The European Commission has proposed new rules that would give Europol far greater access to personal data across the European Union. The proposal was introduced on June 24, 2026.
Under current law, Europol can only store limited data tied to specific categories, like "victim" or "suspect." That data must also connect to an active investigation.
The new proposal would change that. Europol could search for and store data on people who are not part of any investigation, then decide later if the information is useful.
The Commission describes current data rules as "administrative burdens." It says removing them would speed up police work and support the use of machine learning tools.
Shadow Systems and Oversight Concerns
In May 2026, former Europol officials told journalists that the agency has run parallel data systems for years. These systems reportedly sit outside Europol's main IT setup.
That structure lets them avoid standard data protection checks. A watchdog group called Front-LEX has filed a complaint asking regulators to ban these systems.
Europol has also received exemptions from certain oversight rules under the EU's AI Act. Those rules normally apply to high risk AI systems.
The European Data Protection Supervisor has said Europol uses automated tools, described as "scripts," to gather data from the internet. Europol has said it will only log changes made by these tools "to the extent it is possible."
That practice may conflict with a 2022 ruling from the EU's top court. The ruling requires that automated changes to data be explainable and traceable, especially in criminal cases.
A Shared Data Space and New Funding
The proposal includes a plan for a "Police Shared Data Space." This would be a shared cloud system letting Europol and EU countries work with the same data directly.
Right now, countries must send officers to Europol's headquarters in the Netherlands to access shared data. The cloud system would remove that requirement.
Europol would also gain access to the Prüm II database network. That system includes fingerprints, DNA profiles, facial images, and vehicle records.
The plan would open new funding sources for Europol too, including the Horizon Europe research fund. That fund has a budget of 175 billion euros for 2028 through 2034.
Under current law, Europol can suggest research topics for Horizon Europe but cannot apply for its own funding. The new rules would remove that limit.
Digital rights groups, including EDRi and Statewatch, have raised concerns about expanded biometric data sharing. They point to past cases involving migrants and asylum seekers whose data was shared without individual review.
The Commission says the changes are needed to modernize Europol and keep pace with new technology. It has framed the proposal as a way to reduce paperwork and speed up cross border police cooperation.
