The international exchange of personal data in law enforcement and criminal justice

On 2 February 2021, the European Data Protection Supervisor (EDPB) adopted Recommendations on the adequacy referential under the Law Enforcement Directive (LED). The aim of this document is to provide a list of elements to take into account when assessing the adequacy of the protection of personal data in non-EU countries in the field of law enforcement and criminal justice. A similar adequacy referential under the GDPR was already adopted by the EDPB in 2018.

Building on the legal provisions of the LED and the case law of the Court of Justice of the EU, the document lays down the EU data protection standards for transfers in police cooperation and judicial cooperation in criminal matters. The adoption of the LED adequacy referential is timely, as it will provide practical guidance for the Commission when assessing the adequacy of the UK.  

The EDPS played an active role in the preparation and adoption of the document, especially because the Commission’s adequacy decisions under Article 36 of the LED on the international exchange of personal data also serve as a legal basis for transfers by EU agencies, such as Europol, the law enforcement agency; Eurojust, the agency for criminal justice cooperation and EPPO, the independent body competent to fight crimes against the EU’s budget.

Read the EDPB Recommendations on the adequacy referential under the Law Enforcement Directive (LED)

(edps.europa.eu/ photo: pixabay)

Comments

Editorial

Editorial
George Kazoleas, Lawyer

Top Stories

Ombudsman inquiry on Commission President’s text messages is a wake-up call for EU

Gigantic fine for unfair practices imposed on Booking.com by the Competition Authority of Hungary

The rules of UEFA on ‘homegrown players’ could be contrary to EU law (ECJ)

The Lawyer's right to refuse the defense of an accused person for ethical reasons

Politically Exposed Persons (PEPs): What and Why?

Airbnb is not required to hold an estate agent’s professional licence as it did not notify the Commission of that requirement in accordance with the Directive on electronic commerce

First judgment of the ECHR: Lawless v. Ireland