23rd Oct 2016

EU data chief urges limits on joint police powers

  • Hustinx will oversee data rule compliance at the EU police agency (Photo: Asteris Masouras)

The EU's data privacy chief wants tough new limits imposed on EU police agency Europol.

"A strong framework of data protection is important not only for those under suspicion or involved in an investigation, but also contributes to the success of police and judicial co-operation," Peter Hustinx, the European Data Protection Supervisor (EDPS), said in a statement on Monday (3 June).

Dear EUobserver reader

Subscribe now for unrestricted access to EUobserver.

Sign up for 30 days' free trial, no obligation. Full subscription only 15 € / month or 150 € / year.

  1. Unlimited access on desktop and mobile
  2. All premium articles, analysis, commentary and investigations
  3. EUobserver archives

EUobserver is the only independent news media covering EU affairs in Brussels and all 28 member states.

♡ We value your support.

If you already have an account click here to login.

Hustinx says Europol should only collect personal information for specific investigations.

He says the data should not be used for other purposes aside from the reasons it was collected in the first place.

The Hague-based police agency co-ordinates national forces' investigations by pooling data sets from different authorities and then sharing them with the relevant national investigators.

In March, the European Commission put forward proposals to boost Europol's powers.

But Hustinx voiced concerns over some of the proposals, such as cross-referencing information stored in different databases to check if someone is suspected of more than one crime.

“The increased flexibility to cross check information should be balanced, for example, by specifying the purpose and in general by keeping a high level of data protection,” he said.

The police agency also has operational agreements with the US, Australia, Canada and Interpol and around a dozen other non-EU countries.

It is now in the process of concluding bilateral agreements with Brazil, Mexico, Georgia, and the United Arab Emirates.

Under the commission’s proposal, the EDPS' role at Europol will also be upgraded to ensure the agency adheres to EU rules on data protection.

The commission in a memo in December called upon member states to share more national data with the police agency as it attempts to better co-ordinate crime stopping investigations.

Existing arrangements, it noted, did not warrant new EU-level law enforcement databases or other types of EU information exchange.

Some of those arrangements include the now two-year-behind-schedule "Prum" decision, which mandates the networking of national fingerprint, DNA and vehicle registration databases.

Hustinx said there is a logical emphasis on information exchange in the absence of a European police force, but warned it must not come at the expense of fundamental rights on privacy.

Meanwhile, EU officials remain silent over concerns that US law enforcement will be able to snoop on EU citizens' data stored on US Cloud providers such as Amazon or Google.

One official told this website on Monday that EU interior ministers have yet to discuss the issue in the context of the draft data protection regulation currently under legislative review.

New provisions in the heavily-lobbied data bill include a line on binding corporate rules for companies that process data on the Cloud.

The rules outline standards and practices in a corporate entity and its subsidiaries on how to handle personal data transmitted into and from countries with a sub-par level of data protection rules.

The regulation would require Cloud providers to hire a private-sector audit company to certify the generic Cloud system for security.

Industry has welcomed the ideas as a means to build trust in the "free flow."

But a handful of privacy specialists say it is riddled with loopholes that make it impossible to enforce.

A European Parliament report out last year says it will enable US authorities by way of the amended Foreign Intelligence Amendments Act (FISA) to conduct political surveillance on foreigners' data accessible in US Cloud providers.

US authorities have denied the claims.

The commission, for its part, has yet to issue an official comment to or take a position.

“Reconfirming that we still have no comment on this,” EU spokeswoman Mina Andreeva told this website by email in mid-May.

News in Brief

  1. Canada and Wallonia end talks without Ceta deal
  2. Juncker hopes for Canada accord in 'next few days'
  3. Romania drops opposition to Ceta
  4. Difficulties remain on Ceta deal, says Walloon leader
  5. Brexit could lead to 'some civil unrest' in Northern Ireland
  6. ECB holds rates and continues quantitive easing programme
  7. Support for Danish People's Party drops, poll
  8. Spain's highest court overturns Catalan ban on bullfighting

Stakeholders' Highlights

  1. EFADraft Bill for a 2nd Scottish Independence Referendum
  2. UNICEFCalls on European Council to Address Plight of Refugee and Migrant Children
  3. ECTAJoin us on 9-10 November in Brussels and Discover the new EU Digital Landscape
  4. Access NowCan you Hear me now? Verizon’s Opportunity to Stand for Global Users
  5. Belgrade Security ForumMeaningful Dialogue Missing Not Only in the Balkans, but Throughout Europe
  6. EASPDJoin the Trip! 20 Years on the Road. Conference & Photo Exhibition on 19-21 October
  7. EuropecheEU Fishing Sector Celebrates Sustainably Sourced Seafood in EU Parliament
  8. World VisionWomen and Girls Urge EU Leadership to Help end Gender-based Violence
  9. Dialogue PlatformIs Jihadism Blind Spot of Western Intellectuals ? Wednesday 26 October
  10. Belgrade Security ForumGet the Latest News and Updates on the Belgrade Security Forum @BelSecForum
  11. Crowdsourcing Week EuropeMaster Crowdsourcing, Crowdfunding and Innovation! Conference 21 November - 10% Discount Code CSWEU16
  12. EJCEU Parliament's Roadmap for Relations with Iran a Massive Missed Opportunity