Go West! Political, legal and operational aspects of cooperation between Europol and the United States

Similar documents
Council of the European Union Brussels, 23 November 2016 (OR. en)

12338/15 GS/sl DG D 1C

10007/16 MP/mj 1 DG D 2B

Data Protection in Switzerland Update Following the Safe Harbor Decision. 21 October 2015 / 6 February 2016 Christian Wyss

Exploring the European Commission s Network and Information Security Directive (NIS) What every CISO should know

LIMITE EN COUNCIL OF THE EUROPEAN UNION. Brussels, 26 September 2008 (30.09) (OR. fr) 13567/08 LIMITE ENFOPOL 170 CRIMORG 150

A comprehensive approach on personal data protection in the European Union

COUNCIL OF THE EUROPEAN UNION. Brussels, 24 May /13. Interinstitutional File: 2013/0027 (COD)

The UN Counter-Terrorism Committee Executive Directorate and its cooperation with ICAO on travel document security

NATIONAL PROGRAMME Chapter 15 Telecommunication and Post. Telecommunication and Post

ENISA s Position on the NIS Directive

Project CyberSouth Cooperation on cybercrime in the Southern Neighbourhood

15670/14 EB/hm 1 DG D 1 C

OPINION ON THE DEVELOPMENT OF SIS II

MOTION FOR A RESOLUTION

10025/16 MP/mj 1 DG D 2B

Comprehensive Study on Cybercrime

ISACA National Cyber Security Conference 8 December 2017, National Bank of Romania

Development of a renewed European Union Internal Security Strategy. Justice and Home affairs Council meeting Brussels, 4 December 2014

Overview on the Project achievements

Electronic signature framework

15412/16 RR/dk 1 DGD 1C

National Communications Authority

REGIONAL AND INTERNATIONAL TRENDS IN INFORMATION SOCIETY ISSUES CYBERCRIME CHALLENGE

Cyber Intel within European Cybercrime Center Ops

National CIRT - Montenegro. Ministry for Information Society and Telecommunications

Council of the European Union Brussels, 28 February 2019 (OR. en)

Europol The Police Intelligence Agency of the European Union

STATEMENT OF STRATEGY

EXPERT GROUP MEETING ON CYBERCRIME

Issue I. Airport Communication Project

Motorola Mobility Binding Corporate Rules (BCRs)

Data Protection System of Georgia. Nina Sarishvili Head of International Relations Department

Europol Unclassified Basic Protection Level. Council Working Party on Information Exchange and Data Protection (DAPIX) Friends of Presidency

ASEAN s Cyber Confidence Building Measures

Strategic and operational threat analysis at Europol's EC3

High-level expert group on information systems and interoperability. Third meeting 29 November Report

Wojciech Rafal Wiewiôrowski

COUNTER-TERRORISM. Future-oriented policing projects

Commission Action Plan on Environmental Compliance and Governance

13268/16 EB/dk 1 DGD 1C

JOINT MOTION FOR A RESOLUTION

The commission communication "towards a general policy on the fight against cyber crime"

SAT for eid [EIRA extension]

THE CYBER SECURITY ENVIRONMENT IN LITHUANIA

Assistant Secretary-General Michèle Coninsx Executive Director, CTED

Council of the European Union Brussels, 16 March 2015 (OR. en)

Information Security Strategy

The UNODC Global Programme on Cybercrime Alexandru Caciuloiu CYBERCRIME COORDINATOR SOUTHEAST ASIA AND THE PACIFIC

RESOLUTION 45 (Rev. Hyderabad, 2010)

H2020 Programme. Guidance Guidelines for the classification of information in research projects

ENTSO-E working to fulfill the 3 rd Package

Directive on Security of Network and Information Systems

Brussels, 19 May 2011 COUNCIL THE EUROPEAN UNION 10299/11 TELECOM 71 DATAPROTECT 55 JAI 332 PROCIV 66. NOTE From : COREPER

10496/18 MC/sl 1 DGD 2

Data Processing Agreement for Oracle Cloud Services

Scope of the Member State mechanism

13543/17 PhL/at 1 DG G 3 B

Cyber Security Development. Ghana in Perspective

PRIVACY STATEMENT +41 (0) Rue du Rhone , Martigny, Switzerland.

European Investigation Order

European Investigation Order: Frequently Asked Questions

Guiding principles on the Global Alliance against child sexual abuse online

Incident Response and Investigations. Regulation and standards

ECTA 32 nd Annual Conference

NEW INNOVATIONS NEED FOR NEW LAW ENFORCEMENT CAPABILITIES

Joint ICTP-IAEA School of Nuclear Energy Management November 2012

ANNEXES. to the. Proposal for a Regulation of the European Parliament and of the Council

Resolution adopted by the General Assembly on 21 December [on the report of the Second Committee (A/64/422/Add.3)]

Directive on security of network and information systems (NIS): State of Play

Digital Signatures Act 1

PROJECT RESULTS Summary

EU policy on Network and Information Security & Critical Information Infrastructures Protection

NIS-Directive and Smart Grids

Examination Guidelines for Design (Provisional translation)

COOPERATION BETWEEN INTERPOL AND THE UNITED NATIONS

etning_2015_web.pdf

History of NERC August 2013

Sub-Pillars. Democracy and Governance Sub-Pillar: Hemispheric legal instruments $99.7 $0.0 $99.7 $0.0 $0.0. Sub-Pillar: Legal Cooperation

DECISION 22/2009/GB OF THE GOVERNING BOARD OF THE EUROPEAN POLICE COLLEGE AUTHORISING THE DIRECTOR TO CONCLUDE A MEMORANDUM OF UNDERSTANDING WITH THE

Vademecum of Speakers

MEETINGS OF MINISTERS OF JUSTICE OR OEA/Ser.K/XXXIV

The SPARKS Project Motivation, Objectives and Results

History of NERC December 2012

Mandate to CEN, CENELEC and ETSI for Standardisation in the field of electric motors

INFORMATION SECURITY PRINCIPLES OF THE UNIVERSITY OF JYVÄSKYLÄ

An Energy Community for the Future Key Findings of the Report of the High Level Reflection Group. Barbora Jaksova, Energy Community Secretariat

Privacy Policy Hafliger Films SpA

EUROPOL SUPPORT TO ANTI-CORRUPTION INVESTIGATIONS

Committee on Civil Liberties, Justice and Home Affairs

Inter-American Port Security Cooperation Plan

ICT Legal Consulting on GDPR: the possible value of certification in data protection compliance and accountability

ENISA & Cybersecurity. Dr. Udo Helmbrecht Executive Director, European Network & Information Security Agency (ENISA) 25 October 2010

Departamento de Asia y Pacífico

Feasibility study and cost assessment of the establishment of a centralised ECRIS TCN solution

General Data Protection Regulation April 3, Sarah Ackerman, Managing Director Ross Patz, Consultant

POMONA EUROPE ADVISORS LIMITED

Legal framework of ensuring of cyber security in the Republic of Azerbaijan

COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT AND THE COUNCIL

Council of the European Union Brussels, 14 July 2017 (OR. en)

Transcription:

Go West! Political, legal and operational aspects of cooperation between Europol and the United States Alexandra De Moor IRCP - Ghent University, Belgium 1

Introduction PhD in Law Europol, quo vadis? Critical analysis and evaluation of the development of the European Police Office European criminal law European criminal policy PhD on papers Deliberate choice (cfr. model for analysis and evaluation) Paper = illustration Methodology Legal and social science research methods 2

Introduction Europol EU law enforcement organisation Council Decision of 6 April 2009 establishing the European Police Office Transforms Europol from an intergovernmental organisation into an agency of the EU As from 1 January 2010 Not merely a copy of the Europol Convention, including all the amendments already incorporated in the three Protocols... Novelties? 3

Europol s external relations Europol forced to look outside and operate in the external dimension Numerous agreements with EU bodies, third States and international organisations Europol s external relations are very specific (Relative) independence from Council structures Political, legal and data protection control? 4

Europol s external relations Legal aspects Europol Convention General cooperation rules Art. 42 (2): relations with third states and third bodies Art. 10 (4): receipt of information Art. 18: transmission of personal data Implementing rules Council Act of 3 November 1998 laying down rules governing Europol s external relations with third States and non-european Union related bodies Council Act of 3 November 1998 laying down the rules concerning the receipt of information by Europol from third parties Council Act of 12 March 1999 adopting rules on the transmission of personal data by Europol to third states and bodies 5

Europol s external relations Legal aspects Europol Council Decision General cooperation rules: Art. 23: Relations with third States and organisations Art. 26: Implementing rules governing Europol s relations Implementing rules Council Decision 2009/934/JHA of 30 November 2009 adopting the implementing rules governing Europol s relations with partners, including the exchange of personal data and classified information 6

Europol s external relations Legal aspects Europol Director vs. Council Receipt of information vs. transmission of personal data Transmission of personal data General rule Exceptional clause Absolutely necessary in order to safeguard the essential interests of the Member States concerned within the scope of Europol s objectives or in the interests of preventing imminent danger associated with crime or terrorist offences 7

Europol s external relations Political aspects Which third States and organisations? Considerations Human rights, data protection Operational benefit Criteria EU external relations policy? 8

Europol s external relations Political aspects Council Decision of 27 March 2000 authorising the Director of Europol to enter into negotiations on agreements with third States and non-eu-related bodies First list Including the United States (US) Further procedural safeguards Strategic vs. operational agreements Non-personal data vs. personal data 9

Europol-US cooperation 10

Europol-US cooperation Political aspects 9/11 as a catalyst Time pressure 28 september 2001: Europol Director decision (exceptional clause) 6 December 2001: strategic agreement 20 December 2002: operational agreement Very little (not to say: no) democratic scrutiny European Parliament National Parliaments 11

Europol-US cooperation Legal aspects Fundamental difficulties in the negotiations EU vs. US data protection philosophy Issues of concern No adequacy assessment No general restrictions on data exchange (Art. 5 (4)) Purpose deviation vs. purpose limitation deemed to include the prevention, detection, suppression, investigation and prosecution of any specific criminal offences and any specific analytical purposes (Art. 5 (1)) 12

Europol-US cooperation Wide range of US authorities Creating an unbalance Exchange of sensitive data Onward transmission of data Oversight of implementation Time to re-negotiate! Europol vs. US Adequacy assessment A future EU-US agreement on personal data protection and information sharing for law enforcement purposes Identification of common principles by HLCG Law enforcement: EU vs. VS 13

Europol-US cooperation Operational aspects How the Europol-US cooperation operates in practice? Europol the one-stop-shop for EU-US cooperation? Any added value that Europol can provide is either not perceived or is deemed outweighed by the benefits to be derived from dealing with Member States directly (Mutual evaluation of the cooperation agreements Europol-United States) Bilateral cooperation 14

Europol-US cooperation Operational aspects Facts and figures? Unilaterally collected by Europol Liaison Office Washington D.C. Europol makes a higher number of requests than it receives Drugs before terrorism Was it really needed? 15

Very swift... SWIFT Europol-US cooperation 16

Europol-US cooperation Very swift... SWIFT Society for Worldwide Interbank Financial Telecommunication (SWIFT) After 9/11: US Treasury Department introduced its Terrorist Finance Tracking Program (TFTP) 2006: NY Times leaked secret transfer of SWIFT data Agreement on the processing and transfer of financial messaging data from the EU to the US for the purposes of the TFTP Power struggle between the Commission, the Council and the European Parliament February 2010: EP vetoed July 2010: EP swallowed, despite a very surprising role for Europol 17

Europol-US cooperation TFTP Agreement gives Europol the task of verifying whether requests of the US Treasury Department comply with the requirements! Not in line with the negotiating mandate which called for independent judicial oversight! Even less in line with the new Europol Council Decision Hush-hush decision-making Hypothesis: Europol deliberately tries to improve its internal position Europol has specific interests in the exchange of SWIFT data TFTP Agreement also gives Europol the power to request information through the TFTP Hard to reconcile with verification task 18

Thank you for your attention! Questions? Read more: DE MOOR, A. & VERMEULEN, G. (2010). The Europol Council Decision: Transforming Europol into an Agency of the European Union. Common Market Law Review, Volume 47, Issue 4. 19