Dies ist eine HTML Version eines Anhanges der Informationsfreiheitsanfrage 'Documents on the "Check the Web" initiative'.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/37 
III 
(Acts adopted under the EU Treaty) 
ACTS ADOPTED UNDER TITLE VI OF THE EU TREATY 
COUNCIL DECISION 
of 6 April 2009 
establishing the European Police Office (Europol) 
(2009/371/JHA) 
THE COUNCIL OF THE EUROPEAN UNION, 
lishing the European Police College (CEPOL) ( 4 ) have 
taken the form of Council Decisions, since such 
Having regard to the Treaty on European Union, and in 
Decisions are more easily adaptable to changing circum­
particular Article 30(1)(b), Article 30(2) and Article 34(2)(c) 
stances and emerging political priorities. 
thereof, 
(5) Establishing 
Europol 
as 
an 
entity 
of 
the 
Union, 
funded 
from the general budget of the European Union, will 
Having regard to the proposal from the Commission, 
enhance the role of the European Parliament in the 
control of Europol through the involvement of the 
European Parliament in the adoption of that budget, 
Having regard to the opinion of the European Parliament ( 1 ), 
including the establishment plan, and the discharge 
procedure. 
Whereas: 
(6) Making 
Europol 
subject 
to 
the 
general 
rules 
and 
procedures applicable to similar Union entities will 
(1) The 
establishment 
of 

European 
Police 
Office 
(Europol) 
ensure administrative simplification, which will allow 
was agreed in the Treaty on European Union of 
Europol to devote more of its resources to its core tasks. 
7 February 1992, and regulated in the Convention 
based on Article K.3 of the Treaty on European Union, 
(7) Further 
simplification 
and 
improvement 
of 
Europol’s 
on the establishment of a European Police Office 
functioning can be achieved through measures aimed at 
(Europol Convention) ( 2 ). 
widening the possibilities for Europol’s assisting and 
supporting the competent law enforcement authorities 
(2)  The Europol Convention has been the subject of a 
of the Member States, without providing for executive 
number of amendments enshrined in three protocols 
powers for Europol staff. 
which have entered into force after a lengthy process 
of ratification. Consequently, replacing the Convention 
(8) 
One such improvement is to ensure that Europol can 
by a Decision will ease further amendments as necessary. 
assist the competent authorities of the Member States 
in combating specific forms of serious crime, without 
the current limitation that there must be factual indi­
(3) Simplification 
and 
improvement 
of 
Europol’s 
legal 
cations that an organised criminal structure is involved. 
framework can be partially achieved by the establishment 
of Europol as an entity of the Union, funded from the 
(9) The 
establishment 
of 
joint 
investigation 
teams 
should 
be 
general budget of the European Union, due to the 
encouraged and it is important that Europol staff should 
subsequent application of the general rules and 
be able to participate in them. To ensure that such parti­
procedures. 
cipation is possible in every Member State, it should be 
guaranteed that Europol staff do not benefit from the 
(4) Recent 
legal 
instruments 
setting 
up 
similar 
Union 
entities 
application of immunities while they are participating 
in the areas covered by Title VI of the Treaty on 
in a support capacity in joint investigation teams. That 
European Union (Council Decision 2002/187/JHA of 
will be possible after the adoption of a Regulation to that 
28 February 2002 setting up Eurojust with a view to 
effect on the basis of Article 16 of the Protocol on the 
reinforcing the fight against serious crime 
(
Privileges and Immunities of the European Communities. 
 3 ) and 
Decision 2005/681/JHA of 20 September 2005 estab­
(10) Europol 
national 
units 
should 
have 
direct 
access 
to 
all 
data in the Europol Information System to avoid unne­
( 1 ) Opinion of 17 January 2008 (not yet published in the Official 
cessary procedures.
Journal). 
( 2 ) OJ C 316, 27.11.1995, p. 1. 
( 3 ) OJ L 63, 6.3.2002, p. 1. 
( 4 ) OJ L 256, 1.10.2005, p. 63.

L 121/38 
EN 
Official Journal of the European Union 
15.5.2009 
(11) In 
order 
to 
achieve 
its 
objectives, 
Europol 
processes 
(16) For 
the 
purpose 
of 
fulfilling 
its 
mission, 
Europol 
should 
personal data by automated means or in structured 
cooperate with European institutions, bodies, offices and 
manual files. Accordingly, the necessary steps should be 
agencies, including Eurojust, ensuring an adequate level 
taken to guarantee a level of data protection which corre­
of data protection. 
sponds at least to that which results from the application 
of the principles of the Council of Europe Convention for 
the Protection of Individuals with regard to Automatic 
Processing of Personal Data, signed in Strasbourg on 
(17) Europol 
should 
be 
able 
to 
conclude 
agreements 
and 
28 January 1981, together with subsequent amendments 
working arrangements with Union or Community insti­
thereto, once such amendments are in force between the 
tutions, bodies, offices and agencies in order to increase 
Member States. 
mutual effectiveness in combating serious forms of crime 
which come within the respective competence of both 
parties and to avoid the duplication of work. 
(12) A 
Council 
Framework 
Decision 
on 
the 
protection 
of 
personal data processed in the framework of police and 
(18) Europol’s 
possibilities 
for 
cooperation 
with 
third 
States 
judicial cooperation in criminal matters will be applicable 
and organisations should be rationalised in order to 
to the transfer of personal data by Member States to 
ensure consistency with the general policy of the 
Europol. The relevant set of data-protection provisions 
Union in that respect and new provisions on the 
in this Decision will not be affected by that Framework 
manner in which such cooperation should take place in 
Decision and this Decision should contain specific 
future should be laid down. 
provisions on the protection of personal data regulating 
these matters in greater detail because of the particular 
nature, functions and competences of Europol. 
(19) The 
governance 
of 
Europol 
should 
be 
improved 
through 
simplified procedures, more general descriptions of the 
tasks of the Management Board and the establishment of 
a common rule that all decisions should be taken by a 
majority of two thirds. 
(13)  There is a need for a Data Protection Officer who should 
be responsible for ensuring, in an independent manner, 
the lawfulness of data processing and compliance with 
the provisions of this Decision concerning the processing 
(20) It 
is 
also 
desirable 
to 
provide 
for 
enhanced 
control 
over 
of personal data, including the processing of personal 
Europol by the European Parliament in order to ensure 
data on Europol staff which are protected by 
that Europol remains a fully accountable and transparent 
Article 24 of Regulation (EC) No 45/2001 of the 
organisation, due account being taken of the need to 
European Parliament and of the Council of 
safeguard the confidentiality of operational information. 
18 December 2000 on the protection of individuals 
with regard to the processing of personal data by the 
Community institutions and bodies and on the free 
movement of such data ( 1 ). 
(21) Judicial control over Europol will be exercised in 
accordance with Article 35 of the Treaty on European 
Union. 
(14) Europol’s existing possibilities for the creation and 
management of information processing systems in 
(22)  In order to enable Europol to continue to fulfil its tasks 
support of its tasks should be widened. Such additional 
to the best of its abilities, carefully designed transitional 
information processing systems should be established 
measures should be laid down. 
and maintained in accordance with the general principles 
of data protection enshrined in the Council of Europe 
Convention for the Protection of Individuals with regard 
to Automatic Processing of Personal Data of 28 January 
(23)  Since the objective of this Decision, namely the estab­
1981 and in Recommendation No R (87) 15 of the 
lishment of an entity responsible for law-enforcement 
Committee of Ministers of the Council of Europe of 
cooperation at Union level, cannot be sufficiently 
17 September 1987, by means of a Management Board 
achieved by the Member States and can, therefore, by 
decision approved by the Council.
reason of the scale and effects of the action, be better 
 
achieved at Union level, the Union may adopt measures, 
in accordance with the principle of subsidiarity, as set out 
in Article 5 of the Treaty establishing the European 
Community and referred to in Article 2 of the Treaty 
on European Union. In accordance with the principle of 
(15) This 
Decision 
allows 
the 
principle 
of 
public 
access 
to 
proportionality, as set out in Article 5 of the Treaty 
official documents to be taken into account. 
establishing the European Community, this Decision 
does not go beyond what is necessary in order to 
( 1 ) OJ L 8, 12.1.2001, p. 1.
achieve that objective.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/39
(24) This Decision respects the fundamental rights and 
For the purposes of this Decision, ‘competent authorities’ shall 
observes the principles recognised in particular by the 
mean all public bodies existing in the Member States which are 
Charter of Fundamental Rights of the European Union, 
responsible under national law for preventing and combating 
criminal offences. 
HAS DECIDED AS FOLLOWS: 
Article 4 
Competence 
CHAPTER I 
1. Europol’s competence shall cover organised crime, 
terrorism and other forms of serious crime as listed in the 
ESTABLISHMENT AND TASKS 
Annex affecting two or more Member States in such a way 
Article 1 
as to require a common approach by the Member States 
owing to the scale, significance and consequences of the 
Establishment 
offences. 
1.  This Decision replaces the provisions of the Convention 
based on Article K.3 of the Treaty on European Union, on the 
establishment of a European Police Office (Europol Convention). 
2. On 

recommendation 
by 
the 
Management 
Board, 
the 
Council shall lay down its priorities for Europol, taking 
particular account of strategic analyses and threat assessments 
prepared by Europol. 
Europol shall have its seat in The Hague, the Netherlands. 
3. Europol’s 
competence 
shall 
also 
cover 
related 
criminal 
2. Europol, 
as 
referred 
to 
in 
this 
Decision, 
shall 
be 
regarded  offences. The following offences shall be regarded as related 
as the legal successor of Europol, as established by the Europol 
criminal offences: 
Convention. 
(a) criminal offences committed in order to procure the means 
3. Europol 
shall 
liaise 
with 

single 
national 
unit 
in 
each 
of perpetrating acts in respect of which Europol is 
Member State, to be established or designated in accordance 
competent; 
with Article 8. 
(b) criminal offences committed in order to facilitate or carry 
Article 2 
out acts in respect of which Europol is competent; 
Legal capacity 
1. Europol 
shall 
have 
legal 
personality. 
(c)  criminal offences committed to ensure the impunity of acts 
in respect of which Europol is competent. 
2. In 
each 
Member 
State 
Europol 
shall 
enjoy 
the 
most 
extensive legal and contractual capacity accorded to legal 
Article 5 
persons under that Member State’s law. Europol may, in 
Tasks 
particular, acquire and dispose of movable and immovable 
property and may be a party to legal proceedings. 
1. Europol 
shall 
have 
the 
following 
principal 
tasks: 
3. Europol 
shall 
be 
empowered 
to 
conclude 

Headquarters  (a) to collect, store, process, analyse and exchange information 
Agreement with the Kingdom of the Netherlands. 
and intelligence; 
Article 3 
(b) to notify the competent authorities of the Member States 
without delay via the national unit referred to in Article 8 of 
Objective 
information concerning them and of any connections iden­
tified between criminal offences; 
The objective of Europol shall be to support and strengthen 
action by the competent authorities of the Member States and 
their mutual cooperation in preventing and combating 
organised crime, terrorism and other forms of serious crime 
(c) to aid investigations in the Member States, in particular by 
affecting two or more Member States. 
forwarding all relevant information to the national units;

L 121/40 
EN 
Official Journal of the European Union 
15.5.2009 
(d) to ask the competent authorities of the Member States 
Member States or in the context of joint investigation teams, 
concerned to initiate, conduct or coordinate investigations 
where appropriate in liaison with Union entities and third 
and to suggest the setting up of joint investigation teams in 
States’ bodies. Upon request, Europol may financially support 
specific cases; 
investigations of euro counterfeiting. 
(e) to provide intelligence and analytical support to Member 
States in connection with major international events; 
Article 6 
Participation in joint investigation teams 
(f) to prepare threat assessments, strategic analyses and general 
situation reports relating to its objective, including organised 
1. Europol 
staff 
may 
participate 
in 
supporting 
capacity 
in 
crime threat assessments. 
joint investigation teams, including such teams set up in 
accordance with Article 1 of Council Framework Decision 
2002/465/JHA of 13 June 2002 on joint investigation 
2. The 
tasks 
referred 
to 
in 
paragraph 

shall 
include  teams ( 2 ), in accordance with Article 13 of the Convention of 
providing support to Member States in their tasks of 
29 May 2000 on mutual assistance in criminal matters between 
gathering and analysing information from the Internet in 
the Member States of the European Union ( 3 ), or in accordance 
order to assist in the identification of criminal activities 
with Article 24 of the Convention of 18 December 1997 on 
facilitated by or committed using the Internet. 
mutual assistance and cooperation between customs adminis­
trations ( 4 ), in so far as those teams are investigating criminal 
offences in respect of which Europol is competent under 
3. Europol 
shall 
have 
the 
following 
additional 
tasks: 
Article 4 of this Decision. 
(a) to  develop  specialist  knowledge  of  the  investigative 
procedures of the competent authorities of the Member 
States and to provide advice on investigations; 
Europol staff may, within the limits provided for by the law of 
the Member States in which a joint investigation team is 
operating and in accordance with the arrangement referred to 
(b) to provide strategic intelligence to assist and promote the 
in paragraph 2, assist in all activities and exchange information 
efficient and effective use of the resources available at 
with all members of the joint investigation team, in accordance 
national and Union level for operational activities and the 
with paragraph 4. They shall not, however, take part in the 
support of such activities. 
taking of any coercive measures. 
4. Additionally, 
in 
the 
context 
of 
its 
objective 
under 
Article 3, Europol may, in accordance with the staffing and 
budgetary resources at its disposal and within the limits set 
2. The 
administrative 
implementation 
of 
participation 
by 
by the Management Board, assist Member States through 
Europol staff in a joint investigation team shall be laid down 
support, advice and research in the following areas: 
in an arrangement between the Director and the competent 
authorities of the Member States participating in the joint inves­
tigation team, with the involvement of the national units. The 
(a) the training of members of their competent authorities, 
rules governing such arrangements shall be determined by the 
where appropriate in cooperation with the European 
Management Board. 
Police College; 
(b) the organisation and equipment of those authorities by 
3. The 
rules 
referred 
to 
in 
paragraph 

shall 
specify 
the 
facilitating the provision of technical support between the 
conditions under which Europol staff are placed at the 
Member States; 
disposal of the joint investigation team. 
(c) crime prevention methods; 
4. In 
accordance 
with 
the 
arrangement 
referred 
to 
in 
(d) technical and forensic methods and analysis, and investi­
paragraph 2, Europol staff may liaise directly with members 
gative procedures. 
of a joint investigation team and provide members and 
seconded members of the joint investigation team, in 
accordance with this Decision, with information from any of 
5.  Europol shall also act as the Central Office for combating 
the components of the information processing systems referred 
euro counterfeiting in accordance with Council Decision 
to in Article 10. In the event of such direct liaison, Europol 
2005/511/JHA of 12 July 2005 on protecting the euro 
shall at the same time inform the national units of the Member 
against counterfeiting, by designating Europol as the Central 
States represented in the team as well as those of the Member 
Office for combating euro counterfeiting ( 1 ). Europol may also 
States which provided the information thereof.
encourage the coordination of measures carried out in order to 
fight euro counterfeiting by the competent authorities of the 
( 2 ) OJ L 162, 20.6.2002, p. 1. 
( 3 ) OJ C 197, 12.7.2000, p. 3. 
( 1 ) OJ L 185, 16.7.2005, p. 35. 
( 4 ) OJ C 24, 23.1.1998, p. 2.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/41
5. Information 
obtained 
by 

Europol 
staff 
member 
while  2. The 
national 
unit 
shall 
be 
the 
only 
liaison 
body 
between 
part of a joint investigation team may, with the consent and 
Europol and the competent authorities of the Member States. 
under the responsibility of the Member State which provided 
Member States, however, may allow direct contacts between 
the information, be included in any of the components of the 
designated competent authorities and Europol subject to 
information processing systems referred to in Article 10 under 
conditions determined by the Member State in question, 
the conditions laid down in this Decision. 
including prior involvement of the national unit. 
The national unit shall at the same time receive from Europol 
6. During 
the 
operations 
of 

joint 
investigation 
team,  any information exchanged in the course of direct contacts 
Europol staff shall, with respect to offences committed against 
between Europol and designated competent authorities. 
or by them, be subject to the national law of the Member State 
Relations between the national unit and the competent auth­
of operation applicable to persons with comparable functions. 
orities shall be governed by national law, and in particular, the 
relevant national constitutional requirements. 
Article 7 
3. Member 
States 
shall 
take 
the 
measures 
necessary 
to 
ensure 
Requests by Europol for the initiation of criminal 
that their national units are able to fulfil their tasks and, in 
investigations 
particular, have access to relevant national data. 
1. Member 
States 
shall 
deal 
with 
any 
request 
by 
Europol 
to 
initiate, conduct or coordinate investigations in specific cases 
and shall give such requests due consideration. The Member 
4.  The national units shall: 
States shall inform Europol whether the investigation 
requested will be initiated. 
(a) supply Europol on their own initiative with the information 
and intelligence necessary for it to carry out its tasks; 
2. Before 
making 

request 
for 
the 
initiation 
of 
criminal 
investigations, Europol shall inform Eurojust accordingly. 
(b) respond to Europol’s requests for information, intelligence 
and advice; 
3.  If the competent authorities of the Member State decide 
not to comply with a request made by Europol, they shall 
(c) keep information and intelligence up to date; 
inform Europol of their decision and of the reasons therefor 
unless they are unable to give their reasons because: 
(d) evaluate information and intelligence in accordance with 
national law for the competent authorities and transmit 
that material to them; 
(a) to do so would harm essential national security interests; or 
(e) issue  requests  for  advice,  information,  intelligence  and 
(b) to do so would jeopardise the success of investigations 
analysis to Europol; 
under way or the safety of individuals. 
(f) supply  Europol  with  information  for  storage  in  its 
databases; 
4. Replies 
to 
requests 
by 
Europol 
for 
the 
initiation, 
conduct 
or coordination of investigations in specific cases and infor­
mation for Europol concerning the results of investigations 
(g) ensure compliance with the law in every exchange of infor­
shall be forwarded through the competent authorities of the 
mation between themselves and Europol. 
Member States in accordance with the rules laid down in this 
Decision and the relevant national legislation. 
5. Without 
prejudice 
to 
the 
Member 
States’ 
discharging 
the 
responsibilities incumbent upon them with regard to the main­
Article 8 
tenance of law and order and the safeguarding of internal 
security, a national unit shall not in any particular case be 
National units 
obliged to supply information or intelligence if that would 
1. Each 
Member 
State 
shall 
establish 
or 
designate 

national  entail: 
unit responsible for carrying out the tasks set out in this Article. 
An official shall be appointed in each Member State as the head 
of the national unit. 
(a) harming essential national security interests;

L 121/42 
EN 
Official Journal of the European Union 
15.5.2009
(b) jeopardising the success of a current investigation or the 
(d) assist in the exchange of information from their national 
safety of individuals; or 
units with the liaison officers of other Member States under 
their responsibility in accordance with national law. Such 
bilateral exchanges may also cover crimes outwith the 
(c) disclosing information relating to organisations or specific 
competence of Europol, as far as allowed by national law. 
intelligence activities in the field of State security. 
6. The 
costs 
incurred 
by 
the 
national 
units 
in 
communi­
4. Article 
35 
shall 
apply mutatis mutandis to the activities of 
cations with Europol shall be borne by the Member States 
liaison officers. 
and, apart from the costs of connection, shall not be charged 
to Europol. 
5. The 
rights 
and 
obligations 
of 
liaison 
officers 
in 
relation 
to 
7. The 
heads 
of 
the 
national 
units 
shall 
meet 
on 

regular  Europol shall be determined by the Management Board. 
basis to assist Europol on operational matters, on their own 
initiative or at the request of the Management Board or the 
Director, in particular to: 
6. Liaison 
officers 
shall 
enjoy 
the 
privileges 
and 
immunities 
necessary for the performance of their tasks in accordance with 
(a) consider and develop proposals that will improve Europol’s 
Article 51(2). 
operational effectiveness and encourage commitment from 
Member States; 
(b) evaluate the reports and analyses drafted by Europol in 
7. Europol 
shall 
ensure 
that 
liaison 
officers 
are 
fully 
informed 
accordance with Article 5(1)(f) and develop measures in 
of and associated with all of its activities, as far as that is 
order to help to implement their findings; 
compatible with their position. 
(c) provide support in the establishment of joint investigation 
teams involving Europol in accordance with Article 5(1)(d) 
8. Europol 
shall 
provide 
Member 
States 
free 
of 
charge 
with 
and Article 6. 
the necessary premises in the Europol building and adequate 
support for the performance of the activities of their liaison 
officers. All other costs which arise in connection with the 
Article 9 
secondment of liaison officers shall be borne by the 
seconding Member State, including the costs of equipment for 
Liaison officers 
liaison officers, unless the Management Board recommends 
otherwise in specific cases when drawing up Europol’s budget. 
1. Each 
national 
unit 
shall 
second 
at 
least 
one 
liaison 
officer 
to Europol. Except as otherwise stipulated in specific provisions 
of this Decision, liaison officers shall be subject to the national 
law of the seconding Member State. 
CHAPTER II 
INFORMATION PROCESSING SYSTEMS 
2. Liaison 
officers 
shall 
constitute 
the 
national 
liaison 
bureaux at Europol and shall be instructed by their national 
Article 10 
units to represent the interests of the latter within Europol in 
Information processing 
accordance with the national law of the seconding Member 
State and the provisions applicable to the administration of 
1.  In so far as it is necessary for the achievement of its 
Europol. 
objectives, Europol shall process information and intelligence, 
including personal data, in accordance with this Decision. 
Europol shall establish and maintain the Europol Information 
3. Without 
prejudice 
to 
Article 
8(4) 
and 
(5), 
liaison 
officers  System referred to in Article 11 and the analysis work files 
shall: 
referred to in Article 14. Europol may also establish and 
maintain other systems processing personal data set up in 
accordance with paragraphs 2 and 3 of this Article. 
(a) provide  Europol  with  information  from  the  seconding 
national unit; 
2. The 
Management 
Board, 
acting 
on 

proposal 
from 
the 
(b) forward  information  from  Europol  to  the  seconding 
Director after having taken into account the possibilities offered 
national unit; 
by existing Europol information processing systems and after 
consulting the Joint Supervisory Body, shall decide on the estab­
lishment of a new system processing personal data. That 
(c) cooperate with Europol staff by providing information and 
Management Board decision shall be submitted to the Council 
giving advice; and 
for approval.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/43
3. The 
Management 
Board 
decision 
referred 
to 
in 
paragraph 
Article 12 
2 shall determine the conditions and limitations under which 
Europol may establish the new system processing personal data. 
Content of the Europol Information System 
The Management Board decision may allow processing of 
1. The 
Europol 
Information 
System 
may 
be 
used 
to 
process 
personal data relating to the categories of persons referred to 
only such data as are necessary for the performance of Europol’s 
in Article 14(1), but not the processing of personal data 
tasks. The data input shall relate to: 
revealing racial or ethnic origin, political opinions, religious or 
philosophical beliefs or trade-union membership and the 
processing of data concerning health or sex life. The 
Management Board decision shall ensure that the measures 
(a) persons who, in accordance with the national law of the 
and principles referred to in Articles 18, 19, 20, 27, 29 and 
Member State concerned, are suspected of having 
35 are properly implemented. In particular, the Management 
committed or having taken part in a criminal offence in 
Board decision shall define the purpose of the new system, 
respect of which Europol is competent or who have been 
access to and the use of the data, as well as time limits for 
convicted of such an offence; 
the storage and deletion of the data. 
(b) persons regarding whom there are factual indications or 
reasonable grounds under the national law of the Member 
State concerned to believe that they will commit criminal 
4. Europol 
may 
process 
data 
for 
the 
purpose 
of 
determining 
offences in respect of which Europol is competent. 
whether such data are relevant to its tasks and can be included 
in the Europol Information System referred to in Article 11, in 
the analysis work files referred to in Article 14 or in other 
systems processing personal data established in accordance 
2.  Data relating to the persons referred to in paragraph 1 
with paragraphs 2 and 3 of this Article. The Management 
may include only the following particulars: 
Board, acting on a proposal from the Director and after 
consulting the Joint Supervisory Body, shall determine the 
conditions relating to the processing of such data, in particular 
(a) surname, maiden name, given names and any alias or 
with respect to access to and the use of the data, as well as time 
assumed name; 
limits for the storage and deletion of the data that may not 
exceed six months, having due regard to the principles referred 
to in Article 27. That Management Board decision shall be 
submitted to the Council for approval. 
(b) date and place of birth; 
(c) nationality; 
Article 11 
Europol Information System 
(d) sex; 
1. Europol 
shall 
maintain 
the 
Europol 
Information 
System. 
(e) place of residence, profession and whereabouts of the 
person concerned; 
2. Europol 
shall 
ensure 
compliance 
with 
the 
provisions 
of 
this Decision governing operation of the Europol Information 
System. It shall be responsible for the proper working of the 
(f) social security numbers, driving licences, identification 
Europol Information System in technical and operational 
documents and passport data; and 
respects and shall, in particular, take all measures necessary to 
ensure that the measures referred to in Articles 20, 29, 31 and 
35 regarding the Europol Information System are properly im­
(g) where necessary, other characteristics likely to assist in iden­
plemented. 
tification, including any specific objective physical characte­
ristics not subject to change such as dactyloscopic data and 
DNA profile (established from the non-coding part of DNA). 
3.  The national unit in each Member State shall be 
responsible for communication with the Europol Information 
3.  In addition to the data referred to in paragraph 2, the 
System. It shall, in particular, be responsible for the security 
Europol Information System may also be used to process the 
measures referred to in Article 35 in respect of the data- 
following particulars concerning the persons referred to in 
processing equipment used within the territory of the Member 
paragraph 1: 
State in question, for the review provided for in Article 20 and, 
in so far as required under the laws, regulations, administrative 
provisions and procedures of that Member State, for the proper 
(a)  criminal offences, alleged criminal offences and when, where 
implementation of this Decision in other respects. 
and how they were (allegedly) committed;

L 121/44 
EN 
Official Journal of the European Union 
15.5.2009
(b) means  which  were  or  may  be  used  to  commit  those 
without delay and if necessary modify, supplement, correct or 
criminal offences including information concerning legal 
delete the data immediately. 
persons; 
(c) departments handling the case and their filing references; 
3. Where 
the 
system 
contains 
data 
as 
referred 
to 
in 
Article 12(3) concerning a person, any party may input ad­
ditional data as referred to in that provision. Where there is 
an obvious contradiction between the data input, the parties 
(d) suspected membership of a criminal organisation; 
concerned shall consult each other and reach agreement. 
(e) convictions, where they relate to criminal offences in respect 
of which Europol is competent; 
4. Where 

party 
intends 
to 
delete 
altogether 
data 
as 
referred 
to in Article 12(2) which it has input concerning a person and 
data as referred to in Article 12(3) in respect of the same person 
(f) inputting party. 
have been input by other parties, responsibility in terms of data- 
protection legislation pursuant to Article 29(1) and the right to 
modify, supplement, correct and delete such data pursuant to 
These data may also be input when they do not yet contain any 
Article 12(2) shall be transferred to the next party to have input 
references to persons. Where Europol inputs the data itself, as 
data as referred to in Article 12(3) on that person. The party 
well as when it gives its filing reference, it shall also indicate the 
intending to delete shall inform the party to which responsi­
source of the data. 
bility in terms of data protection is transferred of its intention. 
4. Additional 
information 
held 
by 
Europol 
or 
national 
units  5. Responsibility 
for 
the 
permissibility 
of 
retrieval 
from, 
concerning the persons referred to in paragraph 1 may be 
input into and modifications within the Europol Information 
communicated to any national unit or Europol should either 
System shall lie with the retrieving, inputting or modifying 
so request. National units shall do so in compliance with their 
party. It must be possible to identify that party. The commu­
national law. 
nication of information between national units and the 
competent authorities of the Member States shall be governed 
by national law. 
Where the additional information concerns one or more related 
criminal offences as defined in Article 4(3), the data stored in 
the Europol Information System shall be marked accordingly to 
enable national units and Europol to exchange information 
6. 
In addition to the national units and persons referred to in 
concerning the related criminal offences. 
paragraph 1, competent authorities designated to that effect by 
the Member States may also query the Europol Information 
System. However, the result of the query shall indicate only 
5. If 
proceedings 
against 
the 
person 
concerned 
are 
defini­
whether the data requested are available in the Europol Infor­
tively dropped or if that person is definitively acquitted, the 
mation System. Further information may then be obtained via 
data relating to the case in respect of which either decision 
the national unit. 
has been taken shall be deleted. 
7.  Information concerning the competent authorities 
Article 13 
designated in accordance with paragraph 6, including 
Use of the Europol Information System 
subsequent modifications, shall be transmitted to the General 
Secretariat of the Council, which shall publish the information 
1. National 
units, 
liaison 
officers, 
the 
Director, 
Deputy  in the Official Journal of the European Union. 
Directors and duly empowered Europol staff shall have the 
right to input data directly into the Europol Information 
System and retrieve them from it. Data may be retrieved by 
Europol where that is necessary for the performance of its tasks 
Article 14 
in a particular case. Retrieval by the national units and liaison 
officers shall be effected in accordance with the laws, regu­
Analysis work files 
lations, administrative provisions and procedures of the 
1. Where 
this 
is 
necessary 
for 
the 
performance 
of 
its 
tasks, 
accessing party, subject to any additional provisions laid down 
Europol may store, modify, and use data concerning criminal 
in this Decision. 
offences in respect of which it is competent, including data on 
the related criminal offences referred to in Article 4(3), in 
analysis work files. The analysis work files may contain data 
2. Only 
the 
party 
which 
has 
input 
data 
may 
modify, 
correct  on the following categories of persons: 
or delete such data. Where another party has reason to believe 
that data as referred to in Article 12(2) are incorrect or wishes 
to supplement them, it shall immediately inform the inputting 
party. The inputting party shall examine such information 
(a) persons as referred to in Article 12(1);

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/45
(b) persons who might be called on to testify in investigations 
purpose of a particular analysis work file. Member States shall 
in connection with the offences under consideration or in 
communicate such data only where processing thereof for the 
subsequent criminal proceedings; 
purposes of preventing, analysing or combating offences is also 
authorised by their national law. Depending on their degree of 
urgency, data from designated competent authorities may be 
(c) persons who have been the victims of one of the offences 
routed directly to the analysis work file in accordance with 
under consideration or with regard to whom certain facts 
Article 8(2). 
give reason to believe that they could be the victims of such 
an offence; 
4.  If an analysis is of a general nature and of a strategic type, 
all Member States, through liaison officers and/or experts, shall 
(d) contacts and associates; and 
be fully associated in the findings thereof, in particular through 
the communication of reports drawn up by Europol. 
(e) persons who can provide information on the criminal 
offences under consideration. 
If the analysis bears on specific cases not concerning all Member 
States and has a direct operational aim, representatives of the 
following Member States shall participate therein: 
The processing of personal data revealing racial or ethnic origin, 
political opinions, religious or philosophical beliefs or trade- 
union membership and the processing of data concerning 
(a) Member States which were the source of the information 
health or sex life shall not be permitted unless strictly 
giving rise to the decision to open the analysis work file, or 
necessary for the purposes of the file concerned and unless 
those which are directly concerned by that information, and 
such data supplement other personal data already input in 
Member States subsequently invited by the analysis group to 
that file. The selection of a particular group of persons solely 
take part in the analysis because they are also becoming 
on the basis of the abovementioned sensitive data, in breach of 
concerned; 
the aforementioned rules with regard to purpose, shall be 
prohibited. 
(b) Member  States  which  learn  from  consulting  the  index 
The Council, acting by qualified majority after consulting the 
function referred to in Article 15 that they need to be 
European Parliament, shall adopt implementing rules for 
informed and assert that need to know under the conditions 
analysis work files prepared by the Management Board, which 
laid down in paragraph 5 of this Article. 
shall previously have obtained the opinion of the Joint Super­
visory Body, containing additional details, in particular with 
regard to the categories of personal data referred to in this 
5.  The need to be informed may be claimed by authorised 
Article, to the security of the data concerned and to the 
liaison officers. Each Member State shall nominate and authorise 
internal supervision of their use. 
a limited number of such liaison officers. 
2. Analysis 
work 
files 
shall 
be 
opened 
for 
the 
purposes 
of 
analysis defined as the assembly, processing or use of data with 
A liaison officer shall claim the need to be informed as provided 
the aim of assisting criminal investigations. Each analysis project 
for in point (b) of the second subparagraph of paragraph 4 by 
shall entail the establishment of an analysis group closely asso­
means of a written reasoned statement approved by the 
ciating the following participants: 
authority to which he is subordinate in his Member State and 
forwarded to all the participants in the analysis. He shall then be 
associated automatically in the analysis in progress. 
(a) analysts and other Europol staff designated by the Director; 
If an objection is raised in the analysis group, automatic asso­
(b) liaison  officers  and/or  experts  from  the  Member  States 
ciation shall be deferred until the completion of a conciliation 
supplying the information or concerned by the analysis 
procedure, which shall comprise three stages as follows: 
within the meaning of paragraph 4. 
(a) the participants in the analysis shall endeavour to reach 
Only analysts shall be authorised to input data into the file 
agreement with the liaison officer claiming the need to be 
concerned and modify such data. All participants in the 
informed. They shall have no more than eight days for that 
analysis group may retrieve data from the file. 
purpose; 
3. At 
the 
request 
of 
Europol 
or 
on 
their 
own 
initiative,  (b) if no agreement is reached, the heads of the national units 
national units shall, subject to Article 8(5), communicate to 
concerned and the Director shall meet within three days and 
Europol all the information which it may require for the 
try to reach agreement;

L 121/46 
EN 
Official Journal of the European Union 
15.5.2009
(c)  if the disagreement persists, the representatives of the parties 
The association of experts from an entity with the activities of 
concerned on the Management Board shall meet within 
an analysis group shall be subject to an arrangement between 
eight days. If the Member State concerned does not waive 
Europol and the entity. The rules governing such arrangements 
its need to be informed, association of that Member State 
shall be determined by the Management Board. 
shall be decided on by consensus. 
Details of the arrangements between Europol and entities shall 
6. The 
Member 
State 
communicating 
an 
item 
of 
data 
to  be sent to the Joint Supervisory Body, which may address any 
Europol shall be the sole judge of the degree of its sensitivity 
comments it deems necessary to the Management Board. 
and variations thereof and shall be entitled to determine the 
conditions for the handling of the data. Any dissemination or 
operational use of data communicated shall be decided on by 
Article 15 
the Member State that communicated the data to Europol. If it 
cannot be determined which Member State communicated the 
Index function 
data to Europol, the decision on dissemination or operational 
use of data shall be taken by the participants in the analysis. A 
1. An 
index 
function 
shall 
be 
created 
by 
Europol 
for 
the 
data 
Member State or an associated expert joining an analysis in 
stored in the analysis work files. 
progress may not, in particular, disseminate or use the data 
without the prior agreement of the Member States initially 
concerned. 
2. The 
Director, 
the 
Deputy 
Directors, 
duly 
empowered 
Europol staff, liaison officers and duly empowered members 
of national units shall have the right to access the index 
function. The index function shall be such that it is clear to 
7.  By way of derogation from paragraph 6, in cases in which 
the person using it, from the data being consulted, whether an 
Europol finds, after the time of inclusion of data in an analysis 
analysis work file contains data which are of interest for the 
work file, that those data relate to a person or object on which 
performance of the tasks of the person using the index function. 
data submitted by another Member State or third party were 
already input in the file, the Member State or third party 
concerned shall be informed immediately of the link identified, 
in accordance with Article 17. 
3. Access 
to 
the 
index 
function 
shall 
be 
defined 
in 
such 

way that it is possible to determine whether or not an item of 
information is stored in an analysis work file, but not to 
establish connections or further conclusions regarding the 
8. Europol 
may 
invite 
experts 
from 
the 
entities 
referred 
to 
in  content of the file. 
Articles 22(1) or 23(1) to be associated with the activities of an 
analysis group, where: 
4. The Management Board shall define the detailed 
procedures for the design of the index function, including the 
(a)  an agreement or working arrangement such as referred to in 
conditions of access to the index function, after obtaining the 
Articles 22(2) and 23(2) which contains appropriate 
advice of the Joint Supervisory Body. 
provisions on the exchange of information, including the 
transmission of personal data, and on the confidentiality of 
exchanged information, is in force between Europol and the 
entity concerned; 
Article 16 
Order opening an analysis work file 
1. For 
every 
analysis 
work 
file, 
the 
Director 
shall 
specify 
in 
(b) the association of the experts from the entity is in the 
an order opening the file: 
interest of the Member States; 
(a) the file name; 
(c)  the entity is directly concerned by the analysis work; and 
(b) the purpose of the file; 
(d) all participants agree on the association of the experts from 
the entity with the activities of the analysis group. 
(c) the groups of persons concerning whom data are stored; 
Under the conditions laid down in points (b), (c) and (d) of the 
first subparagraph, Europol shall invite experts of the European 
(d) the nature of the data to be stored and personal data 
Anti-Fraud Office to be associated with the activities of the 
revealing racial or ethnic origin, political opinions, 
analysis group if the analysis project concerns fraud or any 
religious or philosophical beliefs or trade-union membership 
other illegal activities affecting the financial interests of the 
and data concerning health or sex life which are strictly 
European Communities. 
necessary;

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/47
(e)  the general context leading to the decision to open the file; 
so request, their liaison officers of any information concerning 
their Member State and of connections identified between 
criminal offences in respect of which Europol is competent 
under Article 4. Information and intelligence concerning other 
(f)  the participants in the analysis group at the time of opening 
serious crime of which Europol becomes aware in the course of 
the file; 
its duties may also be communicated. 
(g)  the conditions under which the personal data stored in the 
file may be communicated, to which recipients and under 
what procedure; 
Article 18 
Provisions on control of retrievals 
Europol shall establish, in cooperation with the Member States, 
(h)  the time limits for examination of the data and the duration 
appropriate control mechanisms to allow the verification of the 
of storage; 
legality of retrievals from any of its automated data files used to 
process personal data and to allow Member States access to the 
audit logs on request. The data thus collected shall be used only 
for the purpose of such verification by Europol and the super­
(i)  the method of establishment of the audit log. 
visory bodies referred to in Articles 33 and 34 and shall be 
deleted after 18 months, unless the data are further required for 
ongoing control. The Management Board shall decide on the 
details of such control mechanisms after consulting the Joint 
2. The 
Management 
Board 
and 
the 
Joint 
Supervisory 
Body  Supervisory Body. 
shall immediately be informed by the Director of the order 
opening the file or any subsequent change in the particulars 
referred to in paragraph 1 and shall receive the dossier. The 
Joint Supervisory Body may address any comments it deems 
necessary to the Management Board. The Director may 
request the Joint Supervisory Body to do that within a 
Article 19 
specified period of time. 
Rules on the use of data 
1. Personal 
data 
retrieved 
from 
any 
of 
Europol’s 
data 
processing files or communicated by any other appropriate 
3. The 
analysis 
work 
file 
shall 
be 
retained 
for 

maximum  means shall be transmitted or used only by the competent 
period of three years. Before the expiry of that three-year period, 
authorities of the Member States in order to prevent and 
Europol shall review the need for the continuation of the file. 
combat crimes in respect of which Europol is competent, and 
When it is strictly necessary for the purpose of the file, the 
to prevent and combat other serious forms of crime. Europol 
Director may order the continuation of the file for a further 
shall use the data only for the performance of its tasks. 
period of three years. The Management Board and the Joint 
Supervisory Body shall immediately be informed by the 
Director of the elements in the file justifying the strict need 
for its continuation. The Joint Supervisory Body shall address 
any comments it deems necessary to the Management Board. 
The Director may request the Joint Supervisory Body to do that 
2.  If, in the case of certain data, the communicating Member 
within a specified period of time. 
State or the communicating third State or third body stipulates 
particular restrictions on use to which such data is subject in 
that Member State, third State or third body, such restrictions 
shall also be complied with by the user of the data except in the 
4. At 
any 
time 
the 
Management 
Board 
may 
instruct 
the  specific case where national law lays down that the restrictions 
Director to amend an opening order or to close an analysis 
on use be waived for judicial authorities, legislative bodies or 
work file. The Management Board shall decide on what date 
any other independent body set up under the law and made 
any such amendment or closure will take effect.
responsible for supervising the national competent authorities. 
 
In such cases, the data shall be used only after consultation of 
the communicating Member State the interests and views of 
which shall be taken into account as far as possible. 
CHAPTER III 
COMMON PROVISIONS ON INFORMATION PROCESSING 
Article 17 
Duty to notify 
3. Use 
of 
the 
data 
for 
other 
purposes 
or 
by 
authorities 
other 
than the national competent authorities shall be possible only 
Without prejudice to Article 14(6) and (7), Europol shall 
after consultation of the Member State which transmitted the 
promptly notify the national units and, if the national units 
data in so far as the national law of that Member State permits.

L 121/48 
EN 
Official Journal of the European Union 
15.5.2009 
Article 20 
the institutions, bodies, offices and agencies set up by, or on the 
basis of, the Treaty on European Union and the Treaties estab­
Time limits for the storage and deletion of data 
lishing the European Communities, in particular: 
1. Europol 
shall 
hold 
data 
in 
data 
files 
only 
for 
as 
long 
as 
is 
necessary for the performance of its tasks. The need for 
continued storage shall be reviewed no later than three years 
after the input of data. Review of data stored in the Europol 
(a) Eurojust; 
Information System and their deletion shall be carried out by 
the inputting unit. Review of data stored in other Europol data 
files and their deletion shall be carried out by Europol. Europol 
shall automatically inform the Member States three months in 
(b) the European Anti-Fraud Office (OLAF) (
advance of the expiry of the time limits for reviewing the 
 1 ); 
storage of data. 
(c) the European Agency for the Management of Operational 
2.  During the review, the units referred to in the third and 
Cooperation at the External Borders of the Member States of 
fourth sentences of paragraph 1 may decide on the continued 
the European Union (Frontex) ( 2 ); 
storage of data until the following review which shall take place 
after another period of three years if that is still necessary for 
the performance of Europol’s tasks. If no decision is taken on 
the continued storage of data, those data shall be deleted auto­
matically. 
(d) the European Police College (CEPOL); 
3.  Where a Member State deletes from its national data files 
(e) the European Central Bank; 
data communicated to Europol which are stored in other 
Europol data files, it shall inform Europol accordingly. In such 
cases, Europol shall delete the data unless it has further interest 
in them, based on intelligence that is more extensive than that 
possessed by the communicating Member State. Europol shall 
(f) the European Monitoring Centre for Drugs and Drug 
inform the Member State concerned of the continued storage of 
Addiction (EMCDDA) ( 3 ). 
such data. 
4. Such 
data 
shall 
not 
be 
deleted 
if 
this 
would 
damage 
the  2. Europol shall conclude agreements or working 
interests of a data subject who requires protection. In such 
arrangements with the entities referred to in paragraph 1. 
cases, the data shall be used only with the consent of the 
Such agreements or working arrangements may concern the 
data subject. 
exchange of operational, strategic or technical information, 
including personal data and classified information. Any such 
agreement or working arrangement may be concluded only 
after approval by the Management Board which shall previously 
Article 21 
have obtained, as far as it concerns the exchange of personal 
data, the opinion of the Joint Supervisory Body. 
Access to data from other information systems 
In so far as Europol is entitled under Union, international or 
national legal instruments to gain computerised access to data 
from other information systems, of national or international 
3.  Before the entry into force of the agreement or working 
nature, Europol may retrieve personal data by such means if 
arrangement referred to in paragraph 2, Europol may directly 
that is necessary for the performance of its tasks. The applicable 
receive and use information, including personal data, from the 
provisions of such Union, international or national legal 
entities referred to in paragraph 1, in so far as that is necessary 
instruments shall govern access to and the use of this data by 
for the legitimate performance of its tasks, and it may, under 
Europol, in so far as they provide for stricter rules on access and 
the conditions laid down in Article 24(1), directly transmit 
use than those of this Decision. 
information, including personal data, to such entities, in so 
far as that is necessary for the legitimate performance of the 
recipient’s tasks.
CHAPTER IV 
( 1 ) Commission Decision 1999/352/EC, ECSC, Euratom of 28 April 
RELATIONS WITH PARTNERS 
1999 establishing the European Anti-fraud Office (OLAF) (OJ 
L 136, 31.5.1999, p. 20). 
Article 22 
( 2 ) Council Regulation (EC) No 2007/2004 of 26 October 2004 estab­
lishing a European Agency for the Management of Operational Co­
Relations with Union or Community institutions, bodies, 
operation at the External Borders of the Member States of the 
offices and agencies 
European Union (OJ L 349, 25.11.2004, p. 1). 
( 3 ) Regulation (EC) No 1920/2006 of the European Parliament and of 
1.  In so far as it is relevant to the performance of its tasks, 
the Council of 12 December 2006 on the European Monitoring 
Europol may establish and maintain cooperative relations with 
Centre for Drugs and Drug Addiction (OJ L 376, 27.12.2006, p. 1).

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/49
4. Transmission 
by 
Europol 
of 
classified 
information 
to 
the  preventing or combating criminal offences in respect of which 
entities referred to in paragraph 1 shall be permissible only in 
Europol is competent. 
so far as agreement on confidentiality exists between Europol 
and the recipient. 
6. Europol 
may, 
under 
the 
conditions 
laid 
down 
in 
Article 24(1), transmit to the entities referred to in paragraph 
Article 23 
1 of this Article: 
Relations with third States and organisations 
1. In 
so 
far 
as 
it 
is 
necessary 
for 
the 
performance 
of 
its 
tasks,  (a) personal data and classified information, where that is 
Europol may also establish and maintain cooperative relations 
necessary in individual cases for the purposes of preventing 
with: 
or combating criminal offences in respect of which Europol 
is competent; and 
(a) third States; 
(b) personal data, where Europol has concluded with the entity 
concerned an agreement as referred to in paragraph 2 of 
(b) organisations such as: 
this Article which permits the transmission of such data on 
the basis of an assessment of the existence of an adequate 
level of data protection ensured by that entity. 
(i) international organisations and their subordinate bodies 
governed by public law; 
7. Transmission 
by 
Europol 
of 
classified 
information 
to 
the 
entities referred to in paragraph 1 shall be permissible only in 
(ii) other bodies governed by public law which are set up 
so far as agreement on confidentiality exists between Europol 
by, or on the basis of, an agreement between two or 
and the recipient. 
more States; and 
8.  By way of derogation from paragraphs 6 and 7 and 
(iii) the  International  Criminal  Police  Organisation 
without prejudice to Article 24(1), Europol may transmit 
(Interpol). 
personal data and classified information which it holds to the 
entities referred to in paragraph 1 of this Article where the 
Director considers the transmission of the data to be absolutely 
2. Europol 
shall 
conclude 
agreements 
with 
the 
entities  necessary to safeguard the essential interests of the Member 
referred to in paragraph 1 which have been put on the list 
States concerned within the scope of Europol’s objectives or 
referred to in Article 26(1)(a). Such agreements may concern 
in the interests of preventing imminent danger associated 
the exchange of operational, strategic or technical information, 
with crime or terrorist offences. The Director shall in all circum­
including personal data and classified information, if transmitted 
stances consider the data-protection level applicable to the body 
via a designated contact point identified by the agreement 
in question with a view to balancing that data-protection level 
referred to in paragraph 6(b) of this Article. Such agreements 
and those interests. The Director shall inform the Management 
may be concluded only after the approval by the Council, which 
Board and the Joint Supervisory Body as soon as possible of his 
shall previously have consulted the Management Board and, as 
or her decision and of the basis of the assessment of the 
far as it concerns the exchange of personal data, obtained the 
adequacy of the level of data protection afforded by the 
opinion of the Joint Supervisory Body via the Management 
entities concerned. 
Board. 
9. Before 
the 
transmission 
of 
personal 
data 
in 
accordance 
3. Before 
the 
entry 
into 
force 
of 
the 
agreements 
referred 
to  with paragraph 8, the Director shall assess the adequacy of 
in paragraph 2, Europol may directly receive and use infor­
the level of data protection afforded by the entities concerned, 
mation, including personal data and classified information, in 
taking into account all the circumstances relevant to the trans­
so far as that is necessary for the legitimate performance of its 
mission of personal data, in particular: 
tasks. 
(a)  the nature of the data; 
4. Before 
the 
entry 
into 
force 
of 
the 
agreements 
referred 
to 
in paragraph 2, Europol may, under the conditions laid down in 
Article 24(1), directly transmit information other than personal 
(b) the purpose for which the data is intended; 
data and classified information to the entities referred to in 
paragraph 1 of this Article, in so far as that is necessary for 
the legitimate performance of the recipient’s tasks. 
(c) the duration of the intended processing; 
5. Europol 
may, 
under 
the 
conditions 
laid 
down 
in  (d) the general or specific data-protection provisions applying 
Article 24(1), directly transmit information other than 
to the entity; 
personal data and classified information to the entities 
referred to in paragraph 1 of this Article which are not on 
the list referred to in Article 26(1)(a), in so far as that is abso­
(e) whether or not the entity has agreed to specific conditions 
lutely necessary in individual cases for the purposes of 
required by Europol concerning the data.

L 121/50 
EN 
Official Journal of the European Union 
15.5.2009
Article 24 
(b) Personal data from private parties which are established 
under the law of a third State with which Europol has, in 
Transmission of data 
accordance with Article 23, concluded a cooperation 
1. If 
the 
data 
concerned 
were 
transmitted 
to 
Europol 
by 

agreement allowing for the exchange of personal data 
Member State, Europol shall transmit them to the entities 
may be transmitted to Europol only via the contact point 
referred to in Article 22(1) and Article 23(1) only with that 
of that State as identified by, and in accordance with, the 
Member State’s consent. The Member State concerned may 
cooperation agreement in force. 
give its prior consent, in general terms or subject to specific 
conditions, to such transmission. Such consent may be 
withdrawn at any time. 
(c) Personal data from private parties which are established 
under the law of a third State with which Europol has no 
If the data were not transmitted by a Member State, Europol 
cooperation agreement allowing for the exchange of 
shall satisfy itself that transmission of those data is not liable to: 
personal data may be processed by Europol only if: 
(a)  obstruct the proper performance of the tasks in respect of 
which a Member State is competent; 
(i) the private party concerned is on the list referred to in 
Article 26(2); and 
(b) jeopardise the security or public order of a Member State or 
otherwise prejudice its general welfare. 
(ii) Europol and the private party concerned have concluded 
a memorandum of understanding on the transmission 
2. Europol 
shall 
be 
responsible 
for 
the 
legality 
of 
the 
trans­
of information, including personal data, confirming the 
mission of data. Europol shall keep a record of all transmissions 
legality of the collection and transmission of the 
of data under this Article and of the grounds for such trans­
personal data by that private party and specifying that 
missions. Data shall be transmitted only if the recipient gives an 
the personal data transmitted may be used only for the 
undertaking that the data will be used only for the purpose for 
legitimate performance of Europol’s tasks. Such a 
which they were transmitted. 
memorandum of understanding may be concluded 
only after approval by the Management Board which 
shall previously have obtained the opinion of the Joint 
Article 25 
Supervisory Body. 
Information from private parties and private persons 
1. For 
the 
purpose 
of 
this 
Decision: 
If the transmitted data affect interests of a Member State, 
Europol shall immediately inform the national unit of the 
Member State concerned. 
(a) ‘private parties’ shall mean entities and bodies established 
under the law of a Member State or a third State, especially 
companies and firms, business associations, non-profit 
organisations and other legal persons governed by private 
law, which do not fall under Article 23(1); 
4. In 
addition 
to 
the 
processing 
of 
data 
from 
private 
parties 
in accordance with paragraph 3, Europol may directly retrieve 
and process data, including personal data, from publicly 
available sources, such as media and public data and 
(b) ‘private persons’ shall mean all natural persons. 
commercial intelligence providers, in accordance with the 
data-protection provisions of this Decision. In accordance 
with Article 17, Europol shall forward all relevant information 
2.  In so far as it is necessary for the legitimate performance 
to the national units. 
of its tasks, Europol may process information, including 
personal data, from private parties under the conditions laid 
down in paragraph 3. 
5. Information, 
including 
personal 
data, 
from 
private 
persons 
may be processed by Europol if it is received via a national unit 
3. Personal 
data 
from 
private 
parties 
may 
be 
processed 
by  in accordance with national law or via the contact point of a 
Europol under the following conditions: 
third State with which Europol has concluded a cooperation 
agreement in accordance with Article 23. If Europol receives 
information, including personal data, from a private person 
(a) Personal data from private parties which are established 
residing in a third State with which Europol has no cooperation 
under the law of a Member State may be processed by 
agreement, Europol may forward it only to the Member State or 
Europol only if they are transmitted via the national unit 
the third State concerned with which Europol has concluded a 
of that Member State in accordance with its national law. 
cooperation agreement in accordance with Article 23. Europol 
Europol may not contact private parties in the Member 
may not contact private persons directly in order to retrieve 
States directly in order to retrieve information. 
information.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/51
6. Personal 
data 
transmitted 
to 
or 
retrieved 
by 
Europol 
under 
CHAPTER V 
paragraph 3(c) of this Article may only be processed for the 
purpose of their inclusion in the Europol Information System 
DATA PROTECTION AND DATA SECURITY 
referred to in Article 11 and the analysis work files referred to 
Article 27 
in Article 14 or other systems processing personal data estab­
lished in accordance with Article 10(2) and (3) if those data are 
Standard of data protection 
related to other data already entered in one of the aforemen­
Without prejudice to specific provisions of this Decision, 
tioned systems or if they are related to a previous query by a 
Europol shall take account of the principles of the Council of 
national unit within one of the aforementioned systems. 
Europe Convention for the Protection of Individuals with regard 
to Automatic Processing of Personal Data of 28 January 1981 
and of Recommendation No R (87) 15 of the Committee of 
Ministers of the Council of Europe of 17 September 1987. 
The responsibility for data processed by Europol, which have 
Europol shall observe those principles in the processing of 
been transmitted under the conditions laid down in paragraph 
personal data, inter alia, in respect of automated and non- 
3(b) and (c) and paragraph 4 of this Article, and for the infor­
automated data held in the form of data files, especially any 
mation transmitted via the contact point of a third State with 
structured set of personal data accessible in accordance with 
which Europol has concluded a cooperation agreement in 
specific criteria. 
accordance with Article 23, shall lie with Europol in accordance 
with Article 29(1)(b). 
Article 28 
Data Protection Officer 
7. The 
Director 
shall 
submit 

comprehensive 
report 
to 
the  1. The 
Management 
Board 
shall 
appoint, 
on 
the 
proposal 
of 
Management Board on the application of this Article two years 
the Director, a Data Protection Officer who shall be a member 
after the date of application of this Decision. On the advice of 
of the staff. In the performance of his or her duties, he or she 
the Joint Supervisory Body or on its own initiative, the 
shall act independently. 
Management Board may take any measure deemed appropriate 
in accordance with Article 37(9)(b). 
2. The 
Data 
Protection 
Officer 
shall 
in 
particular 
have 
the 
following tasks: 
Article 26 
(a) ensuring,  in  an  independent  manner,  lawfulness  and 
Implementing rules governing Europol’s relations 
compliance with the provisions of this Decision concerning 
1. The 
Council, 
acting 
by 
qualified 
majority 
after 
consulting 
the processing of personal data, including the processing of 
the European Parliament, shall: 
personal data relating to Europol staff; 
(b) ensuring that a written record of the transmission and 
receipt of personal data is kept in accordance with this 
(a) determine, in a list, the third States and organisations 
Decision; 
referred to in Article 23(1) with which Europol shall 
conclude agreements. The list shall be prepared by the 
Management Board and reviewed when necessary; and 
(c) ensuring that data subjects are informed of their rights 
under this Decision at their request; 
(b) adopt  implementing  rules  governing  the  relations  of 
(d) cooperating with Europol staff responsible for procedures, 
Europol with the entities referred to in Articles 22(1) and 
training and advice on data processing; 
23(1), including the exchange of personal data and classified 
information. The implementing rules shall be prepared by 
the Management Board which shall previously have 
obtained the opinion of the Joint Supervisory Body. 
(e) cooperating with the Joint Supervisory Body; 
(f)  preparing an annual report and communicating that report 
2. The 
Management 
Board 
shall 
draw 
up 
and 
review, 
when 
to the Management Board and to the Joint Supervisory 
necessary, a list determining the private parties with which 
Body. 
Europol may conclude memoranda of understanding in 
accordance with Article 25(3)(c)(ii) and adopt rules governing 
the content of and the procedure for the conclusion of such 
3. 
In the performance of his or her tasks, the Data Protection 
memoranda of understanding after obtaining the opinion of the 
Officer shall have access to all the data processed by Europol 
Joint Supervisory Body. 
and to all Europol premises.

L 121/52 
EN 
Official Journal of the European Union 
15.5.2009
4.  If the Data Protection Officer considers that the provisions 
3. In 
addition, 
subject 
to 
other 
provisions 
in 
this 
Decision, 
of this Decision concerning the processing of personal data 
Europol shall be responsible for all data processed by it. 
have not been complied with, he or she shall inform the 
Director, requiring him or her to resolve the non-compliance 
within a specified time. 
4. If 
Europol 
has 
evidence 
that 
data 
input 
into 
one 
of 
its 
systems referred to in Chapter II are factually incorrect or have 
been unlawfully stored, it shall inform the Member State or 
other party involved accordingly. 
If the Director does not resolve the non-compliance of the 
processing within the specified time, the Data Protection 
Officer shall inform the Management Board and shall agree 
5. Europol 
shall 
store 
data 
in 
such 

way 
that 
it 
can 
be 
with the Management Board a specified time for a response. 
established by which Member State or third party they were 
transmitted or whether they are the result of an analysis by 
Europol. 
If the Management Board does not resolve the non-compliance 
of the processing within the specified time, the Data Protection 
Officer shall refer the matter to the Joint Supervisory Body. 
Article 30 
Individual’s right of access 
1. Any 
person 
shall 
be 
entitled, 
at 
reasonable 
intervals, 
to 
5. The 
Management 
Board 
shall 
adopt 
further 
implementing  obtain information on whether personal data relating to him or 
rules concerning the Data Protection Officer. Those implemen­
her are processed by Europol and to have such data commu­
ting rules shall in particular concern selection and dismissal, 
nicated to him or her in an intelligible form, or checked, in all 
tasks, duties and powers and safeguards for the independence 
cases under the conditions laid down in this Article. 
of the Data Protection Officer. 
2. Any 
person 
wishing 
to 
exercise 
his 
or 
her 
rights 
under 
this Article may make a request to that effect without excessive 
Article 29 
costs in the Member State of his or her choice to the authority 
Responsibility in data protection matters 
appointed for that purpose in that Member State. That authority 
shall refer the request to Europol without delay, and in any case 
1.  The responsibility for data processed at Europol, in 
within one month of receipt. 
particular as regards the legality of the collection, the trans­
mission to Europol and the input of data, as well as their 
accuracy, their up-to-date nature and verification of the 
3. The 
request 
shall 
be 
answered 
by 
Europol 
without 
undue 
storage time limits, shall lie with: 
delay and in any case within three months of its receipt by 
Europol in accordance with this Article. 
(a) the Member State which input or otherwise communicated 
4. Europol 
shall 
consult 
the 
competent 
authorities 
of 
the 
the data; 
Member States concerned before deciding on its response to a 
request under paragraph 1. A decision on access to data shall be 
conditional upon close cooperation between Europol and the 
(b) Europol in respect of data communicated to Europol by 
Member States directly concerned by the communication of 
third parties, including data communicated by private 
such data. In any case in which a Member State objects to 
parties in accordance with Article 25(3)(b) and (c) and 
Europol’s proposed response, it shall notify Europol of the 
Article 25(4) as well as data communicated via the 
reasons for its objection. 
contact point of a third State with which Europol has 
concluded a cooperation agreement in accordance with 
Article 23 or which result from analyses conducted by 
5. The 
provision 
of 
information 
in 
response 
to 

request 
Europol. 
under paragraph 1 shall be refused to the extent that such 
refusal is necessary to: 
2. Data 
which 
have 
been 
transmitted 
to 
Europol 
but 
have  (a) enable Europol to fulfil its tasks properly; 
not yet been input in one of Europol’s data files shall remain 
under the data-protection responsibility of the party trans­
mitting the data. Europol shall, however, be responsible for 
(b) protect security and public order in the Member States or to 
ensuring the security of the data in accordance with 
prevent crime; 
Article 35(2) in that until such data have been input in a 
data file, they may be accessed only by authorised Europol 
staff for the purpose of determining whether they can be 
(c) guarantee  that  any  national  investigation  will  not  be 
processed at Europol, or by authorised officials of the party 
jeopardised; 
which supplied the data. If Europol, after appraising them, has 
reason to assume that data supplied are inaccurate or no longer 
up-to-date, it shall inform the party which supplied the data. 
(d) protect the rights and freedoms of third parties.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/53
When the applicability of an exemption is assessed, the interests 
three months that data concerning him or her have been 
of the person concerned shall be taken into account. 
corrected or deleted. 
6. If 
the 
provision 
of 
information 
in 
response 
to 

request 
under paragraph 1 is refused, Europol shall notify the person 
Article 32 
concerned that it has carried out checks, without giving any 
information which might reveal to him or her whether or not 
Appeals 
personal data concerning him or her are processed by Europol. 
1.  In its reply to a request for a check, for access to data, or 
for correction and deletion of data, Europol shall inform the 
person making the request that if he or she is not satisfied with 
the decision, he or she may appeal to the Joint Supervisory 
7. Any 
person 
shall 
have 
the 
right 
to 
request 
the 
Joint 
Super­
Body. Such person may also refer the matter to the Joint Super­
visory Body, at reasonable intervals, to check whether the 
visory Body if there has been no response to his or her request 
manner in which his or her personal data have been 
within the time limit laid down in Article 30 or 31. 
collected, stored, processed and used by Europol is in 
compliance with the provisions of this Decision concerning 
the processing of personal data. The Joint Supervisory Body 
shall notify the person concerned that it has carried out 
checks, without giving any information which might reveal to 
him or her whether or not personal data concerning him or her 
2. If 
the 
person 
making 
the 
request 
lodges 
an 
appeal 
to 
the 
are processed by Europol. 
Joint Supervisory Body, the appeal shall be examined by that 
body. 
Article 31 
Data subject’s right to correctionand deletion of data 
3.  Where an appeal relates to a decision as referred to in 
1.  Any person shall have the right to ask Europol to correct 
Article 30 or 31, the Joint Supervisory Body shall consult the 
or delete incorrect data concerning him or her. If it emerges, 
national supervisory bodies or the competent judicial body in 
either on the basis of the exercise of this right or otherwise, that 
the Member State which was the source of the data or the 
data held by Europol which have been communicated to it by 
Member State directly concerned. The decision of the Joint 
third parties or which are the result of its own analyses are 
Supervisory Body, which may extend to a refusal to commu­
incorrect or that their input or storage is in breach of this 
nicate any information, shall be taken in close cooperation with 
Decision, Europol shall correct or delete such data. 
the national supervisory body or competent judicial body. 
2.  If data that are incorrect or processed in breach of this 
Decision were transmitted directly to Europol by Member 
4. Where 
an 
appeal 
relates 
to 
access 
to 
data 
input 
by 
States, the Member States concerned shall correct or delete 
Europol in the Europol Information System or data stored in 
such data in collaboration with Europol. 
the analysis work files or in any other system established by 
Europol for the processing of personal data pursuant to 
Article 10 and where objections from Europol persist, the 
Joint Supervisory Body shall be able to overrule such objections 
3. If 
incorrect 
data 
were 
transmitted 
by 
another 
appropriate  only by a majority of two thirds of its members after having 
means or if the errors in the data supplied by Member States are 
heard Europol and the Member State or Member States referred 
due to faulty transmission or were transmitted in breach of this 
to in Article 30(4). If there is no such majority, the Joint Super­
Decision or if they result from their being input, taken over or 
visory Body shall notify the person making the request of the 
stored in an incorrect manner or in breach of this Decision by 
refusal, without giving any information which might reveal the 
Europol, Europol shall correct or delete the data in collaboration 
existence of any personal data concerning that person. 
with the Member States concerned. 
4. In 
the 
cases 
referred 
to 
in 
paragraphs 
1, 

and 
3, 
the  5. Where 
an 
appeal 
relates 
to 
the 
checking 
of 
data 
input 
by 

Member States or third parties which have received the data 
Member State in the Europol Information System or of data 
shall be notified forthwith. The recipient Member States and 
stored in the analysis work files or in any other system estab­
the third parties shall also correct or delete those data. Where 
lished by Europol for the processing of personal data pursuant 
deletion is not possible, the data shall be blocked to prevent any 
to Article 10, the Joint Supervisory Body shall ensure that the 
future processing. 
necessary checks have been carried out correctly in close co­
operation with the national supervisory body of the Member 
State which has input the data. The Joint Supervisory Body shall 
notify the person making the request that it has carried out the 
5. The 
data 
subject 
making 
the 
request 
shall 
be 
informed 
by  checks, without giving any information which might reveal the 
Europol in writing without undue delay and in any case within 
existence of any personal data concerning that person.

L 121/54 
EN 
Official Journal of the European Union 
15.5.2009
6. Where 
an 
appeal 
relates 
to 
the 
checking 
of 
data 
input 
by  data held by Europol. In addition, the Joint Supervisory Body 
Europol in the Europol Information System or of data stored in 
shall monitor the permissibility of the transmission of data 
the analysis work files or in any other system established by 
originating from Europol. The Joint Supervisory Body shall be 
Europol for the processing of personal data pursuant to 
composed of a maximum of two members or representatives, 
Article 10, the Joint Supervisory Body shall ensure that the 
where appropriate assisted by alternates, of each of the inde­
necessary checks have been carried out by Europol. The Joint 
pendent national supervisory bodies, having the necessary 
Supervisory Body shall notify the person making the request 
abilities and appointed for five years by each Member State. 
that it has carried out the checks, without giving any infor­
Each delegation shall be entitled to one vote. 
mation which might reveal the existence of any personal data 
concerning that person. 
The Joint Supervisory Body shall choose a chairman from 
among its members. 
Article 33 
National supervisory body 
In the performance of their duties, the members of the Joint 
1.  Each Member State shall designate a national supervisory 
Supervisory Body shall not receive instructions from any other 
body with the task to monitor independently, in accordance 
body. 
with its national law, the permissibility of the input, the 
retrieval and any communication to Europol of personal data 
by the Member State concerned and to examine whether such 
2. Europol 
shall 
assist 
the 
Joint 
Supervisory 
Body 
in 
the 
input, retrieval or communication violates the rights of the data 
performance of the latter’s tasks. In doing so, it shall in 
subject. For that purpose, the national supervisory body shall 
particular: 
have access, at the national unit or at liaison officers’ premises, 
to the data input by the Member State in the Europol Infor­
mation System or in any other system established by Europol 
(a)  supply the information the Joint Supervisory Body requests 
for the processing of personal data pursuant to Article 10 in 
and give it access to all documents and paper files as well as 
accordance with the relevant national procedures. 
to the data stored in its data files; 
For the purpose of exercising their supervisory function, 
(b) allow the Joint Supervisory Body free access at all times to 
national supervisory bodies shall have access to the offices 
all its premises; 
and documents of their respective liaison officers at Europol. 
(c) implement  the  Joint  Supervisory  Body’s  decisions  on 
appeals. 
In addition, in accordance with the relevant national procedures, 
the national supervisory bodies shall supervise the activities of 
national units and the activities of liaison officers, in so far as 
such activities are of relevance to the protection of personal 
3. The 
Joint 
Supervisory 
Body 
shall 
be 
competent 
to 
examine 
questions relating to implementation and interpretation in 
data. They shall also keep the Joint Supervisory Body 
connection with Europol’s activities as regards the processing 
informed of any actions they take with respect to Europol. 
and use of personal data, to examine questions relating to 
checks carried out independently by the national supervisory 
bodies of the Member States or relating to the exercise of the 
right of access, and to draw up harmonised proposals for 
2. Any 
person 
shall 
have 
the 
right 
to 
request 
the 
national  common solutions to existing problems. 
supervisory body to ensure that the input or communication to 
Europol of data concerning him or her in any form and the 
consultation of the data by the Member State concerned are 
lawful. 
4. If 
the 
Joint 
Supervisory 
Body 
identifies 
any 
violations 
of 
the provisions of this Decision in the storage, processing or use 
of personal data, it shall make any complaints it deems 
necessary to the Director and shall request him to reply 
This right shall be exercised in accordance with the national law 
within a specified time limit. The Director shall keep the 
of the Member State in which the request is made. 
Management Board informed of the entire procedure. If it is 
not satisfied with the response given by the Director to its 
request, the Joint Supervisory Body shall refer the matter to 
the Management Board. 
Article 34 
Joint Supervisory Body 
5.  For the fulfilment of its tasks and to contribute to the 
1. An 
independent 
Joint 
Supervisory 
Body 
shall 
be 
set 
up 
to  improvement of consistency in the application of the rules 
review, in accordance with this Decision, the activities of 
and procedures for data processing, the Joint Supervisory 
Europol in order to ensure that the rights of the individual 
Body shall cooperate as necessary with other supervisory auth­
are not violated by the storage, processing and use of the 
orities.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/55
6. The 
Joint 
Supervisory 
Body 
shall 
draw 
up 
activity 
reports  (b) prevent the unauthorised reading, copying, modification or 
at regular intervals. Such reports shall be forwarded to the 
removal of data media (data media control); 
European Parliament and to the Council. The Management 
Board shall have the opportunity to make comments, which 
shall be attached to the reports. 
(c)  prevent the unauthorised input of data and the unauthorised 
inspection, modification or deletion of stored personal data 
(storage control); 
The Joint Supervisory Body shall decide whether or not to 
publish its activity report, and, if it decides to do so, shall 
determine how it should be published. 
(d) prevent the use of automated data-processing systems by 
unauthorised persons using data-communication 
equipment (user control); 
7. The 
Joint 
Supervisory 
Body 
shall 
adopt 
its 
rules 
of 
procedure by a majority of two thirds of its members and 
shall submit them to the Council for approval. The Council 
shall act by qualified majority. 
(e) ensure that persons authorised to use an automated data- 
processing system have access only to the data covered by 
their access authorisation (data access control); 
8. The 
Joint 
Supervisory 
Body 
shall 
set 
up 
an 
internal 
committee comprising one qualified representative from each 
Member State with the right to vote. The committee shall 
(f) ensure that it is possible to verify and establish to which 
have the task of examining the appeals provided for in 
bodies personal data may be or have been transmitted using 
Article 32 by all appropriate means. Should they so request, 
data communication equipment (communication control); 
the parties, assisted by their advisers if they so wish, shall be 
heard by the committee. The decisions taken in this context 
shall be final as regards all the parties concerned. 
(g) ensure that it is possible to verify and establish which 
personal data have been input into automated data- 
processing systems and when and by whom the data were 
input (input control); 
9. The 
Joint 
Supervisory 
Body 
may 
set 
up 
one 
or 
more 
other 
committees in addition to the one referred to in paragraph 8. 
(h) prevent the unauthorised reading, copying, modification or 
deletion of personal data during transfers of personal data 
10. The 
Joint 
Supervisory 
Body 
shall 
be 
consulted 
on 
that 
or during the transportation of data media (transport 
part of Europol’s budget which concerns it. Its opinion shall be 
control); 
annexed to the draft budget in question. 
(i) ensure that installed systems may, in the event of inter­
11. The 
Joint 
Supervisory 
Body 
shall 
be 
assisted 
by 

secre­
ruption, be restored immediately (recovery); 
tariat, the tasks of which shall be defined in the rules of 
procedure. 
(j)  ensure that the functions of the system perform without 
fault, that the appearance of faults in the functions is im­
Article 35 
mediately reported (reliability) and that stored data cannot 
Data security 
be corrupted by system malfunctions (integrity). 
1. Europol 
shall 
take 
the 
necessary 
technical 
and 
organisa­
tional measures to ensure the implementation of this Decision. 
Measures shall be considered necessary where the effort they 
CHAPTER VI 
involve is proportionate to the objective they are designed to 
ORGANISATION 
achieve in terms of protection. 
Article 36 
Organs of Europol 
2. In 
respect 
of 
automated 
data 
processing 
at 
Europol, 
each  The organs of Europol shall be: 
Member State and Europol shall implement measures designed 
to: 
(a) the Management Board; 
(a) deny  unauthorised  persons  access  to  data-processing 
equipment used for processing personal data (equipment 
access control); 
(b) the Director.

L 121/56 
EN 
Official Journal of the European Union 
15.5.2009 
Article 37 
(b)  oversee the Director’s performance including the implemen­
tation of Management Board decisions; 
Management Board 
1. The 
Management 
Board 
shall 
be 
composed 
of 
one 
rep­
resentative of each Member State and one representative of the 
(c) take any decision or implementing measures in accordance 
Commission. Each member of the Management Board shall 
with this Decision; 
have one vote. Each member of the Management Board may 
be represented by an alternate member; in the absence of the 
full member, the alternate member may exercise his right to 
vote. 
(d) adopt the implementing rules applicable to Europol staff, on 
a proposal from the Director and after seeking agreement 
from the Commission; 
2. The 
Chairperson 
and 
the 
Deputy 
Chairperson 
of 
the 
Management Board shall be selected by and from within the 
group of three Member States who have jointly prepared the 
(e)  adopt the financial regulation and appoint the accounting 
Council’s eighteen-month programme. They shall serve for the 
officer in conformity with Commission Regulation (EC, 
eighteen-month period corresponding to that Council 
Euratom) No 2343/2002 of 19 November 2002 on the 
programme. During that period the Chairperson shall no 
framework Financial Regulation for the bodies referred to 
longer act as a representative of his or her respective Member 
in Article 185 of Council Regulation (EC, Euratom) No 
State in the Management Board. The Deputy shall ex officio 
1605/2002 on the Financial Regulation applicable to the 
replace the Chairperson in the event of his or her being 
general budget of the European Communities ( 1 ), after 
prevented from attending to his or her duties. 
consulting the Commission; 
3. The 
Chairperson 
shall 
be 
responsible 
for 
the 
efficient 
operation of the Management Board in the performance of its 
(f) establish the internal audit function and appoint its auditing 
tasks set out in paragraph 9 while ensuring a specific focus on 
staff, who shall be members of Europol staff. The 
strategic issues and Europol’s principal tasks as set out in 
Management Board shall adopt further implementing rules 
Article 5(1). 
concerning the internal audit function. Those implementing 
rules should, in particular, cover selection, dismissal, tasks, 
duties, powers and safeguards for the independence of the 
4. The 
Chairperson 
shall 
be 
supported 
by 
the 
Secretariat 
of 
function. The internal audit function shall be accountable 
the Management Board. The Secretariat shall in particular: 
solely to the Management Board and shall have access to all 
documentation necessary to the performance of its duties; 
(a) be closely and continuously involved in organising, coordi­
nating and ensuring the coherence of the Management 
(g) adopt a list of at least three candidates for the post of 
Board’s work. Under the responsibility and guidance of 
Director and the Deputy Directors for submission to the 
the Chairperson, it shall assist the latter in seeking solutions; 
Council; 
(b) provide the Management Board with the administrative 
support necessary for it to carry out its duties. 
(h) be  responsible  for  the  performance  of  any  other  tasks 
assigned to it by the Council, in particular in provisions 
implementing this Decision; 
5. The 
Director 
shall 
participate 
in 
the 
meetings 
of 
the 
Management Board, without the right to vote. 
(i) establish its rules of procedure, including provisions 
providing for the independence of the Secretariat. 
6. Members 
of 
the 
Management 
Board 
or 
their 
alternates 
and 
the Director may be accompanied by experts. 
10. Each 
year 
the 
Management 
Board 
shall 
adopt: 
7.  The Management Board shall meet at least twice a year. 
(a) the draft estimate of revenue and expenditure, including the 
8. The 
Management 
Board 
shall 
act 
by 

majority 
of 
two 
draft establishment plan, to be submitted to the 
thirds of its members unless otherwise stipulated in this 
Commission; and the final budget; 
Decision. 
9. The 
Management 
Board 
shall: 
(b) a work programme for Europol’s future activities taking into 
account Member States’ operational requirements and 
budgetary and staffing implications for Europol, after the 
(a) adopt  a  strategy  for  Europol,  which  shall  include 
Commission has delivered an opinion;
benchmarks to measure whether the objectives set have 
been reached; 
( 1 ) OJ L 357, 31.12.2002, p. 72.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/57
(c) a general report on Europol’s activities during the previous 
(b) day-to-day administration; 
year including the results achieved on the priorities set by 
the Council. 
(c) exercising, in respect of the staff and Deputy Directors 
Those documents shall be submitted to the Council for endor­
without prejudice to paragraphs 2 and 7 of this Article, 
sement. The Council shall forward them to the European 
the powers laid down in Article 39(3); 
Parliament for information. 
(d) preparing  and  implementing  the  Management  Board’s 
11.  Within four years of the date of application of this 
decisions and responding to requests from the Management 
Decision and every four years thereafter, the Management 
Board; 
Board shall commission an independent external evaluation of 
the implementation of this Decision and of the activities carried 
out by Europol. 
(e) supporting the Chairperson of the Management Board in 
the preparation of the Management Board meetings; 
The Management Board shall issue specific terms of reference to 
that effect. 
(f) drawing up the draft estimate of revenue and expenditure, 
including the draft establishment plan; and the preliminary 
The report of the evaluation shall be forwarded to the European 
work programme; 
Parliament, the Council and the Commission. 
12. The 
Management 
Board 
may 
decide 
to 
establish 
working  (g) elaborating the report referred to in Article 37(10)(c); 
groups. The rules governing the creation and functioning of 
such working groups shall be laid down in its rules of 
procedure. 
(h) implementing Europol’s budget; 
13. The 
Management 
Board 
shall 
exercise 
the 
powers 
laid 
down in Article 39(3) in respect of the Director, without 
(i) informing the Management Board on a regular basis 
prejudice to Article 38(1) and (7). 
regarding the implementation of the priorities defined by 
the Council and Europol’s external relations; 
Article 38 
Director 
(j) establishing and implementing, in cooperation with the 
1.  Europol shall be headed by a Director appointed by the 
Management Board, an effective and efficient monitoring 
Council, acting by qualified majority, from a list of at least three 
and evaluation procedure relating to Europol’s performance 
candidates presented by the Management Board, for a four-year 
in terms of the achievement of its objectives. The Director 
period. The Council, acting on a proposal from the 
shall report regularly to the Management Board on the 
Management Board, which shall have evaluated the Director’s 
results of that monitoring; 
performance, may extend the term of office of the Director 
once for not more than four years. 
(k) performance of all other tasks assigned to the Director in 
this Decision. 
2. The 
Director 
shall 
be 
assisted 
by 
three 
Deputy 
Directors 
appointed for a four-year period extendable once in accordance 
with the procedure laid down in paragraph 1. Their tasks shall 
be defined in greater detail by the Director. 
5. The 
Director 
shall 
be 
accountable 
to 
the 
Management 
Board in respect of the performance of his duties. 
3. The 
Management 
Board 
shall 
establish 
rules 
concerning 
the selection of candidates for the position of Director or 
Deputy Director, including the extension of their terms of 
6. The 
Director 
shall 
be 
Europol’s 
legal 
representative. 
office. Such rules shall be approved by the Council, acting by 
qualified majority, before their entry into force. 
7. The 
Director 
and 
the 
Deputy 
Directors 
may 
be 
dismissed 
by decision of the Council, acting by qualified majority after 
4. The 
Director 
shall 
be 
responsible 
for: 
obtaining the opinion of the Management Board. The 
Management Board shall establish the rules to be applied in 
such cases. Such rules shall be approved by the Council, 
(a) performance of the tasks assigned to Europol; 
acting by qualified majority, before their entry into force.

L 121/58 
EN 
Official Journal of the European Union 
15.5.2009 
Article 39 
the Management Board. Those rules shall include provisions 
concerning the cases in which Europol may exchange infor­
Staff 
mation subject to the requirement of confidentiality with third 
1. 
The Staff Regulations of officials of the European Commu­
parties. 
nities and the Conditions of employment of other servants of 
the European Communities (hereinafter referred to as the Staff 
Regulations and the Conditions of employment respectively) 
laid down in Regulation (EEC, Euratom, ECSC) No 259/68 of 
2. Where 
Europol 
intends 
to 
entrust 
persons 
with 

sensitive 
the Council ( 1 ) and the rules adopted jointly by the institutions 
activity, Member States shall undertake to arrange, at the request 
of the European Communities for the purpose of applying the 
of the Director, for security screening of their own nationals to 
Staff Regulations and the Conditions of employment shall apply 
be carried out in accordance with their national provisions and 
to the Director, the Deputy Directors and to the Europol staff 
to provide each other with mutual assistance for that purpose. 
engaged after the date of application of this Decision. 
The relevant authority under national provisions shall inform 
Europol only of the results of the security screening. Those 
results shall be binding on Europol. 
2.  For the purpose of implementing the Staff Regulations 
and the Conditions of employment, Europol shall be considered 
as an agency within the meaning of Article 1a(2) of the Staff 
Regulations. 
3. Each 
Member 
State 
and 
Europol 
may 
entrust 
the 
processing of data at Europol only to those persons who 
have had special training and undergone security screening. 
3. The 
powers 
conferred 
on 
the 
appointing 
authority 
by 
the  The Management Board shall adopt rules for the security 
Staff Regulations and on the authority authorised to conclude 
clearance of Europol staff. The Director shall regularly inform 
contracts by the Conditions of employment shall be exercised 
the Management Board on the state of security screening of 
by Europol in respect of its staff and of the Director in 
Europol staff. 
accordance with Articles 37(13) and 38(4)(c) of this Decision. 
4.  Europol staff shall consist of temporary staff and/or 
Article 41 
contract staff. The Management Board shall give its consent 
on a yearly basis in so far as the Director intends to grant 
Obligation of discretion and confidentiality 
contracts of indefinite duration. The Management Board shall 
decide which temporary posts provided for in the establishment 
1. The 
members 
of 
the 
Management 
Board, 
the 
Director, 
the 
plan can be filled only by staff engaged from the competent 
Deputy Directors, employees of Europol and liaison officers 
authorities of the Member States. Staff recruited to occupy such 
shall refrain from any action and any expression of opinion 
posts shall be temporary agents under Article 2(a) of the 
which might be harmful to Europol or prejudice its activities. 
Conditions of employment and may be awarded only fixed- 
term contracts renewable once for a fixed period. 
2. The 
members 
of 
the 
Management 
Board, 
the 
Director, 
the 
5. Member 
States 
may 
second 
national 
experts 
to 
Europol.  Deputy Directors, employees of Europol and liaison officers, as 
The Management Board shall adopt the necessary implementing 
well as any other person under a particular obligation of 
arrangements for that purpose. 
discretion or confidentiality, shall be bound not to disclose 
any facts or information which come to their knowledge in 
the performance of their duties or the exercise of their activities 
to any unauthorised person or to the public. This shall not 
6. Europol 
shall 
apply 
the 
principles 
of 
Regulation 
(EC) 
No  apply to facts or information too insignificant to require confi­
45/2001 to the processing of personal data relating to Europol 
dentiality. The obligation of discretion and confidentiality shall 
staff. 
apply even after the termination of office or employment, or 
after the termination of activities. Notification of the particular 
obligation referred to in the first sentence shall be given by 
CHAPTER VII 
Europol together with a warning of the legal consequences of 
any infringement. A written record shall be drawn up of such 
CONFIDENTIALITY ISSUES 
notification. 
Article 40 
Confidentiality 
1. Europol 
and 
the 
Member 
States 
shall 
take 
appropriate  3. The 
members 
of 
the 
Management 
Board, 
the 
Director, 
the 
measures to protect information subject to the requirement of 
Deputy Directors, employees of Europol and liaison officers, as 
confidentiality which is obtained by or exchanged with Europol 
well as other persons under the obligation provided for in 
pursuant to this Decision. To that end the Council, acting by 
paragraph 2, shall not give evidence in or outside a court or 
qualified majority after consulting the European Parliament, 
make any statements on any facts or information which come 
shall adopt appropriate rules on confidentiality prepared by 
to their knowledge in the performance of their duties or the 
exercise of their activities without reference to the Director or, 
( 1 ) OJ L 56, 4.3.1968, p. 1.
in the case of the Director himself, to the Management Board.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/59 
The Management Board or the Director, depending on the case, 
agreement by the European Parliament and the Council (here­
shall approach the judicial body or any other competent body 
inafter referred to as the budgetary authority) as provided for in 
with a view to ensuring that the necessary measures under the 
the Interinstitutional Agreement of 17 May 2006 between the 
national law applicable to the body approached are taken. 
European Parliament, the Council and the Commission on 
budgetary discipline and sound financial management ( 1 ). 
Such measures may either be to adjust the procedures for giving 
evidence in order to ensure the confidentiality of the infor­
2.  Europol’s expenditure shall include its staff, administrative, 
mation or, provided that the national law concerned so 
infrastructure and operational expenses. 
permits, to refuse to make any communication concerning 
data in so far as it is vital for the protection of the interests 
of Europol or of a Member State. 
3. The 
Director 
shall 
draw 
up 
the 
draft 
estimate 
of 
revenue 
and expenditure of Europol for the following financial year, 
including a draft establishment plan, and shall forward it to 
Where a Member State’s legislation provides for the right to 
the Management Board. The draft establishment plan shall 
refuse to give evidence, persons referred to in paragraph 2 
consist of posts of a permanent or temporary nature and a 
asked to give evidence shall be required to obtain permission 
reference to national experts seconded, and shall state the 
to do so. Permission shall be granted by the Director or, in the 
number, grade and category of staff employed by Europol for 
case of evidence to be given by the Director, by the 
the financial year in question. 
Management Board. Where a liaison officer is asked to give 
evidence concerning information he receives from Europol, 
such permission shall be given after the agreement of the 
4. Revenue 
and 
expenditure 
shall 
be 
in 
balance. 
Member State responsible for the officer concerned has been 
obtained. The obligation to seek permission to give evidence 
shall apply even after the termination of office or employment 
5. The 
Management 
Board 
shall 
adopt 
the 
draft 
estimate 
of 
or after the termination of activities. 
revenue and expenditure, including the draft establishment plan 
and accompanied by the preliminary work programme, and 
forward them by 31 March of each year to the Commission. 
Furthermore, if the possibility exists that the evidence may 
If the Commission has objections to the draft estimate, it shall 
extend to information and knowledge which a Member State 
inform the Management Board accordingly within 30 days of 
has communicated to Europol or which clearly involves a 
receiving it. 
Member State, the position of that Member State concerning 
the evidence shall be sought before permission is granted. 
6. The 
Commission 
shall 
forward 
the 
estimate 
to 
the 
budgetary authority together with the preliminary draft 
Permission to give evidence may be refused only in so far as 
general budget of the European Union. 
that is necessary to protect the overriding interests of Europol 
or of a Member State or Member States that need protection. 
7.  On the basis of the estimate, the Commission shall enter 
in the preliminary draft general budget of the European Union, 
which it shall place before the budgetary authority, in 
4. Each 
Member 
State 
shall 
treat 
any 
infringement 
of 
the  accordance with Article 272 of the Treaty establishing the 
obligation of discretion or confidentiality laid down in para­
European Community, the estimates it deems necessary for 
graphs 2 and 3 as a breach of the obligations imposed by its 
the establishment plan and the amount of the subsidy to be 
law on official or professional secrets or its provisions for the 
charged to that budget. 
protection of classified material. 
8. The 
budgetary 
authority 
shall 
authorise 
the 
appropriations 
It shall ensure that the rules and provisions concerned also 
for the subsidy to Europol and the establishment plan when 
apply to its own employees who have contact with Europol 
adopting the general budget of the European Union. 
in the course of their work. 
9. The 
Management 
Board 
shall 
adopt 
Europol’s 
budget 
and 
CHAPTER VIII 
the establishment plan. They shall become definitive following 
the final adoption of the general budget of the European Union. 
BUDGET PROVISIONS 
Where appropriate, they shall be adjusted accordingly by means 
Article 42 
of the adoption of a revised budget. 
Budget 
1. The 
revenues 
of 
Europol 
shall 
consist, 
without 
prejudice  10. Any 
amendment 
of 
the 
budget, 
including 
the 
estab­
to other types of income, of a subsidy from the Community 
lishment plan, shall be effected in accordance with the 
entered in the general budget of the European Union 
procedure laid down in paragraphs 5 to 9.
(Commission section) as from the date of application of this 
Decision. The financing of Europol shall be subject to an 
( 1 ) OJ C 139, 14.6.2006, p. 1.

L 121/60 
EN 
Official Journal of the European Union 
15.5.2009 
11.  The Management Board shall, as soon as possible, notify 
application of the discharge procedure for the financial year 
the budgetary authority of its intention of implementing any 
in question, as laid down in Article 146(3) of Regulation (EC, 
project that may have significant financial implications for the 
Euratom) No 1605/2002. 
funding of its budget, in particular any projects relating to 
property such as the rental or purchase of buildings. It shall 
inform the Commission thereof. Where a branch of the 
10. The 
European 
Parliament, 
taking 
into 
account 

recom­
budgetary authority notifies its intention of delivering an 
mendation from the Council acting by qualified majority, shall, 
opinion, it shall forward its opinion to the Management 
before 30 April of year n + 2, give a discharge to the Director 
Board within six weeks of the date on which it notified the 
in respect of the implementation of the budget for year n. 
budgetary authority of the project. 
Article 43 
Article 44 
Implementation and control of the budget 
Financial regulation 
1. The 
Director 
shall 
implement 
Europol’s 
budget. 
The Management Board shall adopt the financial regulation 
applicable to Europol after consulting the Commission. It may 
not depart from Regulation (EC, Euratom) No 2343/2002 
2.  By 28 February at the latest following each financial year, 
unless that is specifically required for Europol’s operation. The 
Europol’s accounting officer shall communicate the provisional 
prior consent of the Commission shall be required for the 
accounts to the Commission’s accounting officer together with a 
adoption of any rules which derogate from Regulation (EC, 
report on the budgetary and financial management for that 
Euratom) No 2343/2002. The budgetary authority shall be 
financial year. The Commission’s accounting officer shall conso­
informed of any such derogations. 
lidate the provisional accounts of the institutions and decen­
tralised bodies in accordance with Article 128 of Council Regu­
lation (EC, Euratom) No 1605/2002 of 25 June 2002 on the 
Financial Regulation applicable to the general budget of the 
CHAPTER IX 
European Communities ( 1 ). 
MISCELLANEOUS PROVISIONS 
Article 45 
3.  By 31 March at the latest following each financial year, 
the Commission’s accounting officer shall forward Europol’s 
Rules concerning access to Europol documents 
provisional accounts to the Court of Auditors, together with a 
On the basis of a proposal by the Director, and not later than 
report on the budgetary and financial management for that 
six months after the date of application of this Decision, the 
financial year. The report on the budgetary and financial 
Management Board shall adopt rules concerning access to 
management for that financial year shall also be forwarded to 
Europol documents, taking into account the principles and 
the European Parliament and the Council. 
limits set out in Regulation (EC) No 1049/2001 of the 
European Parliament and of the Council of 30 May 2001 
4.  On receipt of the Court of Auditors’ observations on 
regarding public access to European Parliament, Council and 
Europol’s provisional accounts pursuant to Article 129 of Regu­
Commission documents ( 2 ). 
lation (EC, Euratom) No 1605/2002, the Director shall draw up 
Europol’s final accounts under his own responsibility and 
forward them to the Management Board for an opinion. 
Article 46 
EU classified information 
5.  The Management Board shall deliver an opinion on 
Europol shall apply the security principles and minimum 
Europol’s final accounts. 
standards set out in Council Decision 2001/264/EC of 
19 March 2001 adopting the Council’s security regulations ( 3 ) 
6.  By 1 July at the latest following each financial year, the 
regarding EU classified information. 
Director shall send the final accounts, together with the opinion 
of the Management Board, to the European Parliament, the 
Council, the Commission and the Court of Auditors. 
Article 47 
Languages 
7. The 
final 
accounts 
shall 
be 
published. 
1. Regulation 
No 

of 
15 
April 
1958 
determining 
the 
languages to be used in the European Economic 
8. The 
Director 
shall 
send 
the 
Court 
of 
Auditors 

reply 
to  Community ( 4 ) shall apply to Europol. 
its observations by 30 September at the latest. He shall also 
send a copy of that reply to the Management Board. 
2.  The Management Board shall decide by unanimity on the 
internal language arrangements of Europol.
9. The 
Director 
shall 
submit 
to 
the 
European 
Parliament, 
at 
the latter’s request, any information required for the smooth 
( 2 ) OJ L 145, 31.5.2001, p. 43. 
( 3 ) OJ L 101, 11.4.2001, p. 1. 
( 1 ) OJ L 248, 16.9.2002, p. 1. 
( 4 ) OJ 17, 6.10.1958, p. 385/58.

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/61 
3. The 
translations 
required 
for 
Europol’s 
work 
shall 
be  3. The 
Kingdom 
of 
the 
Netherlands 
and 
the 
other 
Member 
provided by the Translation Centre for bodies of the 
States shall agree that liaison officers seconded from the other 
European Union ( 1 ). 
Member States and members of their families shall enjoy such 
privileges and immunities as are necessary for the proper 
performance of the tasks of liaison officers at Europol. 
Article 48 
Informing the European Parliament 
Article 52 
The Presidency of the Council, the Chairperson of the 
Management Board and the Director shall appear before the 
Liability for unauthorised or incorrect data processing 
European Parliament at its request to discuss matters relating 
1. Each 
Member 
State 
shall 
be 
liable, 
in 
accordance 
with 
its 
to Europol taking into account the obligations of discretion and 
national law, for any damage caused to an individual as a result 
confidentiality. 
of legal or factual errors in data stored or processed at Europol. 
Only the Member State in which the event which gave rise to 
the damage occurred shall be the subject of an action for 
compensation on the part of the injured party, who shall 
Article 49 
apply to the courts having jurisdiction under the national law 
Combating fraud 
of the Member State concerned. A Member State may not plead 
that another Member State or Europol had transmitted inac­
The rules laid down by Regulation (EC) No 1073/1999 of the 
curate data in order to avoid its liability under its national 
European Parliament and of the Council of 25 May 1999 
legislation vis-à-vis an injured party. 
concerning investigations conducted by the European Anti- 
Fraud Office (OLAF) ( 2 ) shall apply to Europol. On the basis 
of the proposal by the Director, and not later than six 
months after the date of application of this Decision, the 
2. If 
the 
legal 
or 
factual 
errors 
referred 
to 
in 
paragraph 

Management Board shall adopt the implementing measures 
occurred as a result of the erroneous communication of data or 
necessary, which may exclude operational data from the scope 
of failure to comply with the obligations laid down in this 
of OLAF’s investigations. 
Decision on the part of one or more Member States or as a 
result of unauthorised or incorrect storage or processing by 
Europol, Europol or the other Member State in question shall 
be bound to reimburse, on request, for the amounts paid as 
Article 50 
compensation pursuant to paragraph 1 unless the data were 
Headquarters Agreement 
used in breach of this Decision by the Member State in the 
territory of which the damage was caused. 
The necessary arrangements concerning the accommodation to 
be provided for Europol in the headquarters State and the 
facilities to be made available by that State as well as the 
particular rules applicable in the Europol headquarters State to 
3. Any 
dispute 
between 
the 
Member 
State 
that 
has 
paid 
the 
the Director, the members of the Management Board, the 
compensation pursuant to paragraph 1 and Europol or another 
Deputy Directors, employees of Europol and members of their 
Member State over the principle or the amount of the reimbur­
families shall be laid down in a Headquarters Agreement 
sement shall be referred to the Management Board, which shall 
between Europol and the Kingdom of the Netherlands to be 
settle the matter by a majority of two thirds of its members. 
concluded once the approval of the Management Board has 
been obtained. 
Article 53 
Article 51 
Other liability 
Privileges and immunities 
1. Europol’s 
contractual 
liability 
shall 
be 
governed 
by 
the 
law 
1. The 
Protocol 
on 
the 
Privileges 
and 
Immunities 
of 
the  applicable to the contract in question. 
European Communities and a specific Regulation to be 
adopted on the basis of Article 16 of the Protocol on the 
Privileges and Immunities of the European Communities shall 
apply to the Director and Deputy Directors of Europol and to 
2. In 
the 
case 
of 
non-contractual 
liability, 
Europol 
shall 
be 
Europol staff. 
obliged, independently of any liability under Article 52, to make 
good any damage caused by the fault of its organs, or of its staff 
in the performance of their duties, in so far as it may be 
imputed to them and regardless of the different procedures 
2. The 
Protocol 
on 
the 
Privileges 
and 
Immunities 
of 
the  for claiming damages which exist under the law of the 
European Communities shall apply to Europol. 
Member States. 
( 1 )  Council Regulation (EC) No 2965/94 of 28 November 1994 setting 
up a Translation Centre for bodies of the European Union (OJ 
L 314, 7.12.1994, p. 1). 
3. The 
injured 
party 
shall 
have 
the 
right 
to 
demand 
that 
( 2 ) OJ L 136, 31.5.1999, p. 1.
Europol refrain from or cease any action.

L 121/62 
EN 
Official Journal of the European Union 
15.5.2009 
4. The 
national 
courts 
of 
the 
Member 
States 
competent 
to  tically until one year after the date of application of this 
deal with disputes involving Europol’s liability as referred to in 
Decision. 
this Article shall be determined by reference to Council Regu­
lation (EC) No 44/2001 of 22 December 2000 on jurisdiction 
and the recognition and enforcement of judgments in civil and 
2. Should 
the 
Director 
or 
one 
or 
more 
of 
the 
Deputy 
commercial matters ( 1 ). 
Directors be unwilling or unable to act in accordance with 
paragraph 1, the Management Board shall appoint an interim 
Director or interim Deputy Director(s) as required for a 
maximum period of 18 months, pending the appointments 
Article 54 
provided for in Article 38(1) and (2). 
Liability with regard to Europol’s participationin joint 
investigation teams 
Article 57 
1. The 
Member 
State 
in 
the 
territory 
of 
which 
damage 
is 
caused by Europol staff operating in accordance with 
Staff 
Article 6 in that Member State during their assistance in oper­
1. By 
way 
of 
derogation 
from 
Article 
39, 
all 
employment 
ational measures shall make good such damage under the 
contracts concluded by Europol as established by the Europol 
conditions applicable to damage caused by its own officials. 
Convention and in force on the date of application of this 
Decision shall be honoured until their expiry date and may 
not be renewed on the basis of the Europol Staff Regulations ( 2 ) 
2. Unless 
otherwise 
agreed 
by 
the 
Member 
State 
concerned,  after the date of application of this Decision. 
Europol shall reimburse in full any sums that that Member State 
has paid to the victims or persons entitled on their behalf for 
damage referred to in paragraph 1. Any dispute between that 
2. All 
members 
of 
staff 
under 
contracts 
as 
referred 
to 
in 
Member State and Europol over the principle or the amount of 
paragraph 1 shall be offered the possibility of concluding 
the reimbursement shall be referred to the Management Board, 
temporary agent contracts under Article 2(a) of the Conditions 
which shall settle the matter. 
of employment at the various grades as set out in the estab­
lishment plan or contract agent contracts under Article 3a of 
the Conditions of employment. 
CHAPTER X 
To that end, an internal selection process limited to staff who 
TRANSITIONAL PROVISIONS 
have contracts with Europol on the date of application of this 
Article 55 
Decision shall be carried out after the entry into force and 
within two years of the date of application of this Decision 
General legal succession 
by the authority authorised to conclude contracts in order to 
1. This 
Decision 
shall 
not 
affect 
the 
legal 
force 
of 
agreements  check the ability, efficiency and integrity of those to be engaged. 
concluded by Europol as established by the Europol Convention 
before the date of application of this Decision. 
Depending on the type and level of the functions performed, a 
successful candidate shall be offered either a temporary agent 
contract or a contract agent contract for a period corresponding 
2. Paragraph 

shall 
apply 
in 
particular 
to 
the 
Headquarters  at least to the time remaining under the contract concluded 
Agreement concluded on the basis of Article 37 of the Europol 
before the date of application of this Decision. 
Convention, as well as the agreements between the Kingdom of 
the Netherlands and the other Member States established on the 
basis of Article 41(2) of the Europol Convention and to all 
3. If 

second 
fixed-term 
contract 
was 
concluded 
by 
Europol 
international agreements, including their provisions on the 
before the date of application of this Decision and the staff 
exchange of information, and to contracts concluded by, 
member accepted a temporary agent contract or contract 
liabilities incumbent on and properties acquired by Europol, 
agent contract under the conditions laid down in the third 
as established by the Europol Convention. 
subparagraph of paragraph 2, any subsequent renewal may be 
concluded only for an indefinite period, in accordance with 
Article 39(4). 
Article 56 
Director and Deputy Directors 
4. If 

contract 
of 
an 
indefinite 
duration 
was 
concluded 
by 
Europol before the date of application of this Decision and the 
1. The 
Director 
and 
Deputy 
Directors 
appointed 
on 
the 
basis  staff member accepted a temporary agent or contract agent 
of Article 29 of the Europol Convention shall, for the remaining 
contract under the conditions laid down in the third subpara­
periods of their terms of office, be the Director and Deputy 
graph of paragraph 2, that contract shall be concluded for an 
Directors within the meaning of Article 38 of this Decision. 
indefinite period in accordance with the first paragraph of 
If their terms of office end one year or less after the date of 
Article 8 and Article 85(1) of the Conditions of employment.
application of this Decision, they shall be extended automa­
( 2 ) Council Act of 3 December 1998 laying down the staff regulations 
( 1 ) OJ L 12, 16.1.2001, p. 1. 
applicable to Europol employees (OJ C 26, 30.1.1999, p. 23).

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/63
5. The Europol Staff Regulations and other relevant  5.  The remainder of the surpluses of the budgets approved 
instruments shall continue to apply to staff members who are 
on the basis of Article 35(5) of the Europol Convention shall be 
not recruited in accordance with paragraph 2. By way of dero­
paid back to the Member States. The amount to be paid to each 
gation from Chapter 5 of the Europol Staff Regulations, the 
of the Member States shall be calculated on the basis of the 
percentage rate of the annual adjustment of remuneration 
annual contributions from the Member States to Europol’s 
decided by the Council in accordance with Article 65 of the 
budgets established on the basis of Article 35(2) of the 
Staff Regulations shall apply to Europol staff. 
Europol Convention. 
The payment shall be made within three months of the estab­
Article 58 
lishment of the amount covering the expenditure referred to in 
Budget 
paragraph 3 and the completion of discharge procedures 
regarding the budgets approved on the basis of Article 35(5) 
1. The 
discharge 
procedure 
in 
respect 
of 
the 
budgets  of the Europol Convention. 
approved on the basis of Article 35(5) of the Europol 
Convention shall be carried out in accordance with the rules 
established by Article 36(5) of the Europol Convention and the 
Article 59 
financial regulation adopted on the basis of Article 35(9) of the 
Europol Convention. 
Measures to be prepared and adoptedbefore the date of 
application of this Decision 
1. 
The Management Board set up on the basis of the Europol 
2. In 
carrying 
out 
the 
discharge 
procedure 
described 
in  Convention, the Director appointed on the basis of that 
paragraph 1, the following shall apply: 
Convention and the Joint Supervisory Body set up on the 
basis of that Convention shall prepare the adoption of the 
following instruments: 
(a)  for the purpose of carrying out the discharge procedure in 
respect of the annual accounts for the year preceding the 
(a) the rules regarding the rights and obligations of liaison 
date of application of this Decision, the Joint Audit 
officers referred to in Article 9(5); 
Committee shall continue to operate in accordance with 
the procedures established by Article 36 of the Europol 
Convention. The discharge procedures established by the 
(b)  the rules applicable to the analysis work files referred to in 
Europol Convention shall apply to the extent required for 
the third subparagraph of Article 14(1); 
this purpose; 
(c) the rules regarding the relations of Europol referred to in 
Article 26(1)(b); 
(b) the Management Board referred to in Article 36 of this 
Decision shall have the right to decide upon the substitution 
of the functions previously performed by the financial 
(d) the implementing rules applicable to Europol staff referred 
controller and the Financial Committee on the basis of 
to in Article 37(9)(d); 
the Europol Convention. 
(e)  the rules on the selection and dismissal of the Director and 
3.  All expenditure resulting from commitments made by 
Deputy Directors referred to in Article 38(3) and (7); 
Europol in accordance with the financial regulation adopted 
on the basis of Article 35(9) of the Europol Convention 
before the date of application of this Decision which has not 
(f) the rules on confidentiality referred to in Article 40(1); 
yet been paid at that time shall be paid in the manner described 
in paragraph 4 of this Article. 
(g) the financial regulation referred to in Article 44; 
4. Before 
the 
expiry 
of 

period 
of 
twelve 
months 
after 
the  (h) any other instrument necessary for the preparation of the 
date of application of this Decision, the Management Board 
application of this Decision. 
shall establish the amount covering the expenditure referred 
to in paragraph 3. A corresponding amount, financed from 
the accumulated surplus of the budgets approved on the basis 
2.  For the purpose of adopting the measures referred to in 
of Article 35(5) of the Europol Convention, shall be transferred 
paragraph 1(a), (d), (e), (g) and (h), the composition of the 
into the first budget established under this Decision and shall 
Management Board shall be as laid down in Article 37(1). 
constitute an assigned revenue to cover that expenditure. 
The Management Board shall adopt those measures in 
accordance with the procedure laid down in the provisions 
referred to in paragraph 1(a), (d), (e) and (g) of this Article. 
If the surpluses are not sufficient to cover the expenditure 
referred to in paragraph 3, Member States shall provide the 
The Council shall adopt the measures referred to in paragraph 
financing necessary in accordance with the procedures estab­
1(b), (c) and (f) in accordance with the procedure laid down in 
lished by the Europol Convention. 
the provisions referred to in paragraph 1(b), (c) and (f).

L 121/64 
EN 
Official Journal of the European Union 
15.5.2009
Article 60 
CHAPTER XI 
Financial actions and decisions to be takenbefore the date 
FINAL PROVISIONS 
of application of this Decision 
Article 61 
1. The 
Management 
Board, 
in 
its 
composition 
as 
laid 
down 
in Article 37(1), shall take all financial actions and decisions 
Transposition 
necessary for the application of the new financial framework. 
The Member States shall ensure that their national law 
conforms to this Decision by the date of application of this 
2. The 
actions 
and 
decisions 
referred 
to 
in 
paragraph 

shall  Decision. 
be taken in accordance with Regulation (EC, Euratom) No 
2343/2002 and shall include, inter alia, the following: 
Article 62 
(a) the preparation and adoption of all actions and decisions 
Replacement 
referred to in Article 42 in relation to the first budgetary 
year after the date of application of this Decision; 
This Decision replaces the Europol Convention and the Protocol 
on the privileges and immunities of Europol, the members of its 
organs, the Deputy Directors and employees of Europol as of 
(b)  the appointment of the accounting officer as provided for in 
the date of application of this Decision. 
Article 37(9)(e) by 15 November in the year preceding the 
first budgetary year after the date of application of this 
Decision; 
Article 63 
Repeal 
(c)  the establishment of the internal audit function as provided 
for in Article 37(9)(f). 
Unless otherwise provided in this Decision, all measures imple­
menting the Europol Convention shall be repealed with effect 
3. The 
authorisation 
of 
operations 
which 
accrue 
to 
the 
first  from the date of application of this Decision. 
budgetary year after the date of application of this Decision 
shall be performed by the Director appointed under 
Article 64 
Article 29 of the Europol Convention from 15 November in 
the year preceding the first budgetary year after the date of 
Entry into force and application 
application of this Decision. From that date onwards, the 
Director shall also be entitled to delegate the function of 
1. This 
Decision 
shall 
enter 
into 
force 
on 
the 
20th 
day 
authorising officer as necessary. In the performance of the 
following its publication in the Official Journal of the European 
role of authorising officer, the requirements of Regulation (EC, 
Union
Euratom) No 2343/2002 shall be observed. 
2. It 
shall 
apply 
from 

January 
2010 
or 
the 
date 
of 
appli­
4. The ex-ante verification of operations that accrue to the 
cation of the Regulation referred to in Article 51(1), whichever 
first budgetary year following the date of application of this 
is the later. 
Decision shall be taken by the financial controller established 
under Article 27(3) of the Europol Convention during the 
period 15 November to 31 December in the year preceding 
However, the second subparagraph of Article 57(2) and Articles 
the first budgetary year following the date of application of 
59, 60 and 61 shall apply from the date of entry into force of 
this Decision. The financial controller shall perform that 
this Decision. 
function in accordance with Regulation (EC, Euratom) No 
2343/2002. 
Done at Luxembourg, 6 April 2009. 
5. A 
proportion 
of 
the 
transition 
costs 
incurred 
by 
Europol 
to prepare for the new financial framework from the year 
preceding the first budgetary year following the date of appli­
For the Council 
cation of this Decision shall be borne by the general budget of 
the European Union. The financing of those costs may take the 
The President 
form of a Community grant. 
J. POSPÍŠIL

EN 
15.5.2009 Official 
Journal 
of 
the 
European 
Union  L 
121/65 
ANNEX 
List of other forms of serious crime which Europol is competent to deal with in accordance with Article 4(1): 
— unlawful drug trafficking, 
— illegal money-laundering activities, 
— crime connected with nuclear and radioactive substances, 
— illegal immigrant smuggling, 
— trafficking in human beings, 
— motor vehicle crime, 
— murder, grievous bodily injury, 
— illicit trade in human organs and tissue, 
— kidnapping, illegal restraint and hostage taking, 
— racism and xenophobia, 
— organised robbery, 
— illicit trafficking in cultural goods, including antiquities and works of art, 
— swindling and fraud, 
— racketeering and extortion, 
— counterfeiting and product piracy, 
— forgery of administrative documents and trafficking therein, 
— forgery of money and means of payment, 
— computer crime, 
— corruption, 
— illicit trafficking in arms, ammunition and explosives, 
— illicit trafficking in endangered animal species, 
— illicit trafficking in endangered plant species and varieties, 
— environmental crime, 
— illicit trafficking in hormonal substances and other growth promoters. 
With regard to the forms of crime listed in Article 4(1) for the purposes of this Decision: 
(a) ‘crime connected with nuclear and radioactive substances’ means the criminal offences listed in Article 7(1) of the 
Convention on the Physical Protection of Nuclear Material, signed at Vienna and New York on 3 March 1980, and 
relating to the nuclear and/or radioactive materials defined in Article 197 of the Treaty establishing the European 
Atomic Community and in Council Directive 96/29/Euratom of 13 May 1996 laying down basic safety standards for 
the protection of the health of workers and the general public against the dangers arising from ionizing radiation ( 1 ); 
(b) ‘illegal immigrant smuggling’ means activities intended deliberately to facilitate, for financial gain, the entry into, 
residence or employment in the territory of the Member States, contrary to the rules and conditions applicable in the 
Member States;
( 1 ) OJ L 159, 29.6.1996, p. 1.

L 121/66 
EN 
Official Journal of the European Union 
15.5.2009
(c) ‘trafficking in human beings’ means the recruitment, transportation, transfer, harbouring or receipt of persons, by 
means of the threat or use of force or other forms of coercion, of abduction, of fraud, of deception, of the abuse of 
power or of a position of vulnerability or of the giving or receiving of payments or benefits to achieve the consent of 
a person having control over another person, for the purpose of exploitation. Exploitation shall include, as a 
minimum, the exploitation of the prostitution of others or other forms of sexual exploitation, the production, sale 
or distribution of child-pornography material, forced labour or services, slavery or practices similar to slavery, 
servitude or the removal of organs; 
(d)  ‘motor vehicle crime’ means the theft or misappropriation of motor vehicles, lorries, semi-trailers, the loads of lorries 
or semi-trailers, buses, motorcycles, caravans and agricultural vehicles, works vehicles and the spare parts for such 
vehicles, and the receiving and concealing of such objects; 
(e)  ‘illegal money-laundering activities’ means the criminal offences listed in Article 6(1) to (3) of the Council of Europe 
Convention on Laundering, Search, Seizure and Confiscation of the Proceeds from Crime, signed in Strasbourg on 
8 November 1990; 
(f)  ‘unlawful drug trafficking’ means the criminal offences listed in Article 3(1) of the United Nations Convention of 
20 December 1988 against Illicit Traffic in Narcotic Drugs and Psychotropic Substances and in the provisions 
amending or replacing that Convention. 
The forms of crime referred to in Article 4 and in this Annex shall be assessed by the competent authorities of the 
Member States in accordance with the law of the Member States to which they belong.