Europol's Face Recognition Solution
Dear European Data Protection Supervisor,
Under the right of access to documents in the EU treaties, as developed in Regulation 1049/2001, I am requesting documents which contain the following information:
Any documents – including but not limited to e-mails, minutes, notes, presentations, reports, etc – related to Europol's Face Recognition Solution or any other such facial recognition tools that Europol uses or is developing for use in the future. The program previously came under the scrutiny of the EDPS.
I would also like to request the unredacted version of the 13 June, 2024 document titled "Europol's response to the recommendations from the European Data Protection Supervisor (EDPS) issued in the prior consultation opinion for the Europol Face Recognition Solution (EDPS case 2023-1104)". The redacted version, available through Europol's Public Access to Documents Register, fully removes Europol's responses to the questions raised by EDPS. The answers to these questions are in the public interest, especially considering the high risk for misidentification inherent to facial recognition technologies and the grave privacy concerns that this risk entails.
Yours faithfully,
Kian Seara Rey
Dear requester,
We acknowledge the receipt of your request, registered on 07.11.2025. In
accordance with Article 7(1) of Regulation (EU) No 1049/2001 regarding
public access to European Parliament, Council and Commission documents,
you will receive a reply within 15 working days (by 28.11.2025).
Your case number is 2025-1061.
Please note that your personal data will only be processed for the
purposes of replying to your request and in accordance with the privacy
statement set out below. More information on how the EDPS process personal
information can be found on our [1]website.
Yours sincerely,
EDPS Access to Documents
[2]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | › Email: [3][email
address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Twitter [4]@EU_EDPS Website [5]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [6][EDPS request email]. You may also contact the data protection
officer of the EDPS ([7][email address]), if you have any remarks or
complaints regarding the way we process your personal data. You have the
right to lodge a complaint with the EDPS, as supervisory authority. Any
such request should be addressed to the EDPS at [8][EDPS request email].
You can reach the EDPS in the following ways: e-mail: [9][EDPS request
email]; EDPS postal address: European Data Protection Supervisor, Rue
Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
1. https://edps.europa.eu/about-edps/data-p...
2. file:///tmp/tel:+3222831900
3. mailto:[email%20address]
4. http://@eu_edps/
5. http://www.edps.europa.eu/
http://www.edps.europa.eu/
6. mailto:[edps%20request%20email]
7. mailto:[email%20address]
8. mailto:[edps%20request%20email]
9. mailto:[edps%20request%20email]
Dear requester,
Following a thorough assessment of your request, we concluded that the
description provided in your application is too broad. This makes it
difficult for us to identify the specific documents relevant to your
request and would also result in retrieving an excessively large number of
documents.
Therefore, in line with Article 6(2) of Regulation (EU) No 1049/2001
regarding public access to documents of the European Parliament, Council
and Commission, we kindly ask you to further clarify the scope of your
request. Please specify the type of documents, references, dates or an
approximate time frame, or provide a more precise description of the
subject matter you are interested in, as the current formulation is too
general.
Please note that the 15-day deadline mentioned in our acknowledgment of
receipt will be suspended until we receive the necessary clarifications.
Your sincerely,
EDPS Access to Documents
[1]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | › Email: [2][email
address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Twitter [3]@EU_EDPS Website [4]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [5][EDPS request email]. You may also contact the data protection
officer of the EDPS ([6][email address]), if you have any remarks or
complaints regarding the way we process your personal data. You have the
right to lodge a complaint with the EDPS, as supervisory authority. Any
such request should be addressed to the EDPS at [7][EDPS request email].
You can reach the EDPS in the following ways: e-mail: [8][EDPS request
email]; EDPS postal address: European Data Protection Supervisor, Rue
Wiertz 60, B-1047 Brussels, Belgium.
From: EDPS Access to Documents <[email address]>
Sent: 07 November 2025 11:26
To: Kian Seara Rey <ask+[email address]>
Subject: Acknowledgement of receipt access to documents [EDPS ref:
2025-1061 - D (2025) 4120]
Dear requester,
We acknowledge the receipt of your request, registered on 07.11.2025. In
accordance with Article 7(1) of Regulation (EU) No 1049/2001 regarding
public access to European Parliament, Council and Commission documents,
you will receive a reply within 15 working days (by 28.11.2025).
Your case number is 2025-1061.
Please note that your personal data will only be processed for the
purposes of replying to your request and in accordance with the privacy
statement set out below. More information on how the EDPS process personal
information can be found on our [9]website.
Yours sincerely,
EDPS Access to Documents
[10]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | › Email:
[11][email address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Twitter [12]@EU_EDPS Website [13]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [14][EDPS request email]. You may also contact the data protection
officer of the EDPS ([15][email address]), if you have any remarks or
complaints regarding the way we process your personal data. You have the
right to lodge a complaint with the EDPS, as supervisory authority. Any
such request should be addressed to the EDPS at [16][EDPS request email].
You can reach the EDPS in the following ways: e-mail: [17][EDPS request
email]; EDPS postal address: European Data Protection Supervisor, Rue
Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
1. file:///tmp/tel:+3222831900
2. mailto:[email%20address]
3. http://@eu_edps/
4. http://www.edps.europa.eu/
http://www.edps.europa.eu/
5. mailto:[edps%20request%20email]
6. mailto:[email%20address]
7. mailto:[edps%20request%20email]
8. mailto:[edps%20request%20email]
9. https://edps.europa.eu/about-edps/data-p...
10. file:///tmp/tel:+3222831900
11. mailto:[email%20address]
12. http://@eu_edps/
13. http://www.edps.europa.eu/
http://www.edps.europa.eu/
14. mailto:[edps%20request%20email]
15. mailto:[email%20address]
16. mailto:[edps%20request%20email]
17. mailto:[edps%20request%20email]
Dear EDPS Access to Documents,
Thanks for your response. I will clarify the scope of my request: I am requesting documents which contain the following information:
Any documents – including but not limited to audit reports, opinions, letters to other EU institutions or MEPs, etc – related to any biometric tools that use facial recognition that Europol uses or is developing for use, which may have come under the scrutiny of EDPS. Time frame: From 2023 until now.
Yours sincerely,
Kian Seara Rey
Dear requester,
Thank you for your prompt reply and for the clarifications provided.
However, your response merely establishes a timeframe and reiterates the
substance of your initial request. As noted in our previous communication,
the description in your application remains overly broad. Even with the
newly indicated timeframe, it remains difficult to determine which
specific documents fall within the scope of your request, and responding
as currently formulated would result in retrieving an excessively large
number of documents.
Therefore, in accordance with Article 6(2) of Regulation (EU) No 1049/2001
regarding public access to documents of the European Parliament, the
Council and the Commission, we kindly ask you to further clarify the scope
of your request. Please specify the type of documents, references, dates
or otherwise provide a more precise description of the subject matter of
interest, as the current formulation is still too general.
Please note that the 15-day deadline mentioned in our acknowledgment of
receipt will be suspended until we receive the necessary clarifications.
Kind regards,
EDPS Access to Documents
[1]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | Email: [2][email
address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Twitter [3]@EU_EDPS Website [4]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [5][EDPS request email]. You may also contact the data protection
officer of the EDPS ([6][email address]), if you have any remarks or
complaints regarding the way we process your personal data. You have the
right to lodge a complaint with the EDPS, as supervisory authority. Any
such request should be addressed to the EDPS at [7][EDPS request email].
You can reach the EDPS in the following ways: e-mail: [8][EDPS request
email]; EDPS postal address: European Data Protection Supervisor, Rue
Wiertz 60, B-1047 Brussels, Belgium.
Dear EDPS Access to Documents,
Thanks for your response. I will be direct with my aim: I am looking to obtain documents related to EDPS audits/reviews of the recent use of facial recognition tools/technologies by Europol. I believe that specifying my request any further would amount to 'shooting in the dark' because I am not able to be more specific about documents I have never seen.
Article 6(2) of Regulation (EC) No 1049/2001 states that if the request is not precise enough and a clarification is needed, the institution has the obligation to "assist the applicant in doing so." Case law has many times gone against blanket refusals and suggests you have the burden of proving that the request was unreasonable (Case T-2/03 VKI v Commission, paragraph 113).
Therefore, is it possible to have a simple list of the documents that resulted from your search? If not, can you tell me the number of documents that resulted from your search? Can you list the types of documents so that I can better narrow my request? I am not asking for "concrete, individual examination", which may result in an "unreasonable amount of administrative work," but just a simple list. (quoted VKI v Commission, paragraph 102)
I would additionally argue that my amended request is not really that broad. I am not requesting all material about Europol, but rather on a specific area of interest (facial recognition) and within a relatively short time frame.
Yours sincerely,
Kian Seara Rey
Dear requester,
Thank you for your prompt reply and for the clarifications provided. Based
on this information, we have identified four cases that fall within the
scope of your request:
• 2023-1104 "EUROPOL - Face Recognition Solution"
• 2023-1194 "EUROPOL - Opening Decisions of Operational Analysis
Projects (Portfolio) – November 2023"
• 2024-0425 "EUROPOL prior consultation – Facial matching in IVAS"
• 2024-0593 "Follow up on EDPS prior consultation opinion on Europol’s
Face Recognition Solution"
As each of these cases contains a substantial number of documents, we
recommend focusing initially on the opinions issued in each case. Should
you require additional documents after reviewing those, you can submit
further requests.
Please let us know whether you agree with this proposed clarification of
the scope of your request.
Kindly note that the 15-day deadline referenced in our acknowledgement of
receipt is suspended until we receive the necessary clarifications.
Kind regards
EDPS Access to Documents
[1]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | Email: [2][email
address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Twitter [3]@EU_EDPS Website [4]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [5][EDPS request email]. You may also contact the data protection
officer of the EDPS ([6][email address]), if you have any remarks or
complaints regarding the way we process your personal data. You have the
right to lodge a complaint with the EDPS, as supervisory authority. Any
such request should be addressed to the EDPS at [7][EDPS request email].
You can reach the EDPS in the following ways: e-mail: [8][EDPS request
email]; EDPS postal address: European Data Protection Supervisor, Rue
Wiertz 60, B-1047 Brussels, Belgium.
Dear EDPS Access to Documents,
Thank you for your response. I am indeed interested in seeing the opinions issued in each of these four cases you have specified – and may indeed later request additional documents. Thank you.
Yours sincerely,
Kian Seara Rey
Dear requester,
Thank you for your prompt response. The EDPS confirms that the revised
scope is sufficiently clear, and the processing of your request will now
continue.
Please note that the 15-day deadline is no longer suspended. You can
expect to receive our reply by 11.12.2025.
Kind regards
EDPS Access to Documents
[1]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | Email: [2][email
address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Twitter [3]@EU_EDPS Website [4]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [5][EDPS request email]. You may also contact the data protection
officer of the EDPS ([6][email address]), if you have any remarks or
complaints regarding the way we process your personal data. You have the
right to lodge a complaint with the EDPS, as supervisory authority. Any
such request should be addressed to the EDPS at [7][EDPS request email].
You can reach the EDPS in the following ways: e-mail: [8][EDPS request
email]; EDPS postal address: European Data Protection Supervisor, Rue
Wiertz 60, B-1047 Brussels, Belgium.
Dear requester,
We are writing to you concerning your access to documents request case
number 2025-1061.
In accordance with Article 7 (1) of Regulation (EU) No 1049/2001 regarding
public access to European Parliament, Council and Commission documents,
you are entitled to receive a reply within 15 working days.
However, the EDPS will not be in a position to respond within the original
time limit of 15 working days. We have therefore decided to extend the
time limit by 15 working days in accordance with Article 7(3) of
Regulation (EU) 1049/2001.
You should expect to receive a reply from the EDPS by 13.01.2026 at the
latest.
Your sincerely,
EDPS Access to Documents
[1]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | › Email:
[2][email address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[3]Twitter [4]@EU_EDPS [5]Website [6]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [7][EDPS request email]. You may also contact the data protection
officer of the EDPS ([8][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[9][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [10][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
From: EDPS Access to Documents <[email address]>
Sent: 28 November 2025 11:22
To: Kian Seara Rey <[FOI #16525 email]>
Cc: EDPS Access to Documents <[email address]>
Subject: RE: Acknowledgement of receipt access to documents [EDPS ref:
2025-1061 - D (2025) 4120]
Dear requester,
Thank you for your prompt response. The EDPS confirms that the revised
scope is sufficiently clear, and the processing of your request will now
continue.
Please note that the 15-day deadline is no longer suspended. You can
expect to receive our reply by 11.12.2025.
Kind regards
EDPS Access to Documents
[11]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | › Email:
[12][email address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[13]Twitter [14]@EU_EDPS [15]Website [16]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [17][EDPS request email]. You may also contact the data protection
officer of the EDPS ([18][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[19][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [20][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
Dear Mr Seara Rey,
Attached you will find the letter and the three annexes, on the
above-mentioned subject, for your attention.
The letter was signed electronically by Ms Luisa Palla.
Kind regards,
EDPS Access to Documents
[1]| Tel. (+32) 228 31900 | Fax (+32) 228 31950 | › Email:
[2][email address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[3]Twitter [4]@EU_EDPS [5]Website [6]www.edps.europa.eu
This email (and any attachment) may contain information that is internal
or confidential. Unauthorised access, use or other processing is not
permitted. If you are not the intended recipient please inform the
sender by reply and then delete all copies. Emails are not secure as
they can be intercepted, amended, and infected with viruses. The EDPS
therefore cannot guarantee the security of correspondence by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [7][EDPS request email]. You may also contact the data protection
officer of the EDPS ([8][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[9][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [10][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
1. file:///tmp/tel:+3222831900
2. mailto:[email address]
4. http://@eu_edps/
6. http://www.edps.europa.eu/
http://www.edps.europa.eu/
7. mailto:[EDPS request email]
8. mailto:[email address]
9. mailto:[EDPS request email]
10. mailto:[EDPS request email]