The Legislative Decree No. 54 of April 23th, 2015 (effective from May 24th, 2015) is designed to simplify the exchange of information and intelligence between law enforcement authorities in the EU Member States.

The provisions of the Personal Data Protection Code related to processing operations made by the police and public security authorities shall apply. Therefore, all personal data exchanged between EU authorities will be processed solely within criminal investigations and in relation to criminal proceedings and will be immediately deleted as soon as they are no longer necessary for achieving the purposes.

Moreover, the data subject shall have the right to (i) be informed of his/her data exchanged/processed, except in case the disclosure of these information will prejudice the successful conclusion of criminal investigations and intelligence activities and (ii) obtain erasure, anonymization or blocking of data that have been processed/exchanged unlawfully.