AFRIPOL

AFRIPOL was established in 2014 under the aegis of the African Union as an independent mechanism for police cooperation for Member States of the African Union. Its main objective is to establish a framework for police cooperation at the strategic, operational and tactical levels between Member States police institutions. Some areas of concern are:

• Human trafficking for which it aims at providing information sharing and intelligence and criminal law databases;
• Border management for which it intends to play a key role for the cooperation of border agencies to improve border control, surveillance, patrol and protection.

Europol Analytical Work Files (AWFs)

Europol operates a system of Analytical Work Files (AWFs), which supports active investigation through storing and analysing information derived from investigations of Europol Member States. An AWF on smuggling networks operating from place A to place B could be established.

An AWF is the primary means by which Europol offers operational analytical support to investigations within Member States. AWF CHECKPOINT is the relevant database for smuggling of migrants. Its purpose is to assist Member States in preventing and combating the forms of criminality associated with the facilitation of irregular migration within and into EU by organized criminal groups. AWFs utilize a "target group"-oriented approach.

Any third State or international organization can contribute data to be used in an AWF and may, under special conditions, be invited to be an associated member of an AWF.

INTERPOL

INTERPOL notices are international requests for cooperation or alerts allowing police in member countries to share critical crime-related information. Notices are published by INTERPOL's General Secretariat at the request of National Central Bureaus and authorized entities.

The subjects of Red Notices are wanted by national jurisdictions for prosecution or to serve a sentence based on an arrest warrant or court decision. INTERPOL's role is to assist the national police forces in identifying and locating these persons with a view to their arrest and extradition or similar lawful action. 

Like the Red Notice is another request for cooperation or alert mechanism known as a 'diffusion'. This is less formal than a notice but is also used to request the arrest or location of an individual or additional information in relation to a police investigation. A diffusion is circulated directly by an NCB to the member countries of their choice, or to the entire INTERPOL membership and is simultaneously recorded in INTERPOL's Information System.

INTERPOL may further assist Member States though its I-24/7 global police communications system that connects law enforcement officers in all member countries. It enables authorized users to share sensitive and urgent police information with their counterparts, 24 hours a day, 365 days a year. I-24/7 further enables investigators to access INTERPOL's range of criminal databases: suspected criminals or wanted persons, stolen motor vehicles, fingerprints, DNA profiles, stolen administrative documents as well as stolen and lost travel documents, which is a particularly relevant tool in relation to SOM.

Eurojust role

Eurojust is mandated to improve coordination and cooperation between investigating and prosecuting authorities in the Member States, and to provide support to them generally. In the terms of its founding instrument, Members States are required to exchange information with Eurojust that will allow it to perform its tasks. This information permits, for instance, to cross-check links to cases in the Eurojust Case Management System, to offer assistance to Member States at an early stage, and to provide operational and strategic feedback to national authorities. 

The obligation to transmit information specifically includes information about: 

• Joint Investigation Teams;

• Cross-border cases of gravity; and
• Cases involving (potential) conflicts of jurisdiction, controlled deliveries, repeated problems in judicial cooperation.

Eurojust also has the so-called On-Call Coordination, which enables judicial authorities and law enforcement officials to request Eurojust's assistance on a 24 hour/7-day per week basis. Notification of the OCC telephone numbers is restricted to judges, prosecutors and law enforcement officials. 

Eurojust's coordination meetings bring together law enforcement and judicial authorities from Member States and third States, allowing for strategic, informed and targeted decisions in cross-border crime cases and the resolution of legal and practical difficulties resulting from the differences in the legal systems involved. Coordination centres, in turn, permit the simultaneous meeting of police, judicial and, if needed, customs authorities involved in specific case or operation. Coordination centres provide a unique opportunity for the real-time exchange of information and centralized coordination of the simultaneous execution of, inter alia, arrest warrants and searches and seizures in different States. Coordination centres expedite the timely transmission of additional information that is urgently needed to execute such measures and newly issued MLA requests.

Lawfulness - Duty to process personal data only when there is an appropriate legal basis or a legislative measure authorizing it.

Fairness - Sufficient information shall be provided to the data subject to make the processing fair and transparent. The data subject needs to be informed of the existence of, and agree to, the processing activities and its purposes at the moment of collection.

Transparency - Responsibility to ensure that any information or communication to the data subject is concise, easily accessible and understandable. All natural persons should be made aware of risks, rules, safeguards, and rights concerning the processing of his or her personal data and how to exercise the corresponding rights.

Purpose limitation - (i) Personal data may only be collected for specified (defined), explicit (clear) and legitimate purposes (legal basis) determined at the moment of collection; (ii) undefined and/or unlimited purposes are unlawful; (iii) personal data must only be processed in a manner compatible with those purposes. Otherwise, a new and separate legal basis is required. There are some exceptions to this principle; for instance, processing for archiving, scientific, historical or statistical purposesas long as appropriate technological and organizational measures are in place to protect the rights and freedoms of the data subjects.

Proportionality - Duty to process personal data only to the extent adequate (appropriate), and relevant (pertinent) to meet the purposes for which the data was collected (not excessive). Personal data may only be stored and processed if there is not another reasonable privacy-friendly solution to address the goals at stake. When the data no longer is proportionally adequate to meet the purpose, it must be erased.

Accuracy - Responsibility to take every reasonable step to ensure that personal data is accurate and up to date vis-à-vis the specific purposes for which the data was processed. Inaccurate data must be erased or rectified without delay.

Integrity and confidentiality - Duty to process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures.

Accountability - Processors of data must be able to demonstrate that they have respected the principles guiding the protection of personal data. They are liable if they have breached their obligations.

Note: There are some limitations to these principles when the processing of data is made for purposes of furthering investigations or prosecutions. For example, while the principle of consent is usually a pillar of data protection law (that is, the data subject should give his or her consent to the collection and processing of data and no other processing, exchange, or use may occur beyond the terms of that consent), being dependent on the consent of a defendant to collect and process (including in the context of police cooperation) his or her personal data, would obviously stymie justice efforts.

It is important to note that the international organizations and entities mandated to facilitate international police and judicial cooperation must adhere to well-defined rules regarding the processing of personal data. That is, often, exchange of information will not be feasible if the standards of personal data protection are not equivalent.