Regulation (EU) 2016/794 of the European Parliament and of the Council
of 11 May 2016
on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing and repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA and 2009/968/JHA (revoked)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER I

GENERAL PROVISIONS, OBJECTIVES AND TASKS OF EUROPOL

Establishment of the European Union Agency for Law Enforcement Cooperation
Article 1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Definitions
Article 2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Objectives
Article 3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Tasks
Article 4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER II

COOPERATION BETWEEN MEMBER STATES AND EUROPOL

Participation in joint investigation teams
Article 5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Request by Europol for the initiation of a criminal investigation
Article 6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Europol national units
Article 7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Liaison officers
Article 8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER III

ORGANISATION OF EUROPOL

Administrative and management structure of Europol
Article 9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 1

Management Board

Composition of the Management Board
Article 10. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Functions of the Management Board
Article 11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Multiannual programming and annual work programmes
Article 12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chairperson and Deputy Chairperson of the Management Board
Article 13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Meetings of the Management Board
Article 14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Voting rules of the Management Board
Article 15. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 2

Executive Director

Responsibilities of the Executive Director
Article 16. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER IV

PROCESSING OF INFORMATION

Sources of information
Article 17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Purposes of information processing activities
Article 18. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Determination of the purpose of, and restrictions on, the processing of information by Europol
Article 19. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Access by Member States and Europol's staff to information stored by Europol
Article 20. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Access by Eurojust and OLAF to information stored by Europol
Article 21. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Duty to notify Member States
Article 22. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER V

RELATIONS WITH PARTNERS
SECTION 1

Common provisions

Common provisions
Article 23. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 2

Transfer and exchange of personal data

Transfer of personal data to Union bodies
Article 24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transfer of personal data to third countries and international organisations
Article 25. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Exchanges of personal data with private parties
Article 26. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Information from private persons
Article 27. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER VI

DATA PROTECTION SAFEGUARDS

General data protection principles
Article 28. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Assessment of reliability of the source and accuracy of information
Article 29. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Processing of special categories of personal data and of different categories of data subjects
Article 30. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Time-limits for the storage and erasure of personal data
Article 31. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Security of processing
Article 32. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Data protection by design
Article 33. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Notification of a personal data breach to the authorities concerned
Article 34. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Communication of a personal data breach to the data subject
Article 35. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Right of access for the data subject
Article 36. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Right to rectification, erasure and restriction
Article 37. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Responsibility in data protection matters
Article 38. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Prior consultation
Article 39. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Logging and documentation
Article 40. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Data Protection Officer
Article 41. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Supervision by the national supervisory authority
Article 42. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Supervision by the EDPS
Article 43. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cooperation between the EDPS and national supervisory authorities
Article 44. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cooperation Board
Article 45. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Administrative personal data
Article 46. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER VII

REMEDIES AND LIABILITY

Right to lodge a complaint with the EDPS
Article 47. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Right to a judicial remedy against the EDPS
Article 48. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

General provisions on liability and the right to compensation
Article 49. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Liability for incorrect personal data processing and the right to compensation
Article 50. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER VIII

JOINT PARLIAMENTARY SCRUTINY

Joint Parliamentary scrutiny
Article 51. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Access by the European Parliament to information processed by or through Europol
Article 52. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER IX

STAFF

General provisions
Article 53. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Executive Director
Article 54. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Deputy Executive Directors
Article 55. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Seconded national experts
Article 56. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER X

FINANCIAL PROVISIONS

Budget
Article 57. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Establishment of the budget
Article 58. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Implementation of the budget
Article 59. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Presentation of accounts and discharge
Article 60. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Financial rules
Article 61. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER XI

MISCELLANEOUS PROVISIONS

Legal status
Article 62. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Privileges and immunities
Article 63. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Language arrangements
Article 64. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transparency
Article 65. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Combating fraud
Article 66. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Rules on the protection of sensitive non-classified and classified information
Article 67. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Evaluation and review
Article 68. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Administrative inquiries
Article 69. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Headquarters
Article 70. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER XII

TRANSITIONAL PROVISIONS

Legal succession
Article 71. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transitional arrangements concerning the Management Board
Article 72. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transitional arrangements concerning the Executive Director, the Deputy Directors and staff
Article 73. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transitional budgetary provisions
Article 74. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER XIII

FINAL PROVISIONS

Replacement and repeal
Article 75. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Maintenance in force of the internal rules adopted by the Management Board
Article 76. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Entry into force and application
Article 77. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ANNEX I

LIST OF FORMS OF CRIME REFERRED TO IN ARTICLE 3(1)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ANNEX II
A.

Categories of personal data and categories of data subjects whose data may be collected and processed for the purpose of cross-checking as referred to in point (a) of Article 18(2)
1.

Personal data collected and processed for the purpose of cross-checking shall relate to:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.

Data relating to the persons referred to in paragraph 1 may include only the following categories of personal data:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.

In addition to the data referred to in paragraph 2, the following categories of personal data concerning the persons referred to in paragraph 1 may be collected and processed:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
B.

Categories of personal data and categories of data subjects whose data may be collected and processed for the purpose of analyses of a strategic or thematic nature, for the purpose of operational analyses or for the purpose of facilitating the exchange of information as referred to in points (b), (c) and (d) of Article 18(2)
1.

Personal data collected and processed for the purpose of analyses of a strategic or thematic nature, for the purpose of operational analyses or for the purpose of facilitating the exchange of information between Member States, Europol, other Union bodies, third countries and international organisations shall relate to:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.

The following categories of personal data, including associated administrative data, may be processed on the categories of persons referred to in points (a) and (b) of paragraph 1:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.

‘Contacts and associates’, as referred to in point (e) of paragraph 1, are persons through whom there is sufficient reason to believe that information which relates to the persons referred to in points (a) and (b) of paragraph 1 and which is relevant for the analysis can be gained, provided they are not included in one of the categories of persons referred to in points (a), (b), (c), (d) and (f) of paragraph 1. ‘Contacts’ are those persons who have a sporadic contact with the persons referred to in points (a) and (b) of paragraph 1. ‘Associates’ are those persons who have a regular contact with the persons referred to in points (a) and (b) of paragraph 1.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.

With regard to a person who, as referred to in point (d) of paragraph 1, has been the victim of one of the offences under consideration or who, on the basis of certain facts there is reason to believe could be the victim of such an offence, the data referred to in point (a) to point (c)(iii) of paragraph 2 as well as the following categories of data may be stored:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.

With regard to persons who, as referred to in point (c) of paragraph 1, might be called on to testify in investigations in connection with the offences under consideration or in subsequent criminal proceedings, data referred to in point (a) to point (c)(iii) of paragraph 2 as well as categories of data complying with the following criteria may be stored:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.

With regard to persons who, as referred to in point (f) of paragraph 1, can provide information on the criminal offences under consideration, data referred to in point (a) to point (c)(iii) of paragraph 2 as well as categories of data complying with the following criteria may be stored:
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7.

If, at any time during the course of an analysis, it becomes clear on the basis of serious and corroborating indications that a person should be included in a category of persons, as defined in this Annex, other than the category in which that person was initially placed, Europol may process only the data on that person which is permitted under that new category, and all other data shall be deleted.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Regulation revoked (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 37 (with reg. 40) (as amended by S.I. 2020/1408, regs. 1, 14); 2020 c. 1, Sch. 5 para. 1(1)