Regulation (EU) 2023/203
(a) The competent authority shall verify:
(1) compliance with the requirements applicable to organisations or persons prior to the issue of an organisation certificate, approval, FSTD qualification certificate or personnel licence, certificate, rating, or attestation, as applicable;
(2) continued compliance with the requirements applicable to the persons holding licences, ratings and certificates, the organisations it has certified, the holders of a FSTD qualification and the organisations from which it received a declaration;
(3) implementation of appropriate safety measures mandated by the competent authority as defined in ARA.GEN.135(c) and (d).
(b) This verification shall:
(1) be supported by documentation specifically intended to provide personnel responsible for safety oversight with guidance to perform their functions;
(2) provide the persons and organisations concerned with the results of safety oversight activity;
(3) be based on audits and inspections, including ramp and unannounced inspections; and
(4) provide the competent authority with the evidence needed in case further action is required, including the measures foreseen by ARA.GEN.350 and ARA.GEN.355.
(c) The scope of oversight defined in (a) and (b) shall take into account the results of past oversight activities and the safety priorities.
(d) Without prejudice to the competences of the Member States and to their obligations as set out in ARO.RAMP, the scope of the oversight of activities performed in the territory of a Member State by persons or organisations established or residing in another Member State shall be determined on the basis of the safety priorities, as well as of past oversight activities.
(e) Where the activity of a person or organisation involves more than one Member State or the Agency, the competent authority responsible for the oversight under (a) may agree to have oversight tasks performed by the competent authority(ies) of the Member State(s) where the activity takes place or by the Agency. Any person or organisation subject to such agreement shall be informed of its existence and of its scope.
(f) The competent authority shall collect and process any information deemed useful for oversight, including for ramp and unannounced inspections.
(g) With regard to the certification and oversight of the
organisation’s compliance with point ORA.GEN.200A, in addition to complying with points (a) to (f), the
competent authority shall review any approval granted under point
IS.I.OR.200(e) of this
Regulation or point IS.D.OR.200(e) of Delegated
Regulation (EU) 2022/1645 following the
applicable oversight audit cycle and whenever changes are implemented in the
scope of work of the organisation.
[applicable from 22 February
2026 — Implementing Regulation (EU) 2023/203]