Data subjects may exercise rights in relation to their personal data processed in SIS as set out in Articles 15, 16 and 17 of Regulation (EU) 2016/679 (General Data Protection Regulation) and in Articles 14 and 16(1) and (2) of the Directive on the protection of personal data in police and criminal justice (Directive (EU) 2016/680).
Data subjects therefore have the following rights:
right of access to data relating to them processed in SIS;
right to rectification of inaccurate data;
right to erasure where data have been unlawfully stored;
right to bring an action before the courts or competent supervisory authorities for access, rectification, erasure, information or compensation in relation to an alert concerning them.
Subjects may exercise the above-mentioned rights in any Schengen State, regardless of which State has lodged the specific alert. The Member State receiving the request from the data subject shall consult in advance the Member State issuing the alert before providing information to the data subject concerning data processed in the SIS. The data subject shall be informed as soon as possible and in any event within one month of receipt of the request of the follow-up to the exercise of the right. This period may be extended by a further two months where necessary, in which case the data subject shall be informed of any such extension within one month of receipt of the request, together with the reasons therefor.
Last updated: 16.02.2024
