(1) what information her Department holds on the number of UK nationals who have their personal data held by Europol;
(2) what steps her Department takes to check the sharing of the personal data of UK nationals by Europol with the third states and organisations listed in EU Council Decisions 2009/935/JHA;
(3) what steps her Department takes to check the processing of data relating to UK nationals which is supplied to Europol for the purpose of analysis under EU Council Decisions 2009/936/JHA.
The Europol National Unit (ENU), based in SOCA International, does not have information on how many UK nationals have their personal data held by Europol. Personal data is submitted to Europol by law enforcement agencies of the 27 EU member states and eight third party countries. The ENU does not have access to the information submitted by other parties but would have access to personal data on UK nationals that it has placed on the system itself. We are not able to provide a figure for the number of UK nationals whose personal data has been inputted to Europol by the UK; Europol data systems are not configured to provide this data by nationality.
Europol databases are governed by handling codes. When personal data are inputted to Europol, the owner of the data (which will be the competent law enforcement agency of a member state) specifies a handling code which dictates to whom the information can be disseminated. The member state can therefore state whether or not the data may be shared with other states. Europol has internal controls to monitor compliance with these handling codes.
Data contributed by the UK, which may include data on UK nationals, are initially assessed by the relevant competent law enforcement authority within the UK for compliance with the Europol mandate. The UK Europol National Unit will also have sight of this information. The UK has no ability to check data provided by other member states.