In Cyprus, applicants must submit a criminal record report from their country of origin and residence (if different), which must be dated no more than 90 days prior to submission. The Cypriot police also undertake a search in both the Europol and INTERPOL databases 73. The investor’s name and family members’ names must not be included in the list of persons whose assets, within the boundaries of the European Union, have been frozen as the result of sanctions. In addition, according to new rules introduced in July 2018 74, applicants, who submit their claims via a service provider are required to submit a due diligence report issued through an internationally accepted database (for example World-Check75, Lexis Diligence76, Regulatory DataCorp Inc.77 etc.). In cases where there are concerns regarding national security, the application is additionally evaluated by the Central Intelligence Agency of Cyprus. Cyprus is not connected to the Schengen Information System. In Bulgaria, legislation requires the applicant to present a clean criminal record certificate and a document showing that no criminal proceedings are pending or ongoing against the applicant. The Council for Citizenship gives an opinion on citizenship requests, following a written statement by the Ministry of the Interior and the State Agency for National Security (SANS). The latter carries out checks on all applicants for Bulgarian citizenship (including those applying through investor schemes) within the scope of its competence, such as police intelligence or police record databases. No information was available on the Bulgarian policy concerning persons subject to EU restrictive measures, nor whether the authorities use SIS to check applicants. The study has highlighted a significant number of grey zones concerning security checks. One problem relates to the discretion of Member States regarding citizenship applications. In fact, the study shows that authorities can admit requests, even when the applicants do not meet certain security requirements78. Moroever, applications do not need to be submitted in person and can be submitted by agents, which is the case in Malta and Cyprus. Moreover, Member States currently do not consult each other on applicants for investor citizenship. In comparison, prior consultation on security grounds between Member States exists for applicants for short-stay visas from certain79 third countries80. This is despite the fact that citizenship entails wide-ranging rights, including residence and the right to vote and stand in EU and local elections, awarded for life rather than a mere short-term visiting right. Another problem relates to the fact that a lack of coordination and commonly agreed criteria leaves room for “shopping around” for the most lenient conditions. An applicant refused 73 74 75 76 77 78 79 80 Information provided by the Ministry of Interior Officer on 29 May 2018. http://www.moi.gov.cy/moi/moi.nsf/all/07F0364738A716E4C22582C40023E6C0/$file/CYPRUS% 20INVESTMENT%20PROGRAMME_13.9.2016.pdf?openelement https://risk.thomsonreuters.com/en/products/world-check-know-your-customer.html https://www.lexisnexis.com/en-us/products/lexis-diligence.page https://rdc.com/ For example, in Malta the requirement to prove a clean criminal record, not to be the subject of a criminal investigation and not to be a potential national security threat to Malta can be waived in exceptional circumstances – Overview Study, section II.1 (checks), ibid, note 4. https://ec.europa.eu/home-affairs/sites/homeaffairs/files/e-library/documents/policies/borders-andvisas/visa-policy/docs/prior_consultation_en.pdf Provided in Article 22 of Regulation (EC) No 810/2009 of the European Parliament and of the Council of 13 July 2009 establishing a Community Code on Visas (Visa Code) (OJ L 243, 15.9.2009, p. 1) and carried out through the VISMail mechanism provided in Article 16(2) of Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation). 12

Select target paragraph3