Regulation (EU) 2016/794 of the European Parliament and of the CouncilShow full title

2. The following categories of personal data, including associated administrative data, may be processed on the categories of persons referred to in points (a) and (b) of paragraph 1:

(a)

personal details:

(i)

present and former surnames;

(ii)

present and former forenames;

(iii)

maiden name;

(iv)

father's name (where necessary for the purpose of identification);

(v)

mother's name (where necessary for the purpose of identification):

(vi)

sex;

(vii)

date of birth;

(viii)

place of birth;

(ix)

nationality;

(x)

marital status;

(xi)

alias;

(xii)

nickname;

(xiii)

assumed or false name;

(xiv)

present and former residence and/or domicile;

(b)

physical description:

(i)

physical description;

(ii)

distinguishing features (marks/scars/tattoos etc.);

(c)

means of identification:

(i)

identity documents/driving licence;

(ii)

national identity card/passport numbers;

(iii)

national identification number/social security number, if applicable;

(iv)

visual images and other information on appearance;

(v)

forensic identification information such as fingerprints, DNA profile (established from the non-coding part of DNA), voice profile, blood group, dental information;

(d)

occupation and skills:

(i)

present employment and occupation;

(ii)

former employment and occupation;

(iii)

education (school/university/professional);

(iv)

qualifications;

(v)

skills and other fields of knowledge (language/other);

(e)

economic and financial information:

(i)

financial data (bank accounts and codes, credit cards, etc.);

(ii)

cash assets;

(iii)

shareholdings/other assets;

(iv)

property data;

(v)

links with companies;

(vi)

bank and credit contacts;

(vii)

tax position;

(viii)

other information revealing a person's management of his or her financial affairs;

(f)

behavioural data:

(i)

lifestyle (such as living above means) and routine;

(ii)

movements;

(iii)

places frequented;

(iv)

weapons and other dangerous instruments;

(v)

danger rating;

(vi)

specific risks such as escape probability, use of double agents, connections with law enforcement personnel;

(vii)

criminal-related traits and profiles;

(viii)

drug abuse;

(g)

contacts and associates, including type and nature of the contact or association;

(h)

means of communication used, such as telephone (static/mobile), fax, pager, electronic mail, postal addresses, internet connection(s);

(i)

means of transport used, such as vehicles, boats, aircraft, including information identifying those means of transport (registration numbers);

(j)

information relating to criminal conduct:

(i)

previous convictions;

(ii)

suspected involvement in criminal activities;

(iii)

modi operandi;

(iv)

means which were or may be used to prepare and/or commit crimes;

(v)

membership of criminal groups/organisations and position in the group/organisation;

(vi)

role in the criminal organisation;

(vii)

geographical range of criminal activities;

(viii)

material gathered in the course of an investigation, such as video and photographic images;

(k)

references to other information systems in which information on the person is stored:

(i)

Europol;

(ii)

police/customs agencies;

(iii)

other enforcement agencies;

(iv)

international organisations;

(v)

public entities;

(vi)

private entities;

(l)

information on legal persons associated with the data referred to in points (e) and (j):

(i)

designation of the legal person;

(ii)

location;

(iii)

date and place of establishment;

(iv)

administrative registration number;

(v)

legal form;

(vi)

capital;

(vii)

area of activity;

(viii)

national and international subsidiaries;

(ix)

directors;

(x)

links with banks.