Law Enforcement Directive (LED)
Definition
EU Directive 2016/680, which governs the processing of personal data by competent authorities for the purposes of prevention, investigation, prosecution and execution of criminal penalties; provides the legal basis for law enforcement biometric database use in EU member states.
- Formal name
- EU Directive 2016/680
- Jurisdiction
- European Union member states
- Scope
- Personal data processing by competent authorities
- Covers
- Prevention, investigation, prosecution, execution of penalties
Common questions
How does the LED differ from the GDPR in scope?+
GDPR governs general commercial and administrative processing of personal data, while the LED specifically governs processing by police and judicial authorities for criminal law purposes, including forensic biometric databases, and each sets its own conditions and safeguards.
Why does the LED matter for biometric evidence used across EU member states?+
It sets the baseline legal conditions, such as necessity and proportionality requirements, under which national police forces may collect, store, and share biometric data like fingerprints or DNA profiles, which affects the admissibility and cross-border use of such evidence.
Related terms
- BIPA
- Illinois Biometric Information Privacy Act (740 ILCS 14, 2008). Requires informed written consent before collecting biometric identifiers and prohibits their sale. The...
- Clearview AI
- New York company that built a face-recognition database of approximately 30 billion images scraped from public websites without consent; subject to BIPA...
- Conformity Assessment
- The process by which a provider of a high-risk AI system (such as a face recognition database for law enforcement) demonstrates compliance...
- DPDP Act 2023
- Digital Personal Data Protection Act 2023. India's general data protection statute, in force in phases from 2024. Applies to IoT-collected personal data...
- EU AI Act 2024
- Regulation (EU) 2024/1689, the first comprehensive AI regulatory framework, which prohibits real-time biometric identification in publicly accessible spaces with three narrow exceptions,...
- High-Risk AI System
- An AI system classified under Annex III of the EU AI Act as requiring mandatory technical documentation, risk management, human oversight, transparency,...
- PACE S.78
- Section 78 of the Police and Criminal Evidence Act 1984 (England and Wales), which gives courts discretion to exclude prosecution evidence if...
- Purpose-Limitation
- The data protection principle prohibiting processing of personal (including biometric) data for any purpose other than the one for which it was...
- Puttaswamy V. Union of India
- The Supreme Court of India's 2017 nine-judge bench decision recognising the right to privacy as a fundamental right under Article 21 of...