ARA.GEN.300 Oversight

• Regulation (EU) 2023/203 found in: Aircrew (1178/2011) Part-FCL Part-MED Part-CC Part-ARA Part-ORA Part-DTO (Dec 2024)
• Regulation (EU) 2025/2293 found in: Aircrew (1178/2011) Part-FCL Part-MED Part-CC Part-ARA Part-ORA Part-DTOPart-FCL Part-MED Part-CC Part-ARA Part-ORA Part-DTO (Nov 2025)

ARA.GEN.300 Oversight Regulation (EU) 2023/203 (a)     The competent authority shall verify: (1)     compliance with the requirements applicable to organisations or persons prior to the issue of an organisation certificate, approval, FSTD qualification certificate or personnel licence, certificate, rating, or attestation, as applicable; (2)     continued compliance with the requirements applicable to the persons holding licences, ratings and certificates, the organisations it has certified, the holders of a FSTD qualification and the organisations from which it received a declaration; (3)     implementation of appropriate safety measures mandated by the competent authority as defined in [ARA.GEN.135(c) and (d)](#_DxCrossRefBm894736039). (b)     This verification shall: (1)     be supported by documentation specifically intended to provide personnel responsible for safety oversight with guidance to perform their functions; (2)     provide the persons and organisations concerned with the results of safety oversight activity; (3)     be based on audits and inspections, including ramp and unannounced inspections; and (4)     provide the competent authority with the evidence needed in case further action is required, including the measures foreseen by [ARA.GEN.350](#_DxCrossRefBm894736069) and [ARA.GEN.355](#_DxCrossRefBm894736068). (c)      The scope of oversight defined in (a) and (b) shall take into account the results of past oversight activities and the safety priorities. (d)     Without prejudice to the competences of the Member States and to their obligations as set out in ARO.RAMP, the scope of the oversight of activities performed in the territory of a Member State by persons or organisations established or residing in another Member State shall be determined on the basis of the safety priorities, as well as of past oversight activities. (e)     Where the activity of a person or organisation involves more than one Member State or the Agency, the competent authority responsible for the oversight under (a) may agree to have oversight tasks performed by the competent authority(ies) of the Member State(s) where the activity takes place or by the Agency. Any person or organisation subject to such agreement shall be informed of its existence and of its scope. (f)      The competent authority shall collect and process any information deemed useful for oversight, including for ramp and unannounced inspections. (g)     With regard to the certification and oversight of the organisation’s compliance with point [ORA.GEN.200A](#_DxCrossRefBm894736055), in addition to complying with points (a) to (f), the competent authority shall review any approval granted under point IS.I.OR.200(e) of [this Regulation](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R0203&qid=1686898139280) or point IS.D.OR.200(e) of [Delegated Regulation (EU) 2022/1645](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R1645&qid=1686903054653) following the applicable oversight audit cycle and whenever changes are implemented in the scope of work of the organisation. *[applicable from 22 February 2026 — Implementing Regulation (EU) 2023/203]* ARA.GEN.300 Oversight Regulation (EU) 2023/203 (a) The competent authority shall verify: (1) compliance with the requirements applicable to organisations or persons prior to the issue of an organisation certificate, approval, FSTD qualification certificate or personnel licence, certificate, rating, or attestation, as applicable; (2) continued compliance with the requirements applicable to the persons holding licences, ratings and certificates, the organisations it has certified, the holders of a FSTD qualification and the organisations from which it received a declaration; (3) implementation of appropriate safety measures mandated by the competent authority as defined in [ARA.GEN.135(c) and (d)](#_DxCrossRefBm1199963894). (b) This verification shall: (1) be supported by documentation specifically intended to provide personnel responsible for safety oversight with guidance to perform their functions; (2) provide the persons and organisations concerned with the results of safety oversight activity; (3) be based on audits and inspections, including ramp and unannounced inspections; and (4) provide the competent authority with the evidence needed in case further action is required, including the measures foreseen by [ARA.GEN.350](#_DxCrossRefBm1199963924) and [ARA.GEN.355](#_DxCrossRefBm1199963923). (c) The scope of oversight defined in (a) and (b) shall take into account the results of past oversight activities and the safety priorities. (d) Without prejudice to the competences of the Member States and to their obligations as set out in ARO.RAMP, the scope of the oversight of activities performed in the territory of a Member State by persons or organisations established or residing in another Member State shall be determined on the basis of the safety priorities, as well as of past oversight activities. (e) Where the activity of a person or organisation involves more than one Member State or the Agency, the competent authority responsible for the oversight under (a) may agree to have oversight tasks performed by the competent authority(ies) of the Member State(s) where the activity takes place or by the Agency. Any person or organisation subject to such agreement shall be informed of its existence and of its scope. (f) The competent authority shall collect and process any information deemed useful for oversight, including for ramp and unannounced inspections. (g) With regard to the certification and oversight of the organisation’s compliance with point [ORA.GEN.200A](#_DxCrossRefBm1199963910), in addition to complying with points (a) to (f), the competent authority shall review any approval granted under point IS.I.OR.200(e) of [this Regulation](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R0203&qid=1686898139280) or point IS.D.OR.200(e) of [Delegated Regulation (EU) 2022/1645](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R1645&qid=1686903054653) following the applicable oversight audit cycle and whenever changes are implemented in the scope of work of the organisation. *[applicable from 22 February 2026 — Implementing Regulation (EU) 2023/203]* #### ARA.GEN.300 Oversight *Regulation (EU) 2025/2293* (a) The competent authority shall verify: (1) compliance with the requirements applicable to organisations or persons prior to the issue of an organisation certificate, approval, FSTD qualification certificate or personnel licence, certificate, rating, or attestation, as applicable; (2) continued compliance with the requirements applicable to the persons holding licences, ratings and certificates, the organisations it has certified, the holders of a FSTD qualification and the organisations from which it received a declaration; (3) implementation of appropriate safety measures mandated by the competent authority as defined in [ARA.GEN.135(c) and (d)](#_DxCrossRefBm1743303705). (b) This verification shall: (1) be supported by documentation specifically intended to provide personnel responsible for safety oversight with guidance to perform their functions; (2) provide the persons and organisations concerned with the results of safety oversight activity; (3) be based on audits and inspections, including ramp and unannounced inspections; and (4) provide the competent authority with the evidence needed in case further action is required, including the measures foreseen by [ARA.GEN.350](#_DxCrossRefBm1743303735) and [ARA.GEN.355](#_DxCrossRefBm1743303734). (c) The scope of oversight defined in (a) and (b) shall take into account the results of past oversight activities and the safety priorities. (d) Without prejudice to the competences of the Member States and to their obligations as set out in ARO.RAMP, the scope of the oversight of activities performed in the territory of a Member State by persons or organisations established or residing in another Member State shall be determined on the basis of the safety priorities, as well as of past oversight activities. (e) Where the activity of a person or organisation involves more than one Member State or the Agency, the competent authority responsible for the oversight under (a) may agree to have oversight tasks performed by the competent authority(ies) of the Member State(s) where the activity takes place or by the Agency. Any person or organisation subject to such agreement shall be informed of its existence and of its scope. (f) The competent authority shall collect and process any information deemed useful for oversight, including for ramp and unannounced inspections. (g) With regard to the certification and oversight of the organisation’s compliance with point [ORA.GEN.200A](#_DxCrossRefBm1743303721) of this Annex, in addition to complying with points (a) to (f) of this point, the competent authority shall review any approval granted under point IS.I.OR.200(e) of Annex II to [Commission Implementing Regulation (EU) 2023/203](https://eur-lex.europa.eu/eli/reg_impl/2023/203/oj/eng)[[26]](#_ftn26) following the applicable oversight audit cycle and whenever changes are implemented in the scope of work of the organization. *[applicable from 22 February 2026 — Regulation (EU) 2025/2293 (enter into force date 1 December 2025)]* --- [[26]](#_ftnref26) Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664, and for competent authorities covered by Commission Regulations (EU) No 748/2012, (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340 and (EU) No 139/2014, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 and amending Commission Regulations (EU) No 1178/2011, (EU) No 748/2012, (EU) No 965/2012, (EU) No 139/2014, (EU) No 1321/2014, (EU) 2015/340, and Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 (OJ L 31, 2.2.2023, p. 1, ELI: http://data.europa.eu/eli/reg\_impl/2023/203/oj).