Europol denies bypassing EU data protection rules
Allegations of a ‘shadow’ database have been disputed, as Europol explains the legal framework governing its operational environments.
Europol has rejected allegations that it operated a ‘secret’ or ‘shadow’ database outside the EU data protection rules.
In a new fact-check, the agency said recent reports misrepresented two long-established operational environments used to support digital investigations and online information analysis.
Europol said its Computer Forensic Network is used to analyse complex digital evidence securely in support of criminal investigations.
It also said the Internet-Facing Operational Environment is used to collect and triage publicly available online information before relevant material is transferred to Europol’s operational systems in accordance with applicable legal requirements.
The agency said neither environment was created to bypass oversight or data protection obligations.
Europol also published a timeline showing that both systems have existed for many years and have evolved alongside changes to its legal framework, governance and supervisory arrangements.
The agency said it has worked with the European Data Protection Supervisor on governance improvements, technical modernisation and safeguards, including after regulatory changes introduced in 2022.
Europol said public debate on law enforcement and privacy should be based on accurate descriptions of operational systems and their oversight.
Why does it matter?
The dispute highlights the tension between law enforcement’s need to process large volumes of digital evidence and the privacy safeguards required under the EU law. Europol’s response is important because operational data systems used in cybercrime, terrorism and serious organised crime investigations can affect fundamental rights if oversight, retention and access rules are unclear. The case also shows why transparency about investigative infrastructure matters for public trust, especially as law enforcement agencies modernise their data-processing capabilities.
Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!