The European Data Protection Supervisor (EDPS) has issued an opinion on a draft regulation aimed at strengthening the mandate of Europol, the European Union Agency for Law Enforcement Cooperation.

This opinion, numbered 18/2026, concerns a proposal from the European Commission to replace Regulation (EU) 2016/794 in order to enhance Europol's role in addressing cross-border criminal threats. The EDPS is concerned about the substantial expansion of data processing capabilities that would allow Europol to process information on individuals without an established link to a criminal investigation, and for an unspecified duration. According to the supervisor, the current proposal poses serious risks to the right to data protection and lacks legal clarity, robust safeguards, and effective oversight.

To address this, the EDPS recommends establishing strict purpose and retention limitations, as well as predictable criteria to justify the necessity of such processing. Specific advice is also provided regarding access to Europol's systems, processing of data obtained from private actors, and supervision of the agency's activities. This opinion is part of a broader legislative package concerning Justice and Home Affairs (JHA), for which the EDPS has also requested additional human and financial resources.