On 12 June the European Data Protection Board (EDPB) announced that oversight of Eurodac—the fingerprint database used to identify asylum seekers and irregular migrants—will now be exercised by a Coordinated Supervision Committee (CSC) that brings together national regulators, including France’s CNIL, under the chairmanship of the European Data Protection Supervisor. The move ends the fragmented dual-layer model in which national authorities oversaw domestic uploads while the EDPS monitored the central unit. Under the new system the CSC will issue harmonised guidance, launch joint inspections and adopt common remediation measures, mirroring the model already applied to large-scale EU IT systems such as the Entry-Exit System. For France the change is significant: prefectures must still capture and transmit fingerprints within 72 hours, but any compliance failure could now trigger coordinated sanctions rather than purely national enforcement. CNIL inspectors gain quicker access to peers’ findings across Europe, raising the bar for technical and organisational measures in French detention centres, OFPRA offices and police stations. Public-sector DPOs and private contractors that operate biometric kits under outsourcing agreements should review data-processing registers, retention schedules and incident-notification workflows to align with the CSC’s anticipated audit template. While the reform has no direct impact on business travellers, it underpins the integrity of the wider Schengen information architecture on which accelerated border-clearance tools depend.
Source: Leto.legal
