What role does the European Data Protection Supervisor play in third-country transfer complaints?

The EDPS serves as the independent supervisory authority for Europol’s data processing activities. You may lodge a complaint directly with the EDPS if Europol refuses your access, rectification, or erasure request, or if you believe a transfer violated applicable safeguards. The EDPS can investigate, request information from Europol, and issue binding decisions requiring corrective action. Investigations typically conclude within 12–18 months, though the EDPS can impose interim measures. Unlike national DPAs, the EDPS has direct jurisdiction over Europol without requiring preliminary domestic exhaustion.