Directive (EU) 2023/2123 of the European Parliament and of the Council of 4 October 2023 amending Council Decision 2005/671/JHA as regards its alignment with Union rules on the protection of personal data

‘3a Each Member State shall ensure that personal data are processed pursuant to paragraph 3 of this Article only for the purposes of the prevention, investigation, detection or prosecution of terrorist offences and other criminal offences for which Europol is competent, as listed in Annex I of Regulation (EU) 2016/794. Such processing shall be without prejudice to the limitations applicable to the processing of data under Regulation (EU) 2016/794.’

1 Member States shall bring into force the laws, regulations and administrative provisions necessary to comply with this Directive by 1 November 2025. They shall immediately inform the Commission thereof. When Member States adopt those measures, they shall contain a reference to this Directive or shall be accompanied by such a reference on the occasion of their official publication. The methods of making such reference shall be laid down by Member States.

2 Member States shall communicate to the Commission the text of the main measures of national law which they adopt in the field covered by this Directive.

This Directive shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

This Directive is addressed to the Member States in accordance with the Treaties.