Usage is explicitly limited by the EU law: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021R0953&qid=1623721184859 https://eur-lex.europa.eu/l

Usage is explicitly limited by the EU law: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021R0953&qid=1623721184859 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A... Article 10 Protection of personal data 1. Regulation (EU) 2016/679 shall apply to the processing of personal data carried out when implementing this Regulation. 2. For the purpose of this Regulation, the personal data contained in the certificates issued pursuant to this Regulation shall be processed only for the purpose of accessing and verifying the information included in the certificate in order to facilitate the exercise of the right of free movement within the Union during the COVID-19 pandemic. After the end of period of the application of this Regulation, no further processing shall occur. 3. The personal data included in the certificates referred to in Article 3(1) shall be processed by the competent authorities of the Member State of destination or transit, or by the cross-border passenger transport services operators required by national law to implement certain public health measures during the COVID-19 pandemic, only to verify and confirm the holder’s vaccination, test result or recovery. To that end, the personal data shall be limited to what is strictly necessary. The personal data accessed pursuant to this paragraph shall not be retained.