How long does an EDPS investigation into Europol typically take?

Most EDPS investigations conclude within 12 to 18 months, though complex cases involving multiple data sources or third-country transfers may extend to 24 months. The EDPS typically acknowledges complaints within one month and requests Europol’s response within two to three months. Delays often occur when Europol claims it must consult contributing Member States before responding. Requesting interim measures — such as suspension of data transfers — can accelerate review of urgent cases, particularly where ongoing harm such as asset freezing or travel bans is documented.