The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019

Saving provisions – information provided before commencement day U.K.

40.—(1) The following provisions of the Europol Regulation continue to have effect in relation to information provided by Europol to the United Kingdom before commencement day, with the modifications specified below [F1 (and see Title VII of Part 3 of the withdrawal agreement and sections 7A and 7C of the Withdrawal Act)]—

(a) paragraph 3 of Article 20 (access by Member States and Europol's staff to information stored by Europol), with the modification that the reference to “Member States” is to be treated as a reference to “any person or body having functions of a public nature that received information provided by Europol prior to commencement day, or successor thereto,”;

(b) for paragraph 7 of Article 23 (common provisions), substitute—

“7.   Onward transfers of personal data held by Europol by any person or body having functions of a public nature that received information provided by Europol prior to commencement day, or successor thereto, shall be prohibited, unless Europol has given its prior explicit authorisation.”;

(c) Article 30 (processing of special categories of personal data and of different categories of data subjects), with the following modifications—

(i) omit paragraphs 3 and 6;

(ii) in paragraph 4, omit “or Union”;

(iii) in paragraph 5, the reference to “Chapter V” is to be treated as a reference to “national law”;

(d) Article 32 (security of processing), with the following modifications—

(i) omit paragraph 1;

(ii) in paragraphs 2 and 3, omit “Europol and”;

(iii) in paragraph 2, the reference to “each Member State” is to be treated as a reference to “any person or body having functions of a public nature that received information provided by Europol prior to commencement day, or successor thereto,”;

(iv) in paragraph 3, the reference to “Member States” is to be treated as a reference to “any person or body having functions of a public nature that received information provided by Europol prior to commencement day, or successor thereto,”.

(2) Article 42 of the Europol Regulation (supervision by the national supervisory authority) continues to have effect, with the modifications specified below—

(a) for paragraph 1, substitute—

“1.   The Information Commissioner's Office shall have the task of monitoring independently, in accordance with national law, the permissibility of the transfer, the retrieval and any communication to Europol before the date on which regulation 37 of the Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (revocation of the Europol Regulation) commenced of personal data by the United Kingdom, and of examining whether such transfer, retrieval or communication violates the rights of the data subjects concerned. For that purpose, the Information Commissioner's Office shall have access to data submitted by the United Kingdom to Europol in accordance with the relevant national procedures.”;

(b) omit paragraphs 2 and 3;

(c) for paragraph 4, substitute—

“4.   Any person shall have the right to request the Information Commissioner's Office to verify the legality of any transfer or communication to Europol before the date on which regulation 37 of the Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (revocation of the Europol Regulation) commenced of data concerning him or her in any form and of access to those data by the United Kingdom. That right shall be exercised in accordance with national law.”.

Textual Amendments

F1 Words in reg. 40 inserted (31.12.2020 immediately before IP completion day) by The Law Enforcement and Security (Separation Issues etc.) (EU Exit) Regulations 2020 (S.I. 2020/1408), regs. 1, 14

Commencement Information

I1 Reg. 40 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1