Article 2 Scope

1.This Regulation applies to the following organisations:

(a)production organisations and design organisations subject to Subparts G and J of Section A of Annex I (Part 21) to Regulation (EU) No 748/2012, except design and production organisations that are solely involved in the design and/or production of ELA2 aircraft as defined in Article 1(2), point (j) of Regulation (EU) No 748/2012;

(b)aerodrome operators and apron management service providers subject to Annex III ‘Part Organisation Requirements (Part-ADR.OR)’ to Regulation (EU) No 139/2014.

(c)ground handling organisations subject to Commission Delegated Regulation (EU) 2025/20 that:

(i)in order to provide the respective services, have to collect, store, analyse or otherwise process data provided by third parties; or

(ii)provide directly to aircraft operators data that will be used for operational purposes. [point (c) applicable from 27 March 2031 — Regulation (EU) 2025/22]

2.This Regulation is without prejudice to information security and cybersecurity requirements laid down in point 1.7 of the Annex to Commission Implementing Regulation (EU) 2015/1998 and in Article 14 of Directive (EU) 2016/1148 of the European Parliament and of the Council.