74 Amendments of Michal ŠIMEČKA related to 2020/0349(COD)
Amendment 125 #
Proposal for a regulation
Recital 2
Recital 2
(2) Europe faces a security landscape in flux, with evolving and increasingly complex security threats. Criminals and terrorists exploit the advantages that the digital transformation and new technologies bring about, including the inter-connectivity and blurring of the boundaries between the physical and digital world. The COVID-19 crisis has added to this, as criminals have quickly seized opportunities to exploit the crisis by adapting their modes of operation or developing new criminal activities including by leveraging technology- enabled tools for multiplying and expanding the range and breadth of the criminal activities they engage in. Terrorism remains a significant threat to the freedom and way of life of the Union and its citizens.
Amendment 142 #
Proposal for a regulation
Recital 8 a (new)
Recital 8 a (new)
(8 a) Europol has an important role to play in supporting Member States to fight serious crime and terrorism through its expertise and analysis capabilities. To ensure better cooperation between Member States and Interpol in accordance with Union and international laws, Europol should actively monitor and evaluate red alerts issued by third countries in Interpol and notify Member States, the EEAS, the Commission, and the European Parliament when there is reasonable suspicion that the alert was issued in violation of Article 3 of the Interpol constitution.
Amendment 151 #
Proposal for a regulation
Recital 11
Recital 11
(11) In order to help EU funding for security research to develop its full potential and address the needs of law enforcement, Europol should assist the Commission and Member States in identifying key research themes, drawing up and implementing the Union framework programmes for research and innovation that are relevant to Europol’s objectives. When Europol assists the Commission in identifying key research themes, drawing up and implementing a Union framework programme, it should not receive funding from that programme in accordance with the conflict of interest principle.
Amendment 155 #
Proposal for a regulation
Recital 12
Recital 12
(12) It is possible for the Union and the Members States to adopt restrictive measures relating to foreign direct investment on the grounds of security or public order. To that end, Regulation (EU) 2019/452 of the European Parliament and of the Council57 establishes a framework for the screening of foreign direct investments into the Union that provides Member States and the Commission with the means to address risks to security or public order in a comprehensive manner. As part of the assessment of expected implications for security or public order, Europol should support the screening of specific cases of foreign direct investments into the Union that concern undertakings providing technologies used or being developed by Europol or by Member States for the prevention and investigation of crimes or critical technologies that could be used to facilitate terrorism. _________________ 57Regulation (EU) 2019/452 of the European Parliament and of the Council of 19 March 2019 establishing a framework for the screening of foreign direct investments into the Union (OJ L 79I , 21.3.2019, p. 1–14).
Amendment 160 #
Proposal for a regulation
Recital 14
Recital 14
(14) One of Europol’s objectives is to support and strengthen action by the competent authorities of the Member States and their mutual cooperation in preventing and combatting forms of crime which affect a common interest covered by a Union policy. To strengthen that support, Europol should be able to initiate, conduct, or coordinate or request the competent authorities of a Member State to initiate, conduct or coordinate a criminal investigation of a crime, which affects a common interest covered by a Union policy, even where the crime concerned is not of a cross-border nature. Europol should inform Eurojust of such requests.
Amendment 166 #
Proposal for a regulation
Recital 16
Recital 16
(16) To ensure that processing of personal data by Europol is limited to the categories of data subjects whose data may be processed under this Regulation, Europol should be able to verify if personal data received in the context of preventing and countering crimes falling within the scope of Europol’s objectives corresponds to one of those categories of data subjects. To that end, Europol should be able to carry out a pre-analysis of personal data received with the sole purpose of determining whether such data falls into those categories of data subjects. To this end, Europol should be able to filter the data by checking it against data already held by Europol, without further analysing the data for additional leads at this stage. Such pre-analysis should take place prior to Europol’s data processing for cross-checking, strategic analysis, operational analysis or exchange of information. If the pre-analysis indicates that personal data does not fall into the categories of data subjects whose data may be processed under this Regulation, Europol should delete that data.
Amendment 183 #
Proposal for a regulation
Recital 24
Recital 24
(24) Serious crime and terrorism often have links beyond the territory of the Union. Europol can exchange personal data with third countries while safeguarding the protection of privacy and fundamental rights and freedoms of the data subjects. To reinforce cooperation with third countries in preventing and countering crimes falling within the scope of Europol’s objectives, the Executive Director of Europol should be allowed to authorise categories of transfers of personal data to third countries in specific situations and, on a case-by-case basis, and after consulting with the Commission, where such a group of transfers related to a specific situation are strictly necessary and meet all the requirements of this Regulation.
Amendment 196 #
Proposal for a regulation
Recital 28
Recital 28
(28) To ensure that private parties have a point of contact at Union level to lawfully share multi-jurisdictional data sets or data sets that could not be easily attributed so far to one or several specific jurisdictions, Europol should be able to receive personal data directly from private parties. Private parties legally obligated to remove illegal content should also be able to send Europol and Europol should be able to receive reports and non-personal data on moderated content that can reasonably be assumed to be linked to the criminal activities within the remit of Europol.
Amendment 225 #
Proposal for a regulation
Recital 39
Recital 39
(39) Europol should inform the European Data Protection Supervisor prior to the launch of its research and innovation projects that involve the processing of personal data. For each project, Europol should carry out, prior to the processing, an assessment of the impact of the envisaged processing operations on the protection of personal data and all other fundamental rights, including of any bias in the outcome. This should include an assessment of the appropriateness of the personal data to be processed for the specific purpose of the project. Such an assessment would facilitate the supervisory role of the European Data Protection Supervisor, including the exercise of its corrective powers under this Regulation which might also lead to a ban on processing. The development of new tools by Europol should be without prejudice to the legal basis, including grounds for processing the personal data concerned, that would subsequently be required for their deployment at Union or national level. In those instances where closer cooperation between the EDPS and Europol is required for the development of innovative law enforcement tools in full respect of data protection acquis, the EDPS should establish regulatory sandboxes for the joint development of such tools. Such regulatory sandboxes should provide a controlled environment that facilitates the development, testing and validation of innovative law enforcement tools by Europol under the guidance of the EDPS, with a view to ensuring compliance with data protection obligations.
Amendment 228 #
Proposal for a regulation
Recital 39 a (new)
Recital 39 a (new)
(39 a) Expanding the mandate of Europol and the scope of its data processing activities will require the EDPS to dedicate additional financial and human resources to exercise its supervisory role in regards Europol. EDPS resources, financial allocation, and human resources at skill levels commensurate with the complexity of data processing undertaken by Europol should be adjusted accordingly and proportionally to the increased responsibilities.
Amendment 231 #
Proposal for a regulation
Recital 40
Recital 40
(40) Providing Europol with additional tools and capabilities requires reinforcing the democratic oversight and accountability of Europol. Joint parliamentary scrutiny constitutes an important element of political monitoring of Europol's activities. To enable effective political monitoring of the way Europol applies additional tools and capabilities, Europol should provide the Joint Parliamentary Scrutiny Group with detailed annual information on the usedevelopment, deployment, use, and effectiveness of these tools and capabilities and the result thereof.
Amendment 254 #
Proposal for a regulation
Article 1 – paragraph 1 – point 2 – point a – point iv – introductory part
Article 1 – paragraph 1 – point 2 – point a – point iv – introductory part
Regulation (EU) 2016/794
Article 4 – paragraph 1 – point m – point iv
Article 4 – paragraph 1 – point m – point iv
(iv) the following points (q) to (rw) are added:
Amendment 260 #
Proposal for a regulation
Article 1 – paragraph 1 – point 2 – point a – point iv
Article 1 – paragraph 1 – point 2 – point a – point iv
Regulation (EU) 2016/794
Article 4 – paragraph 1 – point r
Article 4 – paragraph 1 – point r
(r) enter data into the Schengen Information System, in accordance with Regulation (EU) 2018/1862 of the European Parliament and of the Council*, following consultation with the Member States in accordance with Article 7 of this Regulation, and under authorisation by the Europol Executive Director, on the suspected involvement of a third country national in an offence in respect of which Europol is competent and of which it is aware on the basis of information received from third countries referred to in Article 25(1) of this regulation or international organisations within the meaning of Article 17(1)(b);
Amendment 269 #
Proposal for a regulation
Article 1 – paragraph 1 – point 2 – point a – point iv
Article 1 – paragraph 1 – point 2 – point a – point iv
Regulation (EU) 2016/794
Article 4 – paragraph 1 – point t a (new)
Article 4 – paragraph 1 – point t a (new)
(t a) where appropriate and without prejudice to the provisions of this Regulation, cooperate with the JRC on defining and conceptualizing research and innovation activities regarding matters covered by this Regulation.
Amendment 273 #
Proposal for a regulation
Article 1 – paragraph 1 – point 2 – point a – point iv
Article 1 – paragraph 1 – point 2 – point a – point iv
Regulation (EU) 2016/794
Article 4 – paragraph 1 – point u a (new)
Article 4 – paragraph 1 – point u a (new)
(u a) monitor and evaluate red alerts issued by third countries in Interpol and notify Member States, the EEAS, and the Commission when there is reasonable suspicion that the alert was issued in violation of Article 3 of the Interpol constitution.
Amendment 282 #
Proposal for a regulation
Article 1 – paragraph 1 – point 2 – point d
Article 1 – paragraph 1 – point 2 – point d
Regulation (EU) 2016/794
Article 4 – paragraph 4a
Article 4 – paragraph 4a
4a. Europol shall assist the Commission and the Member States in identifying key research themes, drawing up and implementing the Union framework programmes for research and innovation activities that are relevant to achieve the objectives set out in Article 3. When Europol actively assists the Commission in identifying key research themesthe design, drawing up and, or implementingation of a Union framework programme, the Agency shall not receive funding from that programme.
Amendment 286 #
4b. Europol shall support the screening of specific cases of foreign direct investments into the Union under Regulation (EU) 2019/452 of the European Parliament and of the Council* that concern undertakings providing technologies used or being developed by Europol or by Member States for the prevention and investigation of crimes covered by Article 3 or critical technologies that could be used to facilitate terrorism on the expected implications for security.
Amendment 295 #
Proposal for a regulation
Article 1 – paragraph 1 – point 3
Article 1 – paragraph 1 – point 3
Regulation (EU) 2016/794
Article 6 – paragraph 1
Article 6 – paragraph 1
1. In specific cases where Europol considers that a criminal investigation should be initiated into a crime falling within the scope of its objectives, it shall request the competent authorities of the Member State or Member States concerned via the national units to initiate, conduct or coordinate such a criminal investigation.
Amendment 296 #
Proposal for a regulation
Article 1 – paragraph 1 – point 3
Article 1 – paragraph 1 – point 3
Regulation (EU) 2016/794
Article 6 – paragraph 1
Article 6 – paragraph 1
1. In specific cases where Europol considers that a criminal investigation should be initiated into a crime falling within the scope of its objectives, it shall initiate, conduct, or coordinate or request the competent authorities of the Member State or Member States concerned via the national units to initiate, conduct or coordinate such a criminal investigation.
Amendment 297 #
Proposal for a regulation
Article 1 – paragraph 1 – point 3
Article 1 – paragraph 1 – point 3
Regulation (EU) 2016/794
Article 6 – paragraph 2
Article 6 – paragraph 2
1 a. Paragraph 2 shall be deleted: 2. The national units shall inform Europol without delay of the decision of the competent authorities of the Member States concerning any request made pursuant to paragraph 1.
Amendment 298 #
Proposal for a regulation
Article 1 – paragraph 1 – point 3
Article 1 – paragraph 1 – point 3
Regulation (EU) 2016/794
Article 6 – paragraph 3
Article 6 – paragraph 3
Amendment 314 #
Proposal for a regulation
Article 1 – paragraph 1 – point 5 – point a – point ii
Article 1 – paragraph 1 – point 5 – point a – point ii
Regulation (EU) 2016/794
Article 18 – paragraph 2e
Article 18 – paragraph 2e
(e) research and innovation regarding matters covered by this Regulation for the development, training, testing and validation of algorithms for the development of tools specifically and concretely related to the tasks of Europol;
Amendment 329 #
Proposal for a regulation
Article 1 – paragraph 1 – point 5 – point d
Article 1 – paragraph 1 – point 5 – point d
Regulation (EU) 2016/794
Article 18 – paragraph 5a
Article 18 – paragraph 5a
5a. Prior to the processing of data under paragraph 2 of this Article, Europol may exceptionally and temporarily process personal data received pursuant to Article 17(1) and (2) for the purpose of determining whether such data comply with the requirements of paragraph 5 of this Article, including by checking the data against all data that Europol already processes in accordance with paragraph 5.
Amendment 330 #
Proposal for a regulation
Article 1 – paragraph 1 – point 5 – point d
Article 1 – paragraph 1 – point 5 – point d
Regulation (EU) 2016/794
Article 18 – paragraph 5a
Article 18 – paragraph 5a
5a. Prior to the processing of data under paragraph 2 of this Article, Europol may temporarily process personal data received pursuant to Article 17(1) and (2) exclusively for the purpose of determining whether such data comply with the requirements of paragraph 5 of this Article, including by checking the data against all data that Europol already processes in accordance with paragraph 5.
Amendment 335 #
Proposal for a regulation
Article 1 – paragraph 1 – point 5 – point d
Article 1 – paragraph 1 – point 5 – point d
Regulation (EU) 2016/794
Article 18 – paragraph 6
Article 18 – paragraph 6
Europol may only process personal data pursuant to this paragraph for a maximum period of one year, or in duly justified cases for a longer period with the prior authorisation of the EDPS, where strictly necessary and proportionate for the purpose of this Article. Where the result of the processing indicates that personal data do not comply with the requirements of paragraph 5 of this Article, Europol shall immediately delete that data and inform the provider of the data accordingly.
Amendment 340 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 1
Article 18a – paragraph 1
1. Where objectively necessary for the support of a specific ongoing criminal investigation, Europol may exceptionally process personal data outside the categories of data subjects listed in Annex II where:
Amendment 342 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18 a – paragraph 1 – point a
Article 18 a – paragraph 1 – point a
(a) a Member State or the EPPO has established that it is strictly necessary and proportionate to provides an investigative case file to Europol pursuant to point (a) of Article 17(1) and in full compliance with national and Union law for the purpose of operational analysis in support of that specific ongoing criminal investigation within the mandate of Europol pursuant to point (c) of Article 18(2); and
Amendment 344 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 1 – point b
Article 18a – paragraph 1 – point b
(b) Europol hassesses verified that it is objective necessary and proportionate and has assessed that it is not possible to carry out the operational analysis of the ongoing investigative case file without processing personal data that does not comply with the requirements of Article 18(5). This assessment shall be recorded. in its entirety and shall be sent to the EDPS.
Amendment 348 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18 – paragraph 1 – point b a (new)
Article 18 – paragraph 1 – point b a (new)
(b a) a Member State or a Union body requests an analysis of a strategic or thematic nature within the mandate of Europol pursuant to point(b) of Article 18(2).
Amendment 351 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 2 – subparagraph 1
Article 18a – paragraph 2 – subparagraph 1
2. Europol may process personal data contained in an investigative case for as long as it supports the on-going specific criminal investigation for which the investigative case file was provided by a Member State or the EPPO in accordance with paragraph 1, and only for the purpose of supporting that investigation and where the scale, complexity, type or importance of the specific investigation requires to do so.
Amendment 353 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 2 – subparagraph 2
Article 18a – paragraph 2 – subparagraph 2
The Management Board, acting on a proposal from the Executive Director and after consultingation and prior authorisation of the EDPS, shall further specify the conditions and thresholds relating to the processing of such data, based on scale, complexity, type or importance of investigations.
Amendment 357 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 3
Article 18a – paragraph 3
The Management Board, acting on a proposal from the Executive Director and after consultingation and prior authorisation of the EDPS, shall further specify the conditions relating to the processing of such data. Such personal data shall be functionally separated from other data and may only be accessed where necessarystrictly necessary and proportionate for the specific criminal investigation for which they were provided and for the purpose of ensuring the veracity, reliability and traceability of the criminal intelligence process.
Amendment 362 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 4
Article 18a – paragraph 4
4. Paragraphs 1 to 3 shall also apply where Europol receives personal data from a third country with which there is an agreement concluded either on the basis of Article 23 of Decision 2009/371/JHA in accordance with point (c) of Article 25(1) of this Regulation or on the basis of Article 218 TFEU in accordance with point (b) of Article 25(1) of this Regulation, or which is the subject of an adequacy decision as referred to in point (a) of Article 25(1) of this Regulation, and such third country provides an investigative case file to Europol for operational analysis that supports the specific criminal investigation in a Member State or in Member States that Europol supports. Where a third country provides an investigative case file to Europol, the EDPS shall be informed. Europol shall verify that the amount of personal data is not manifestly disproportionate in relation to the specific investigation in a Member State that Europol supports, and that there are no objective elements indicating that the case file has been obtained by the third country in manifest violation of fundamental rights. Where Europol, or the EDPS, reaches the conclusion that there are preliminary indications that such data is disproportionate or collected in violation of fundamental rights, Europol shall not process it and shall delete the data. Data processed pursuant to this paragraph may only be accessed by Europol where necessary for the support of the specific criminal investigation in a Member State or in Member States. It shall be shared only within the Union.;
Amendment 363 #
Proposal for a regulation
Article 1 – paragraph 1 – point 6
Article 1 – paragraph 1 – point 6
Regulation (EU) 2016/794
Article 18a – paragraph 4 a new
Article 18a – paragraph 4 a new
4 a. All processing of personal data under this Article shall in all cases be compliant with the general principles and obligations laid down in Chapter IX of Regulation 2018/1725.
Amendment 364 #
Proposal for a regulation
Article 1 – paragraph 1 – point 7 – point a
Article 1 – paragraph 1 – point 7 – point a
Regulation (EU) 2016/794
Article 20 – paragraph 2a
Article 20 – paragraph 2a
2a. In the framework of conducting dedicated operational analysis projects as referred to in Article 18(3), Member States may determine information to be made directly accessible by Europol to selected other Member States for the purpose of enhanced collaboration in specific investigations, without prejudice to any restrictions of Article 19(2). Any processing of personal data by Member States in joint operational analysis shall take place in accordance with the rules and safeguards set out in this Regulation;
Amendment 374 #
Proposal for a regulation
Article 1 – paragraph 1 – point 9 a (new)
Article 1 – paragraph 1 – point 9 a (new)
Regulation (EU) 2016/794
Article 23 – paragraph 7
Article 23 – paragraph 7
(9 a) In Article 23, paragraph 7 is replaced by: 7. Onward transfers of personal data held by Europol by Member States, Union bodies, third countries, international organisations and private parties shall be prohibited, unless Europol has given its prior explicit authorisation.
Amendment 375 #
Proposal for a regulation
Article 1 – paragraph 1 – point 10
Article 1 – paragraph 1 – point 10
Regulation (EU) 2016/794
Article 24 – paragraph 1
Article 24 – paragraph 1
1. Subject to any further restrictions pursuant to this Regulation, in particular pursuant to Article 19(2) and (3) and without prejudice to Article 67, Europol shall only transmit operational personal data to another Union institution, body, office or agency if the data are necessary and proportionate for the legitimate performance of tasks of the other Union institution, body, office or agency, in accordance with Union law to achieve the purposes set out in the legal act establishing the Union body, office or agency.
Amendment 382 #
Proposal for a regulation
Article 1 – paragraph 1 – point 11 – point a
Article 1 – paragraph 1 – point 11 – point a
Regulation (EU) 2016/794
Article 25 – paragraph 5
Article 25 – paragraph 5
By way of derogation from paragraph 1, the Executive Director may exceptionally authorise the transfer or categories of transfers of personal data related to a specific ongoing criminal investigation to third countries or international organisations on a case-by- case basis if the transfer is, or the related transfers are:;
Amendment 384 #
Proposal for a regulation
Article 1 – paragraph 1 – point 11 – point a a (new)
Article 1 – paragraph 1 – point 11 – point a a (new)
Regulation (EU) 2016/794
Article 25 – paragraph 5 a a (new) – introductory part
Article 25 – paragraph 5 a a (new) – introductory part
(a a) In paragraph 5, the last sentence is replaced by the following: “Derogations may not be applicable to systematic, massive or structural transfers. Authorisations for categories of transfers of personal data should only be granted after consulting with the Commission and fora fixed duration, with clearly-defined categories that are strictly necessary for the objective identified according to points (a), (b), (c), or (d) of this paragraph, and with appropriate justification.”
Amendment 385 #
Proposal for a regulation
Article 1 – paragraph 1 – point 11 – point a a (new)
Article 1 – paragraph 1 – point 11 – point a a (new)
Regulation (EU) 2016/794
Article 25 – paragraph 7
Article 25 – paragraph 7
(a a) Paragraph 7 is replaced by the following: The Executive Director shall as soon as possible inform the Management Board and the EDPS of the cases in which paragraph 5 has been applied. The JPSG shall have access to this information.
Amendment 386 #
Proposal for a regulation
Article 1 – paragraph 1 – point 11 – point b – introductory part
Article 1 – paragraph 1 – point 11 – point b – introductory part
Regulation (EU) 2016/794
Article 25 – paragrapth 8
Article 25 – paragrapth 8
(b) In paragraph 8, the following sentence is deletadded:
Amendment 397 #
Proposal for a regulation
Article 1 – paragraph 1 – point 12 – point c
Article 1 – paragraph 1 – point 12 – point c
Regulation (EU) 2016/794
Article 26 – paragraph 5
Article 26 – paragraph 5
5. Europol may transmit or transfer personal data to private parties on a case- by-case basis, where it is strictly necessary, after it has informed the EDPS and subject to any possible restrictions stipulated pursuant to Article 19(2) or (3) and without prejudice to Article 67, in the following cases:
Amendment 404 #
Proposal for a regulation
Article 1 – paragraph 1 – point 12 – point c
Article 1 – paragraph 1 – point 12 – point c
Regulation (EU) 2016/794
Article 26 – paragraph 5 (new)
Article 26 – paragraph 5 (new)
5 a. Transmissions or transfers shall not be systematic, massive or structural.
Amendment 419 #
Proposal for a regulation
Article 1 – paragraph 1 – point 12 – point d
Article 1 – paragraph 1 – point 12 – point d
Regulation (EU) 2016/794
Article 26 – paragraph 6a – subparagraph 1
Article 26 – paragraph 6a – subparagraph 1
6a. Europol may request Member States, via their national units, via a reasoned request which should be as targeted as possible, to obtain personal data from private parties, which are established or have a legal representative in their territory, under their applicable laws, for the purpose of sharing it with Europol, on the condition that the requested personal data is the least sensitive and strictly limited to what is necessary for Europol with a view to identifying the national units concerned.
Amendment 421 #
Proposal for a regulation
Article 1 – paragraph 1 – point 12 – point d
Article 1 – paragraph 1 – point 12 – point d
Regulation (EU) 2016/794
Article 26 – paragraph 6a – subparagraph 2
Article 26 – paragraph 6a – subparagraph 2
Irrespective of their jurisdiction over the specific crime in relation to which Europol seeks to identify the national units concerned, Member States shall ensure that their competent national authorities can lawfully process such requests in accordance with their national laws, including appropriate judicial supervision and access to an effective remedy, for the purpose of supplying Europol with the information necessary for it to fulfil its objectives.
Amendment 425 #
Proposal for a regulation
Article 1 – paragraph 1 – point 12 – point d
Article 1 – paragraph 1 – point 12 – point d
Regulation (EU) 2016/794
Article 26 –paragraph 6b
Article 26 –paragraph 6b
6b. Europol’s infrastructure may be used for exchanges between the competent authorities of Member States and private parties in accordance with the respective Member States’ national laws. In cases where Member States use this infrastructure for exchanges of personal data on crimes falling outside the scope of the objectives of Europol, Europol shall not have access to that data. Before Europol's infrastructure can be used for exchanges between the competent authorities of Member States and private parties, Europol shall carry out an assessment of the possible security risks posed from the opening of its infrastructure for use by private parties and, where necessary, implement appropriate preventive and mitigating measures.
Amendment 446 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 1 – point a
Article 33a – paragraph 1 – point a
(a) any project shall be subject to prior authorisation by the Executive Director, based on and the EDPS, and adoption by the Management Board in a binding document, based on all of the following elements: - a description of the specific objectives of the project and the way in which the project specifically and concretely assists Europol in its tasks; - a description of the envisaged processing activity setting out the necessity and proportionality to process personal data, such as for exploring and testing innovative solution only in order to achieve the specific objectives of the project, such as for exploring and testing lawful, specific, strictly necessary and proportionate innovative solutions related to the tasks of Europol and concrete and specific law enforcement needs and ensuring accuracy of the project results,; - a description of the categories of personal data to be processed,; - a description of the retention period and conditions for access to the personal data,; - a data protection impact assessment of the risks to all rights and freedoms of data subjects, including of any: assessing necessity and proportionality separately for each application; ensuring compliance with ethical standards; identifying potential biases in the outcome, and the measures envisaged to address those risks; perational data to be used for the development of algorithms, including an assessment of the potential for discrimination; identifying potential biases and abuses in the application of and output from algorithms, including an assessment of the potential for discrimination; and requiring prior authorisation of for each application, taking into account the risk of biased outcomes resulting from the use of law enforcement data, and the measures envisaged to address those risks; and - a description of compliance with the data protection principles laid down in Regulation (EU) 2018/1725 Article 71, in particular the principles of data minimisation, data quality and privacy by design and by default.
Amendment 454 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 1 – point b
Article 33a – paragraph 1 – point b
Amendment 455 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 1 – point b
Article 33a – paragraph 1 – point b
Amendment 457 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 1 – point b a (new)
Article 33a – paragraph 1 – point b a (new)
(b a) where the processing of personal data involves the use of real operational data, personal data shall be anonymised or pseudonymised where possible;
Amendment 459 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 1 – point b b (new)
Article 33a – paragraph 1 – point b b (new)
(b b) Special categories of data as laid down in Regulation (EC) 2018/1725 shall not be processed for the purpose of research and innovation;
Amendment 465 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph –point f
Article 33a – paragraph –point f
(f) (g) the logs of the processing of personal data in the context of the project shall be kept for the duration of the project and 1 year after the project is concluded, solely for the purpose of and only as long as necessary for verifying the accuracy of the outcome of the data processing, and to allow the EDPS to conduct supervision and audits. The JPSG shall have access to the logs.
Amendment 468 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 2
Article 33a – paragraph 2
2. Europol shall keep a complete and detailed description of the process and rationale behind the training, testing and validation of algorithms to ensure transparency and for verification of the accuracy of the results, including all elements listed in paragraph 1(a) of this Article, which shall be made available in its entirety to the EDPS and the JPSG right after launching the project.;
Amendment 469 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 2
Article 33a – paragraph 2
2. Europol shall keep a complete and detailed description of the process and rationale behind the training, testing and validation of algorithms to ensure transparency and for verification of the accuracy of the results., which shall be made available in its entirety to the JPSG;
Amendment 470 #
Proposal for a regulation
Article 1 – paragraph 1 – point 19
Article 1 – paragraph 1 – point 19
Regulation (EU) 2016/794
Article 33a – paragraph 2a new
Article 33a – paragraph 2a new
2 a. After the project is finished, the full description of the project including all elements listed in paragraph 1 of this Article shall be made publicly available, without prejudice to Regulation (EC) 2001/1049.
Amendment 492 #
Proposal for a regulation
Article 1 – paragraph 1 – point 30
Article 1 – paragraph 1 – point 30
Regulation (EU) 2016/794
Article 41a – paragraph 2 a (new)
Article 41a – paragraph 2 a (new)
2 a. . Given the increased complexity and responsibility of the role of the DPO, a team of Data Protection Monitors shall be appointed to assist the DPO in the tasks outlined in Article 41b and support the Europol in complying with this Regulation and Regulation EU 2018/1725.
Amendment 503 #
Proposal for a regulation
Article 1 – paragraph 1 – point 30 a (new)
Article 1 – paragraph 1 – point 30 a (new)
Regulation (EU) 2016/794
Article 41c
Article 41c
(30 a) the following Article 41c is added: Mandatory fundamental rights training All Europol staff shall get mandatory training in the protection of fundamental rights and freedoms, including with regard to the processing of personal data. These trainings shall be developed and organised in cooperation with the FRA and CEPOL.
Amendment 506 #
Proposal for a regulation
Article 1 – paragraph 1 – point 32 – point a
Article 1 – paragraph 1 – point 32 – point a
Regulation (EU) 2016/794
Article 43 – paragraph 1, a a (new)
Article 43 – paragraph 1, a a (new)
(a) a Paragraph 1a is added: “The EDPS financial resources and human resources, at skill levels commensurate with the complexity of Europol activities, shall be adjusted in accordance with the increased volume of work so as to not impede the proper functioning of Europol.”
Amendment 507 #
Proposal for a regulation
Article 1 – paragraph 1 – point 32 – point a a (new)
Article 1 – paragraph 1 – point 32 – point a a (new)
Regulation (EU) 2016/794
Article 43 – paragraphs 3 and 4
Article 43 – paragraphs 3 and 4
(a a) paragraph 3 and 4 will be deleted: 3.The EDPS may pursuant to this Regulation: (a) give advice to data subjects on the exercise of their rights; (b) refer a matter to Europol in the event of an alleged breach of the provisions governing the processing of personal data, and, where appropriate, make proposals for remedying that breach and for improving the protection of the data subjects; (c) order that requests to exercise certain rights in relation to data be complied with where such requests have been refused in breach of Articles 36 and 37; (d) warn or admonish Europol; (e) order Europol to carry out the rectification, restriction, erasure or destruction of personal data which have been processed in breach of the provisions governing the processing of personal data and to notify such actions to third parties to whom such data have been disclosed; (f) impose a temporary or definitive ban on processing operations by Europol which are in breach of the provisions governing the processing of personal data; (g) refer a matter to Europol and, if necessary, to the European Parliament, the Council and the Commission; (h) refer a matter to the Court of Justice of the European Union under the conditions provided for in the TFEU; (i) intervene in actions brought before the Court of Justice of the European Union. 4. The EDPS shall have the power to: (a) obtain from Europol access to all personal data and to all information necessary for his or her enquiries; (b) obtain access to any premises in which Europol carries on its activities when there are reasonable grounds for presuming that an activity covered by this Regulation is being carried out there.
Amendment 511 #
Proposal for a regulation
Article 1 – paragraph 1 – point 32 a (new)
Article 1 – paragraph 1 – point 32 a (new)
Regulation (EU) 2016/794
Article 43 – paragraph 3 – point (i) (b1)
Article 43 – paragraph 3 – point (i) (b1)
(32 a) Paragraph 3 is amended as follows: (i) point (b1) is added: “Establish regulatory sandboxes that facilitate the development, testing and validation of innovative law enforcement tools by Europol under the guidance of the EDPS, with a view to ensuring compliance with data protection obligations;”
Amendment 515 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a – introductory part
Article 1 – paragraph 1 – point 37 – point a – introductory part
Regulation (EU) 2016/794
Article 51 – paragraph 3
Article 51 – paragraph 3
(a) in paragraph 3, the following points (f) to (ik) are are added:
Amendment 517 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point f
Article 51 – paragraph 3 – point f
(-f) Annual information about the number of cases in which Europol has transferred personal data to an authority of a third country or to an international organisation, per legal basis laid down in Article 25 paragraph 1, and on the number of cases in which the Executive Director authorised the transfer or categories of transfers of personal data related to a specific ongoing criminal investigation to third countries or international organisations, by derogation of Article 25 paragraph 1, including specific cases ;
Amendment 518 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point f
Article 51 – paragraph 3 – point f
(f) annual information about the number of cases in which Europol issued follow-up requests to private parties or own-initiative requests to Member States of establishment for the transmission of personal data in accordance with Article 26, includingrelevant details on the third parties involved in the data exchange and on the effectiveness of cooperation, and specific examples of cases demonstrating why these requests were necessary for Europol to fulfil its objectives and tasks;
Amendment 519 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point (f)
Article 51 – paragraph 3 – point (f)
(f) annual information about the number of cases in which Europol issued follow-up requests to private parties or own-initiative requests to Member States of establishment for the transmission of personal data in accordance with Article 26, including specific examples of cases demonstrating why these requests were necessary and proportionate for Europol to fulfil its objectives and tasks;
Amendment 520 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point f a (new)
Article 51 – paragraph 3 – point f a (new)
(f a) the consolidated annual activity report on Europol’s activities, referred to in point (c) of Article 11(1), with a detailed section on Europol’s activities in and results obtained in processing complex data sets;
Amendment 522 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point g
Article 51 – paragraph 3 – point g
(g) annual information about the number of cases where it was necessary for Europol to process personal data outside the categories of data subjects listed in Annex II in order to support Member States in a specific criminal investigation in accordance with Article 18a, alongside data on the duration and outcomes of the processing, including examples of such cases demonstrating why this data processing was necessary;
Amendment 523 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point g
Article 51 – paragraph 3 – point g
(g) annual information about the number of cases where it was necessary for Europol to process personal data outside the categories of data subjects listed in Annex II in order to support Member States in a specific criminal investigation in accordance with Article 18a, including examples of such cases demonstrating why this data processing was necessary and proportionate;
Amendment 526 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point h
Article 51 – paragraph 3 – point h
(h) annual information about the number of cases in which Europol issued alerts in the Schengen Information System in accordance with Article 4(1)(r), and the number of ‘hits’, investigations and convictions these alerts generated, including specific examples of cases demonstrating why these alerts were necessary for Europol to fulfil its objectives and tasks;
Amendment 528 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point i
Article 51 – paragraph 3 – point i
(i) annual information about the number of pilot projects in which Europol processed personal data to train, test and validate algorithms for the development of tools, including AI-based tools, for law enforcement in accordance with Article 33a, including information on the purposes of these projects and, the law enforcement needs they seek to address, the outcome of the projects and, if the projects resulted in law enforcement tools, whether or not these tools have been deployed in Member States, alongside information on their effectiveness.;
Amendment 531 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a Regulation (EU) 2016/794
Article 1 – paragraph 1 – point 37 – point a Regulation (EU) 2016/794
(i) annual information about the number of pilot projects in which Europol processed personal data to train, test and validate algorithms for the development of tools, including AI-based tools, for law enforcement in accordance with Article 33a, including all information on the purposes of these projects and the law enforcement needs they seek to addresselements listed in Article 33a paragraph 1.;
Amendment 532 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 –paragraph 3 – point i a (new)
Article 51 –paragraph 3 – point i a (new)
(i a) annual information on the number of cases in which the Executive Director has authorised the transfer of categories of data to third countries according to paragraph 5 of Article 25, the countries in case, the frequency of the transfers of categories of data, the duration for which the transfers of categories of data have been authorised, and the justification for the authorization for the transfers of categories of data;
Amendment 534 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a
Article 1 – paragraph 1 – point 37 – point a
Regulation (EU) 2016/794
Article 51 – paragraph 3 – point i b (new)
Article 51 – paragraph 3 – point i b (new)
(i b) annual information on the number of alerts introduced by Europol in SIS pursuant to Article 4(1)(r), the number of “hits” on these alerts, and the number of objections by Member States.
Amendment 536 #
Proposal for a regulation
Article 1 – paragraph 1 – point 37 – point a a (new)
Article 1 – paragraph 1 – point 37 – point a a (new)
Regulation (EU) 2016/794
Article 51 – paragraphs 5 and 6 (a a) (new)
Article 51 – paragraphs 5 and 6 (a a) (new)
(a a) Paragraph 5 is replaced by: 5.The JPSG may draw up summary conclusions on the political monitoring of Europol's activities and issue recommendations, and submit these conclusions and recommendations to the European Parliament and national parliaments.The European Parliament shall forward them to the Council, the Commission and Europol. Paragraph 6 is added: 6. Without undue delay, Europol and the Commission shall react to the recommendations issued by the JPSG, and provide reasons in case it does not take over the recommendations.
Amendment 553 #
Proposal for a regulation
Article 1 – paragraph 1 – point 41
Article 1 – paragraph 1 – point 41
Regulation (EU) 2016/794
Article 68 – paragraph 3
Article 68 – paragraph 3
3. The Commission shall, by [threewo years after entry into force of this Regulation], submit a report to the European Parliament and to the Council, assessing the operational benefits of the implementation of the competences provided for in Article 18(2)(e) and (5a), Article 18a, Article 26 and Article 26a with regard to Europol’s objectives. The report shall cover the impact of those competences on fundamental rights and freedoms as enshrined in the Charter of Fundamental Rights..