INTERPOL DataAccess Request
Individuals may submit a data access request to confirm whether their personal data is recorded in INTERPOL's information system. This is often the first step before challenging a Red Notice or diffusion.
Otherside represents clients before the Commission for the Control of INTERPOL's Files (CCF), preparing CCF-compliant access requests and managing NCB restriction issues that can limit disclosure. Where the response suggests grounds to act, we advise on follow-on steps, including deletion requests.
View all INTERPOL legal services
What Is a Data Access Request?
A data access request is a formal submission to the Commission for the Control of INTERPOL's Files (CCF) through which an individual asks whether their personal data is recorded in INTERPOL's information system. The right of access is provided for under the Rules on the Processing of Data (RPD) and is open to any person, regardless of nationality or location.
The access procedure serves a specific purpose: it allows the individual to confirm whether they are the subject of a Red Notice, diffusion, or other form of recorded data. For many clients, this is the first step toward understanding their situation and deciding whether to file a deletion request or seek other remedies before the CCF.
NCB Restrictions on Disclosure
Under Article 35 of the CCF Statute, information connected with a request is in principle accessible to the applicant. Before any disclosure, however, the CCF consults the National Central Bureau (NCB) of the country that recorded the data. The NCB may consent to disclosure, agree to partial disclosure, or restrict communication entirely on one of three grounds: protection of public or national security, confidentiality of an investigation, or protection of the rights of the applicant or third parties. Any restriction must be motivated and justified in the specific case.
According to the CCF's own reporting, over 50 per cent of cases are impacted by NCB restrictions. In 2024, 70 per cent of access requests exceeded the four-month processing benchmark, with extensive exchanges over disclosure restrictions identified as a principal cause of delay. The CCF interprets restrictions strictly and may take unjustified restrictions into account when deciding on the compliance of the data concerned. In practice, a restricted response may confirm only that data exists in INTERPOL's files without disclosing the source country, the type of notice, or the underlying case. Understanding what a restricted response means, and whether there are grounds to challenge the restriction, is often critical to deciding what comes next.
How a Data Access Request Works
All access requests are submitted to the Commission for the Control of INTERPOL's Files (CCF), the independent body responsible for processing requests from individuals concerning data held in INTERPOL's information system.
Submission Through the CCF Portal
Access requests are filed through the CCF's dedicated online portal. The request must include sufficient identity verification to allow the General Secretariat to search its files. We prepare the submission to meet CCF format requirements and ensure all identification documents are properly compiled.
In 2024, access requests accounted for approximately 37 per cent of all admissible requests received by the CCF, out of a record 2,586 total. A properly framed submission reduces the risk of delays caused by incomplete documentation or identity verification issues.
NCB Consultation and Restrictions
Under Article 35 of the CCF Statute, information connected with a request is in principle accessible to the applicant. Before any disclosure, the CCF consults the relevant National Central Bureau (NCB) of the country that recorded the data. The NCB may consent to full disclosure, partial disclosure, or restrict the communication of information entirely on grounds of national security, investigative confidentiality, or the protection of the rights of the applicant or third parties.
Over 50 per cent of cases handled by the CCF are impacted by NCB restrictions. Any restriction must be motivated and justified in the specific case. Where justifications are insufficient, the CCF engages in further exchanges with the NCB, which significantly extends processing times. The CCF interprets restrictions strictly and may take unjustified restrictions into account when assessing the compliance of the data concerned.
Over 50% of cases impacted by restrictionsTimeframe
Under Article 40(1) of the CCF Statute, the Requests Chamber must issue its conclusions within four months from the date the request is declared admissible. Extensions must remain exceptional and require justification. In practice, however, the CCF's 2024 Annual Report shows that only 30 per cent of access requests were finalized within this deadline, and 70 per cent were not.
Delays are driven by several factors: the complexity of the data held, the number of NCBs consulted, and above all the extensive exchanges required when NCBs impose restrictions on disclosure. Cases involving multiple source countries or contested restrictions take significantly longer. We monitor the procedure throughout and follow up where delays arise.
4-month statutory deadline / 70% exceeded in 2024Communication of the Response
The CCF communicates its response directly to the applicant (or their legal representative). The response confirms whether personal data is recorded in INTERPOL's files. Subject to any NCB restrictions, it may also disclose the nature of the data, the type of notice or diffusion, and the source country.
The access response is often the first concrete confirmation that a Red Notice or diffusion exists. Where the response reveals grounds for a challenge, we advise on follow-on steps, including filing a request for deletion or seeking temporary blocking of the data.
Getting the Full Picture
An access request is more than a formality. It is often the starting point for the entire case. How it is handled affects what information is disclosed and what options follow.
Procedural Accuracy
We prepare each access request to meet the CCF's format and identity verification requirements from the outset. Incomplete or improperly formatted submissions lead to delays, requests for supplementary information, or outright rejection. The goal is to file a clean submission that moves through the process without procedural friction.
Monitoring and Follow-Up
Once the request is filed, we track the four-month statutory deadline under Article 40(1) of the CCF Statute and follow up with the CCF where needed. With 70 per cent of access requests exceeding this deadline in 2024, active monitoring ensures the request does not stall and that any additional information requested by the CCF is provided promptly.
Interpreting the CCF Response
The value of an access request often lies in what the response reveals, and what it does not. Where NCB restrictions limit disclosure, we analyze the response in the context of what is already known about the client's situation. Where the response confirms the existence of a Red Notice or diffusion, we advise on whether there are grounds for a deletion request, temporary blocking, or other follow-on steps.
Why Choose Otherside for Data Access
Exclusive CCF Practice
Otherside is the only law firm exclusively focused on INTERPOL matters and CCF proceedings. We handle access requests, deletion requests, provisional measures, and revision applications. Nothing else. This specialization means the process, the rules, and the institutional dynamics are familiar territory for every case we take on.
About the founderAddressing NCB Restrictions
NCB restrictions are one of the most common obstacles in access proceedings. They can reduce the response to a bare confirmation that data exists, without disclosing the source country, the type of notice, or its content. We anticipate these restrictions, advise on what they mean in context, and where appropriate, challenge them to obtain fuller disclosure.
View servicesFrom Access to Action
An access request is rarely the end of the process. Where the CCF response confirms a Red Notice or diffusion, we advise immediately on the available follow-on options: filing a deletion request, applying for temporary blocking, or coordinating with local counsel on related domestic proceedings. The access stage is built as the foundation for what comes next.
Red Notice removalRequest a Confidential Data Access Review
If you need to confirm whether your personal data is recorded in INTERPOL's files, or if you have received a response that you need help interpreting, we can advise on the access process and any follow-on steps before the CCF.