Suing the Supervisor: Austrian Activist Takes EU Data Chief to Court Over Europol File

An Austrian activist cleared of charges in a Greek border case has launched a lawsuit against the European Data Protection Supervisor, the official watchdog responsible for holding EU institutions to privacy rules. The legal challenge focuses on records retained by Europol, the European Union's law enforcement cooperation agency. Despite the individual's acquittal in Greece, personal data connected to the investigation remained stored within Europol's systems. The activist is pursuing legal action against the EU data chief for failing to ensure the police agency erased the file once national proceedings concluded.

For citizens and civil society campaigners, the dispute exposes a common friction point in European security cooperation: being cleared by a national judge does not automatically clean your record across EU police databases. Europol serves as an information-sharing hub for national authorities tackling cross-border crime. When member states supply intelligence during an investigation, those digital files often outlive the court cases that generated them. A victory for the activist could force EU authorities to create stricter, automated mechanisms to erase personal records as soon as national courts issue an acquittal.

The case illustrates the complex legal route required to challenge EU administrative decisions. Citizens who believe an EU agency has mishandled their personal information cannot simply take the agency to a local magistrates' court. Instead, they must challenge the oversight decisions of the European Data Protection Supervisor before the General Court of the European Union in Luxembourg. In the EU bubble, the data supervisor serves as both referee and defender of institutional data rules. Taking the privacy regulator to court because a police file proved more durable than the prosecution behind it is a classic piece of EU legal machinery: to compel the police to forget, one must first sue the referee for allowing them to remember.

The case now moves to the EU General Court, where judges will evaluate whether the European Data Protection Supervisor correctly applied EU privacy law in its oversight of Europol. If the court rules against the supervisor, Europol will face pressure to delete the activist's file and update its policies on coordinating data deletion with member states' national court decisions.