Annexes to COM(2013)173 - EU Agency for Law Enforcement Cooperation and Training (Europol)

Please note

This page contains a limited version of this dossier in the EU Monitor.

agreements (OJ L 325, 11.12.2009, p. 12).

(7) Council Decision 2009/936/JHA of 30 November 2009 adopting the implementing rules for Europol analysis work files (OJ L 325, 11.12.2009, p. 14).

(8) Council Decision 2009/968/JHA of 30 November 2009 adopting the rules on the confidentiality of Europol information (OJ L 332, 17.12.2009, p. 17).

(9) Council Regulation (EU) No 1053/2013 of 7 October 2013 establishing an evaluation and monitoring mechanism to verify the application of the Schengen acquis and repealing the Decision of the Executive Committee of 16 September 1998 setting up a Standing Committee on the evaluation and implementation of Schengen (OJ L 295, 6.11.2013, p. 27).

(10) Regulation (Euratom, ECSC, EEC) No 549/69 of the Council of 25 March 1969 determining the categories of officials and other servants of the European Communities to whom the provisions of Article 12, the second paragraph of Article 13 and Article 14 of the Protocol on the Privileges and Immunities of the Communities apply (OJ L 74, 27.3.1969, p. 1).

(11) Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (OJ L 8, 12.1.2001, p. 1).

(12) Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA (OJ L 119, 4.5.2016, p. 89).

(13) Council of Europe Committee of Ministers Recommendation No R(87) 15 to the Member States on regulating the use of personal data in the police sector, 17.9.1987.

(14) OJ L 56, 4.3.1968, p. 1.

(15) Commission Delegated Regulation (EU) No 1271/2013 of 30 September 2013 on the framework financial regulation for the bodies referred to in Article 208 of Regulation (EU, Euratom) No 966/2012 of the European Parliament and of the Council (OJ L 328, 7.12.2013, p. 42).

(16) Commission Delegated Regulation (EU) No 1268/2012 of 29 October 2012 on the rules of application of Regulation (EU, Euratom) No 966/2012 of the European Parliament and of the Council on the financial rules applicable to the general budget of the Union (OJ L 362, 31.12.2012, p. 1).

(17) Regulation (EU, Euratom) No 883/2013 of the European Parliament and of the Council of 11 September 2013 concerning investigations conducted by the European Anti-Fraud Office (OLAF) and repealing Regulation (EC) No 1073/1999 of the European Parliament and of the Council and Council Regulation (Euratom) No 1074/1999 (OJ L 248, 18.9.2013, p. 1).

(18) Council Decision 2013/488/EU of 23 September 2013 on the security rules for protecting EU classified information (OJ L 274, 15.10.2013, p. 1).

(19) Council Act of 3 December 1998 laying down the staff regulations applicable to Europol employees (OJ C 26, 30.1.1999, p. 23).

(20) Council Decision 2005/511/JHA of 12 July 2005 on protecting the euro against counterfeiting, by designating Europol as the Central Office for combating euro counterfeiting (OJ L 185, 16.7.2005, p. 35).

(21) Directive 2005/60/EC of the European Parliament and of the Council of 26 October 2005 on the prevention of the use of the financial system for the purpose of money laundering and terrorist financing (OJ L 309, 25.11.2005, p. 15).

(22) Council Framework Decision 2002/584/JHA of 13 June 2002 on the European arrest warrant and the surrender procedures between Member States (OJ L 190, 18.7.2002, p. 1).

(23) Regulation (EC) No 1049/2001 of the European Parliament and of the Council of 30 May 2001 regarding public access to European Parliament, Council and Commission documents (OJ L 145, 31.5.2001, p. 43).

(24) OJ C 95, 1.4.2014, p. 1.

(25) Regulation (EU, Euratom) No 966/2012 of the European Parliament and of the Council of 25 October 2012 on the financial rules applicable to the general budget of the Union and repealing Council Regulation (EC, Euratom) No 1605/2002 (OJ L 298, 26.10.2012, p. 1).

(26) Regulation No 1 determining the languages to be used by the European Economic Community (OJ 17, 6.10.1958, p. 385/58).

(27) OJ L 136, 31.5.1999, p. 15.

(28) Council Regulation (Euratom, EC) No 2185/96 of 11 November 1996 concerning on-the-spot checks and inspections carried out by the Commission in order to protect the European Communities' financial interests against fraud and other irregularities (OJ L 292, 15.11.1996, p. 2).



ANNEX I

LIST OF FORMS OF CRIME REFERRED TO IN ARTICLE 3(1)

terrorism,

organised crime,

drug trafficking,

money-laundering activities,

crime connected with nuclear and radioactive substances,

immigrant smuggling,

trafficking in human beings,

motor vehicle crime,

murder and grievous bodily injury,

illicit trade in human organs and tissue,

kidnapping, illegal restraint and hostage-taking,

racism and xenophobia,

robbery and aggravated theft,

illicit trafficking in cultural goods, including antiquities and works of art,

swindling and fraud,

crime against the financial interests of the Union,

insider dealing and financial market manipulation,

racketeering and extortion,

counterfeiting and product piracy,

forgery of administrative documents and trafficking therein,

forgery of money and means of payment,

computer crime,

corruption,

illicit trafficking in arms, ammunition and explosives,

illicit trafficking in endangered animal species,

illicit trafficking in endangered plant species and varieties,

environmental crime, including ship-source pollution,

illicit trafficking in hormonal substances and other growth promoters,

sexual abuse and sexual exploitation, including child abuse material and solicitation of children for sexual purposes,

genocide, crimes against humanity and war crimes.



ANNEX II

A. Categories of personal data and categories of data subjects whose data may be collected and processed for the purpose of cross-checking as referred to in point (a) of Article 18(2)

1.Personal data collected and processed for the purpose of cross-checking shall relate to:

(a)persons who, in accordance with the national law of the Member State concerned, are suspected of having committed or having taken part in a criminal offence in respect of which Europol is competent, or who have been convicted of such an offence;

(b)persons regarding whom there are factual indications or reasonable grounds under the national law of the Member State concerned to believe that they will commit criminal offences in respect of which Europol is competent.

2.Data relating to the persons referred to in paragraph 1 may include only the following categories of personal data:

(a)surname, maiden name, given names and any alias or assumed name;

(b)date and place of birth;

(c)nationality;

(d)sex;

(e)place of residence, profession and whereabouts of the person concerned;

(f)social security numbers, driving licences, identification documents and passport data; and

(g)where necessary, other characteristics likely to assist in identification, including any specific objective physical characteristics not subject to change such as dactyloscopic data and DNA profile (established from the non-coding part of DNA).

3.In addition to the data referred to in paragraph 2, the following categories of personal data concerning the persons referred to in paragraph 1 may be collected and processed:

(a)criminal offences, alleged criminal offences and when, where and how they were (allegedly) committed;

(b)means which were or which may have been used to commit those criminal offences, including information concerning legal persons;

(c)departments handling the case and their filing references;

(d)suspected membership of a criminal organisation;

(e)convictions, where they relate to criminal offences in respect of which Europol is competent;

(f)inputting party.

These data may be provided to Europol even when they do not yet contain any references to persons.

4.Additional information held by Europol or national units concerning the persons referred to in paragraph 1 may be communicated to any national unit or to Europol, should either so request. National units shall do so in compliance with their national law.

5.If proceedings against the person concerned are definitively dropped or if that person is definitively acquitted, the data relating to the case in respect of which either decision has been taken shall be deleted.

B. Categories of personal data and categories of data subjects whose data may be collected and processed for the purpose of analyses of a strategic or thematic nature, for the purpose of operational analyses or for the purpose of facilitating the exchange of information as referred to in points (b), (c) and (d) of Article 18(2)

1.Personal data collected and processed for the purpose of analyses of a strategic or thematic nature, for the purpose of operational analyses or for the purpose of facilitating the exchange of information between Member States, Europol, other Union bodies, third countries and international organisations shall relate to:

(a)persons who, pursuant to the national law of the Member State concerned, are suspected of having committed or having taken part in a criminal offence in respect of which Europol is competent, or who have been convicted of such an offence;

(b)persons regarding whom there are factual indications or reasonable grounds under the national law of the Member State concerned to believe that they will commit criminal offences in respect of which Europol is competent;

(c)persons who might be called on to testify in investigations in connection with the offences under consideration or in subsequent criminal proceedings;

(d)persons who have been the victims of one of the offences under consideration or with regard to whom certain facts give reason to believe that they could be the victims of such an offence;

(e)contacts and associates; and

(f)persons who can provide information on the criminal offences under consideration.

2.The following categories of personal data, including associated administrative data, may be processed on the categories of persons referred to in points (a) and (b) of paragraph 1:

(a)personal details:

(i)present and former surnames;

(ii)present and former forenames;

(iii)maiden name;

(iv)father's name (where necessary for the purpose of identification);

(v)mother's name (where necessary for the purpose of identification):

(vi)sex;

(vii)date of birth;

(viii)place of birth;

(ix)nationality;

(x)marital status;

(xi)alias;

(xii)nickname;

(xiii)assumed or false name;

(xiv)present and former residence and/or domicile;

(b)physical description:

(i)physical description;

(ii)distinguishing features (marks/scars/tattoos etc.);

(c)means of identification:

(i)identity documents/driving licence;

(ii)national identity card/passport numbers;

(iii)national identification number/social security number, if applicable;

(iv)visual images and other information on appearance;

(v)forensic identification information such as fingerprints, DNA profile (established from the non-coding part of DNA), voice profile, blood group, dental information;

(d)occupation and skills:

(i)present employment and occupation;

(ii)former employment and occupation;

(iii)education (school/university/professional);

(iv)qualifications;

(v)skills and other fields of knowledge (language/other);

(e)economic and financial information:

(i)financial data (bank accounts and codes, credit cards, etc.);

(ii)cash assets;

(iii)shareholdings/other assets;

(iv)property data;

(v)links with companies;

(vi)bank and credit contacts;

(vii)tax position;

(viii)other information revealing a person's management of his or her financial affairs;

(f)behavioural data:

(i)lifestyle (such as living above means) and routine;

(ii)movements;

(iii)places frequented;

(iv)weapons and other dangerous instruments;

(v)danger rating;

(vi)specific risks such as escape probability, use of double agents, connections with law enforcement personnel;

(vii)criminal-related traits and profiles;

(viii)drug abuse;

(g)contacts and associates, including type and nature of the contact or association;

(h)means of communication used, such as telephone (static/mobile), fax, pager, electronic mail, postal addresses, internet connection(s);

(i)means of transport used, such as vehicles, boats, aircraft, including information identifying those means of transport (registration numbers);

(j)information relating to criminal conduct:

(i)previous convictions;

(ii)suspected involvement in criminal activities;

(iii)modi operandi;

(iv)means which were or may be used to prepare and/or commit crimes;

(v)membership of criminal groups/organisations and position in the group/organisation;

(vi)role in the criminal organisation;

(vii)geographical range of criminal activities;

(viii)material gathered in the course of an investigation, such as video and photographic images;

(k)references to other information systems in which information on the person is stored:

(i)Europol;

(ii)police/customs agencies;

(iii)other enforcement agencies;

(iv)international organisations;

(v)public entities;

(vi)private entities;

(l)information on legal persons associated with the data referred to in points (e) and (j):

(i)designation of the legal person;

(ii)location;

(iii)date and place of establishment;

(iv)administrative registration number;

(v)legal form;

(vi)capital;

(vii)area of activity;

(viii)national and international subsidiaries;

(ix)directors;

(x)links with banks.

3.‘Contacts and associates’, as referred to in point (e) of paragraph 1, are persons through whom there is sufficient reason to believe that information which relates to the persons referred to in points (a) and (b) of paragraph 1 and which is relevant for the analysis can be gained, provided they are not included in one of the categories of persons referred to in points (a), (b), (c), (d) and (f) of paragraph 1. ‘Contacts’ are those persons who have a sporadic contact with the persons referred to in points (a) and (b) of paragraph 1. ‘Associates’ are those persons who have a regular contact with the persons referred to in points (a) and (b) of paragraph 1.

In relation to contacts and associates, the data referred to in paragraph 2 may be stored as necessary, provided there is reason to assume that such data are required for the analysis of the relationship of such persons with persons referred to in points (a) and (b) of paragraph 1. In this context, the following shall be observed:

(a)such relationship shall be clarified as soon as possible;

(b)the data referred to in paragraph 2 shall be deleted without delay if the assumption that such relationship exists turns out to be unfounded;

(c)all data referred to in paragraph 2 may be stored if contacts or associates are suspected of having committed an offence falling within the scope of Europol's objectives, or have been convicted for the commission of such an offence, or if there are factual indications or reasonable grounds under the national law of the Member State concerned to believe that they will commit such an offence;

(d)data referred to in paragraph 2 on contacts, and associates, of contacts as well as on contacts, and associates, of associates shall not be stored, with the exception of data on the type and nature of their contact or association with the persons referred to in points (a) and (b) of paragraph 1;

(e)if a clarification pursuant to the previous points is not possible, this shall be taken into account when a decision is taken on the need for, and the extent of, data storage for further analysis.

4.With regard to a person who, as referred to in point (d) of paragraph 1, has been the victim of one of the offences under consideration or who, on the basis of certain facts there is reason to believe could be the victim of such an offence, the data referred to in point (a) to point (c)(iii) of paragraph 2 as well as the following categories of data may be stored:

(a)victim identification data;

(b)reason for victimisation;

(c)damage (physical/financial/psychological/other);

(d)whether anonymity is to be guaranteed;

(e)whether participation in a court hearing is possible;

(f)crime-related information provided by or through persons referred to in point (d) of paragraph 1, including where necessary information on their relationship with other persons, for the purpose of identifying the persons referred to in points (a) and (b) of paragraph 1.

Other data referred to in paragraph 2 may be stored as necessary, provided there is reason to assume that they are required for the analysis of a person's role as victim or potential victim.

Data not required for any further analysis shall be deleted.

5.With regard to persons who, as referred to in point (c) of paragraph 1, might be called on to testify in investigations in connection with the offences under consideration or in subsequent criminal proceedings, data referred to in point (a) to point (c)(iii) of paragraph 2 as well as categories of data complying with the following criteria may be stored:

(a)crime-related information provided by such persons, including information on their relationship with other persons included in the analysis work file;

(b)whether anonymity is to be guaranteed;

(c)whether protection is to be guaranteed and by whom;

(d)new identity;

(e)whether participation in a court hearing is possible.

Other data referred to in paragraph 2 may be stored as necessary, provided there is reason to assume that they are required for the analysis of such persons' role as witness.

Data not required for any further analysis shall be deleted.

6.With regard to persons who, as referred to in point (f) of paragraph 1, can provide information on the criminal offences under consideration, data referred to in point (a) to point (c)(iii) of paragraph 2 as well as categories of data complying with the following criteria may be stored:

(a)coded personal details;

(b)type of information supplied;

(c)whether anonymity is to be guaranteed;

(d)whether protection is to be guaranteed and by whom;

(e)new identity;

(f)whether participation in a court hearing is possible;

(g)negative experiences;

(h)rewards (financial/favours).

Other data referred to in paragraph 2 may be stored as necessary, provided there is reason to assume that they are required for the analysis of such persons' role as informant.

Data not required for any further analysis shall be deleted.

7.If, at any time during the course of an analysis, it becomes clear on the basis of serious and corroborating indications that a person should be included in a category of persons, as defined in this Annex, other than the category in which that person was initially placed, Europol may process only the data on that person which is permitted under that new category, and all other data shall be deleted.

If, on the basis of such indications, it becomes clear that a person should be included in two or more different categories as defined in this Annex, all data allowed under such categories may be processed by Europol.