On November 27, 2008, the Council of the European Union adopted a framework decision on the protection of personal data in the field of Police and Judicial Cooperation in Criminal Matters. EU Member States have two years to implement the decision, and are free to adopt stronger requirements. The text is available (in French) here. The European Data Protection Supervisor (EDPS) has criticized the framework decision. More information is available here.