EU data protection watchdog raises red flags over expanding Europol’s powers
Critics warn the proposal could weaken privacy and fundamental rights.
Europol building. Image by Getty/Yuriko Nakao
- The plan would expand Europol’s data collection, including information on people with no proven link to crimes.
- The EDPS says Europol needs stronger safeguards, oversight, and enforcement before receiving broader powers.
- The proposal would double Europol’s budget to €3 billion ($3.5 billion) from 2028 to 2034, pending EU approval.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
The European Data Protection Supervisor (EDPS) is concerned about the European Commission’s plans to extensively expand Europol’s powers.
On June 24th, 2026, the European Commission issued the Proposal for a Regulation of the European Parliament and of the Council on the European Union Agency for Law Enforcement Cooperation (Europol).
The objective of the proposal is to strengthen Europol’s legal framework, making the agency more capable of combating cross-border criminal threats and dealing with internal security issues in EU member states. It aims to do so by strengthening Europol’s role as the EU’s information, operational, and innovation hub.
The EDPS, the EU’s independent data protection authority that advises European institutions and bodies on the processing of personal data, recognizes the need to innovate in the increasingly complex and ever-changing circumstances we know today.
However, this should not come at the expense of fundamental human rights.
According to the privacy watchdog, the proposal would lead to more personal data being collected and processed, including information on people with no established link to criminal investigations or proceedings. In theory, such data could be retained for an indefinite period, which shouldn’t be allowed.
“Modern security threats demand sophisticated responses, but we cannot sacrifice fundamental rights in pursuit of security. This proposal creates serious risks, particularly regarding the processing of the personal data of individuals with no established criminal links,” Wojciech Wiewiórowski, supervisor at the EDPS, says in a statement.
In Opinion 18/2026, the EDPS states that the proposal, in its current form, fails to provide sufficient safeguards.
To mitigate these risks, Europol’s new legal framework must include robust safeguards, such as effective oversight and enforcement mechanisms, to ensure EU data protection laws are respected.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
Back in June, the European Commission proposed doubling Europol’s budget to €3 billion between 2028 and 2034, enabling the agency to expand its staff and develop advanced technological capabilities.
“Criminals are highly adept at exploiting the opportunities of the digital realm, operating effectively across borders without limitations. With today’s proposals, we are strengthening both Europol and Eurojust so that Europe can respond faster,” Henna Virkkunen, executive vice-president for tech sovereignty, security and democracy, said in a statement.
The European Parliament and the Council of the European Union still have to approve the European Commission’s proposal.