Brussels: The European Commission has called upon Cyprus and seven other Member States to align their national measures with the EU's directive on the exchange of information related to terrorist offences, ensuring conformity with EU data protection rules.
According to Cyprus News Agency, the Commission has initiated infringement procedures by dispatching letters of formal notice to eight Member States, including Cyprus, Bulgaria, Estonia, Greece, Spain, the Netherlands, Portugal, and Slovenia. These countries have not fully transposed Directive (EU) 2023/2123 into their national laws, which is necessary to harmonize their regulations with EU personal data protection standards.
The affected Member States are now required to respond to the Commission's notice within two months, complete the transposition of the Directive into national law, and inform the Commission of their actions. Failure to provide a satisfactory response may result in the Commission issuing a reasoned opinion.
The Directive is designed to facilitate the effective and secure exchange of information on terrorist crimes between Member States while ensuring robust safeguards for personal data and fundamental rights. The deadline for transposing the Directive was set for 1 November 2025. It outlines specific rules for information exchange and cooperation on terrorist crimes and updates provisions to align with the directive on the protection of personal data used for law enforcement purposes.