked with an equivalent classification marking in accordance with Paragraph 2 of Article 4, and b) ensure that the classification level is not changed unless authorized in writing by the Originating Party. 1. The Recipient Party shall use the Classified Information only for the purpose for which it has been delivered and within the limitations stated by the Originating Party. 2. The Recipient Party shall not release Classified Information to a Third Party without a written consent of the Originating Party. 1. Classified Information shall be transmitted between the Parties through diplomatic or military channels or through other channels approved by their Competent Security Authorities in accordance with national legislation. 2. Information classified as INTERNO/KÄYTTÖ RAJOITETTU may be transmitted also by post or another delivery service in accordance with national legislation. 1. All reproductions and translations shall bear appropriate security classification markings and they shall be protected as the original Classified Information. The translations and the number of reproductions shall be limited to the minimum required for an official purpose. 2. All translations shall contain a suitable annotation, in the language of translation, indicating that they contain Classified Information of the Originating Party. 3. Classified Information marked STROGO TAJNO/ERITTÄIN SALAINEN shall be translated or reproduced only upon the written permission of the Originating Party. 4. Classified Information marked STROGO TAJNO/ERITTÄIN SALAINEN shall not be destroyed. It shall be returned to the Originating Party after it is no longer considered necessary by the Parties. 5. Information classified as TAJNO/SALAINEN or below shall be destroyed after it is no longer considered necessary by the Recipient Party, in accordance with national legislation. 1. If the Competent Security Authority of the Originating Party intends to permit negotiations for concluding a Classified Contract with a contractor under the jurisdiction of the Recipient Party, it shall, on request, obtain all relevant security certificates from the Competent Security Authority of the Recipient Party. 2. In the case of an open classified tender the Competent Security Authority of the Recipient Party may provide the Competent Security Authority of the Originating Party with the relevant security certificates even without a request. 3. Sub-contractors shall be subject to the same security requirements, including due certifications, as the contractor which concluded the main Classified Contract. 4. The Competent Security Authority of the Originating Party may propose and participate in security inspections carried out by the Competent Security Authority of the Recipient Party at facilities to ensure their compliance with this Agreement. 1. Visits necessitating access to Classified Information shall be subject to prior permission of the Competent Security Authority of the host Party. 2. A request for visit shall be submitted to the relevant Competent Security Authority at least 20 days prior to the commencement of the visit and shall include the following: a) the visitor's name, date and place of birth, nationality and ID card/passport number; b) the visitor's position, with a specification of the employer which the visitor represents; c) a specification of the project in which the visitor participates; d) the validity and level of the visitor's security clearance, if required; e) the name, address, phone/fax number, e-mail and point of contact of the facility to be visited; f) the purpose of the visit, including the highest level of Classified Information to be involved; g) the date and duration of the visit. In the case of recurring visits the total period covered by the visits shall be stated; h) the date and signature of the sending Competent Security Authority. 3. In urgent cases, the Competent Security Authorities can agree on a shorter period. 4. The Competent Security Authorities may agree on a list of visitors entitled to recurring visits. The list shall be valid for an initial period not exceeding 12 months and may be extended for a further period of time not exceeding 12 months. A request for recurring visits shall be submitted in accordance with Paragraph 2 of this Article. Once a list has been approved, visits may be arranged directly between the facilities involved. 5. Any Classified Information acquired by a visitor shall be considered as Classified Information under this Agreement. 1. In order to achieve and maintain comparable standards of security, the Competent Security Authorities shall, on request, provide each other with information about their national security standards, procedures and practices for the protection of Classified Information. To this aim the Competent Security Authorities may visit each other. 2. The Competent Security Authorities shall inform each other of exceptional security risks that may endanger the released Classified Information. 3. On request, the Competent Security Authorities shall, in accordance with national legislation, assist each other in carrying out security clearance procedures. 4. The Competent Security Authorities shall promptly inform each other about any changes in mutually recognized security clearances. 5. The security services of the Parties may exchange operative and/or intelligence information directly in accordance with national legislation. 6. The co-operation under this Agreement shall be effected in the English language. 1. Each Party shall immediately notify the other Party of any suspicion or discovery of a breach or compromise of the security of Classified Information. 2. The competent Party shall undertake all possible appropriate measures under its national legislation so as to limit the consequences of the breach or compromise referred to in Paragraph 1 of this Article and to prevent further violations. On request, the other Party shall provide investigative assistance; it shall be informed of the outcome of the investigation and the measures undertaken due to the violation. Each Party shall bear its own expenses incurred in the course of implementation of this Agreement. Any dispute between the Parties on the interpretation or application of this Agreement shall be resolved exclusively by means of consultation between the Parties. 1. This Agreement is concluded for an indefinite period of time. It is subject to approval in accordance with the national legal procedures of the Parties and shall enter into force on the first day of the second month following receipt of the later notification that the necessary requirements for this Agreement to enter into force have been met. 2. Each Party shall have the right to terminate this Agreement in writing at any time. In such a case the validity of the Agreement shall expire 6 months following the day on which the termination notice was received by the other Party. 3. Notwithstanding the termination of this Agreement, all Classified Information delivered under this Agreement shall continue to be protected in accordance with the provisions stated in this Agreement until the Originating Party dispenses the Recipient Party from this obligation. 4. This Agreement may be amended at any time by written consent of both Parties. Such amendments shall enter into force in accordance with Paragraph 1 of this Article. 5. This Agreement does not prejudice the rights and obligations of the Parties arising from other international agreements. 6. Implementing arrangements may be concluded for the implementation of this Agreement. Done in Ljubljana on 6 May 2008 in two originals in the Slovenian, Finnish and English languages, each text being equally authentic. In case of different interpretation the English text shall prevail. In witness whereof the undersigned, being duly authorised thereto, have signed this Agreement. On behalf of the Government of the Republic of Slovenia Milan Tarman (s) On behalf of the Government of the Republic of Finland Brigitta Stenius-Mladenov (s)

Za izvajanje sporazuma skrbi Urad Vlade Republike Slovenije za varovanje tajnih podatkov.

Ta zakon začne veljati petnajsti dan po objavi v Uradnem listu Republike Slovenije – Mednarodne pogodbe. Št. 040-05/09-16/10 Ljubljana, dne 5. marca 2009 EPA 193-V Državni zbor Republike Slovenije dr. Pavel Gantar l.r. Predsednik (*)Besedilo sporazuma v finskem jeziku je na vpogled v Sektorju za mednarodno pravo Ministrstva za zunanje zadeve.