Regulation (EU) 2016/794 of the European Parliament and of the Council
of 11 May 2016
on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing and repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA and 2009/968/JHA (revoked)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Regulation revoked (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 37 (with reg. 40) (as amended by S.I. 2020/1408, regs. 1, 14); 2020 c. 1, Sch. 5 para. 1(1)

CHAPTER I GENERAL PROVISIONS, OBJECTIVES AND TASKS OF EUROPOL

Article 1 Establishment of the European Union Agency for Law Enforcement Cooperation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 2 Definitions
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 3 Objectives
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 4 Tasks
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER II COOPERATION BETWEEN MEMBER STATES AND EUROPOL

Article 5 Participation in joint investigation teams
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 6 Request by Europol for the initiation of a criminal investigation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 7 Europol national units
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 8 Liaison officers
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER III ORGANISATION OF EUROPOL

Article 9 Administrative and management structure of Europol
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SECTION 1 Management Board

Article 10 Composition of the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 11 Functions of the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 12 Multiannual programming and annual work programmes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 13 Chairperson and Deputy Chairperson of the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 14 Meetings of the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 15 Voting rules of the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SECTION 2 Executive Director

Article 16 Responsibilities of the Executive Director
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER IV PROCESSING OF INFORMATION

Article 17 Sources of information
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 18 Purposes of information processing activities
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 19 Determination of the purpose of, and restrictions on, the processing of information by Europol
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 20 Access by Member States and Europol's staff to information stored by Europol
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 21 Access by Eurojust and OLAF to information stored by Europol
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 22 Duty to notify Member States
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER V RELATIONS WITH PARTNERS

SECTION 1 Common provisions

Article 23 Common provisions
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SECTION 2 Transfer and exchange of personal data

Article 24 Transfer of personal data to Union bodies
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 25 Transfer of personal data to third countries and international organisations
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 26 Exchanges of personal data with private parties
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 27 Information from private persons
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER VI DATA PROTECTION SAFEGUARDS

Article 28 General data protection principles
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 29 Assessment of reliability of the source and accuracy of information
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 30 Processing of special categories of personal data and of different categories of data subjects
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 31 Time-limits for the storage and erasure of personal data
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 32 Security of processing
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 33 Data protection by design
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 34 Notification of a personal data breach to the authorities concerned
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 35 Communication of a personal data breach to the data subject
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 36 Right of access for the data subject
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 37 Right to rectification, erasure and restriction
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 38 Responsibility in data protection matters
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 39 Prior consultation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 40 Logging and documentation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 41 Data Protection Officer
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 42 Supervision by the national supervisory authority
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 43 Supervision by the EDPS
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 44 Cooperation between the EDPS and national supervisory authorities
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 45 Cooperation Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 46 Administrative personal data
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER VII REMEDIES AND LIABILITY

Article 47 Right to lodge a complaint with the EDPS
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 48 Right to a judicial remedy against the EDPS
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 49 General provisions on liability and the right to compensation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 50 Liability for incorrect personal data processing and the right to compensation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER VIII JOINT PARLIAMENTARY SCRUTINY

Article 51 Joint Parliamentary scrutiny
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 52 Access by the European Parliament to information processed by or through Europol
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER IX STAFF

Article 53 General provisions
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 54 Executive Director
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 55 Deputy Executive Directors
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 56 Seconded national experts
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER X FINANCIAL PROVISIONS

Article 57 Budget
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 58 Establishment of the budget
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 59 Implementation of the budget
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 60 Presentation of accounts and discharge
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 61 Financial rules
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER XI MISCELLANEOUS PROVISIONS

Article 62 Legal status
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 63 Privileges and immunities
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 64 Language arrangements
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 65 Transparency
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 66 Combating fraud
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 67 Rules on the protection of sensitive non-classified and classified information
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 68 Evaluation and review
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 69 Administrative inquiries
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 70 Headquarters
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER XII TRANSITIONAL PROVISIONS

Article 71 Legal succession
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 72 Transitional arrangements concerning the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 73 Transitional arrangements concerning the Executive Director, the Deputy Directors and staff
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 74 Transitional budgetary provisions
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CHAPTER XIII FINAL PROVISIONS

Article 75 Replacement and repeal
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 76 Maintenance in force of the internal rules adopted by the Management Board
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 77 Entry into force and application
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

ANNEX I LIST OF FORMS OF CRIME REFERRED TO IN ARTICLE 3(1)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ANNEX II

A. Categories of personal data and categories of data subjects whose data may be collected and processed for the purpose of cross-checking as referred to in point (a) of Article 18(2)

1. Personal data collected and processed for the purpose of cross-checking shall relate to:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

2. Data relating to the persons referred to in paragraph 1 may include only the following categories of personal data:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3. In addition to the data referred to in paragraph 2, the following categories of personal data concerning the persons referred to in paragraph 1 may be collected and processed:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

B. Categories of personal data and categories of data subjects whose data may be collected and processed for the purpose of analyses of a strategic or thematic nature, for the purpose of operational analyses or for the purpose of facilitating the exchange of information as referred to in points (b), (c) and (d) of Article 18(2)

1. Personal data collected and processed for the purpose of analyses of a strategic or thematic nature, for the purpose of operational analyses or for the purpose of facilitating the exchange of information between Member States, Europol, other Union bodies, third countries and international organisations shall relate to:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

2. The following categories of personal data, including associated administrative data, may be processed on the categories of persons referred to in points (a) and (b) of paragraph 1:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3. ‘Contacts and associates’, as referred to in point (e) of paragraph 1, are persons through whom there is sufficient reason to believe that information which relates to the persons referred to in points (a) and (b) of paragraph 1 and which is relevant for the analysis can be gained, provided they are not included in one of the categories of persons referred to in points (a), (b), (c), (d) and (f) of paragraph 1. ‘Contacts’ are those persons who have a sporadic contact with the persons referred to in points (a) and (b) of paragraph 1. ‘Associates’ are those persons who have a regular contact with the persons referred to in points (a) and (b) of paragraph 1.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

4. With regard to a person who, as referred to in point (d) of paragraph 1, has been the victim of one of the offences under consideration or who, on the basis of certain facts there is reason to believe could be the victim of such an offence, the data referred to in point (a) to point (c)(iii) of paragraph 2 as well as the following categories of data may be stored:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5. With regard to persons who, as referred to in point (c) of paragraph 1, might be called on to testify in investigations in connection with the offences under consideration or in subsequent criminal proceedings, data referred to in point (a) to point (c)(iii) of paragraph 2 as well as categories of data complying with the following criteria may be stored:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

6. With regard to persons who, as referred to in point (f) of paragraph 1, can provide information on the criminal offences under consideration, data referred to in point (a) to point (c)(iii) of paragraph 2 as well as categories of data complying with the following criteria may be stored:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

7. If, at any time during the course of an analysis, it becomes clear on the basis of serious and corroborating indications that a person should be included in a category of persons, as defined in this Annex, other than the category in which that person was initially placed, Europol may process only the data on that person which is permitted under that new category, and all other data shall be deleted.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .