What is it?

Directive EU2016/680 (The Law Enforcement Directive) covers the processing of personal data for the purposes of crime prevention, and the free movement of such data.

What is it for?

The Directive protects individuals when their personal data are processed by authorities for the purposes of prevention, investigation, detection or prosecution of criminal offences or for the execution of criminal penalties.

Under the new Directive, everyone’s personal data must be processed lawfully, fairly, and only for a specific purpose, linked to the activities surrounding crime prevention and detection.

The Directive ensures that personal data processing across the EU in these contexts complies with the principles of legality, proportionality, and necessity. It also ensures independent supervision by national data protection authorities, and effective judicial remedies.

Who has to comply and by when?

The Directive applies to EU Member States (including the UK), who are required to transpose it into their national law by ‪6 May 2018.

The UK government is working on the measures to give the Directive effect in the UK in order to meet this deadline. Affected bodies processing personal data within the scope of the Directive in the UK will have to comply with these provisions from that date.