Understanding the Commission for the Control of INTERPOL’s Files (CCF): Your Complete Guide

The CCF (Commission for the Control of INTERPOL’s Files) is the independent, impartial body officially responsible for ensuring that INTERPOL‘s processing of personal data complies with applicable rules and data protection standards. Established under Articles 2 and 3 of INTERPOL’s Constitution, the CCF is the organization’s only mechanism for individuals to challenge data such as Red Notices or Diffusions. It is not an appellate court. It does not assess the criminal merits of cases or rule on extradition matters.

Commission for the Control of INTERPOL’s Files (CCF) – an independent supervisory body established by INTERPOL’s Constitution to monitor compliance with data protection rules, advise INTERPOL bodies on personal data processing, and process individual requests for access, correction, or deletion of data held in INTERPOL’s databases.

Key Takeaways

• Access requests must be decided within four months of admissibility; deletion or correction requests within nine months. Plan accordingly if you need a decision by a specific date.
• Since 26 March 2026, all CCF requests go exclusively through INTERPOL’s secure online portal. Email and postal submissions are no longer accepted — requests sent by other means will be rejected.
• The CCF has ordered deletion or correction in 65 documented cases where data violated INTERPOL’s Constitution or Rules on the Processing of Data.
• Revision of a CCF decision is possible under Article 42 of the CCF Statute if new facts emerge within six months of discovery that would likely alter the outcome.
• Seven core principles guide CCF review: lawfulness, purpose limitation, accuracy, proportionality, human rights compliance, neutrality, and non-discrimination.

What Is the CCF and Why Does It Matter?

The Commission for the Control of INTERPOL’s Files serves three distinct functions codified in INTERPOL’s Constitution. First comes supervision — monitoring all data processing activities conducted by INTERPOL and its 196 member countries’ National Central Bureaus. Second, advice — the Commission guides INTERPOL’s General Secretariat and member states on data protection standards. Third, case review — handling individual requests for access to, correction of, or deletion of personal data.

Legal authority flows from INTERPOL’s Constitution, the Rules on the Processing of Data (RPD), General Assembly Resolutions, the Statute of the CCF, and the Commission’s Operating Rules. Together, these documents establish the CCF as functionally independent from INTERPOL’s operational bodies and from member countries’ law enforcement agencies.

The Statute defines the Commission’s competence, powers, structure, functioning, and procedures. Seven members serve five-year terms, selected for expertise in data protection, international law, and police cooperation. Each acts in an individual capacity and is prohibited from receiving instructions from any government or INTERPOL body.

How Does the CCF Function Within INTERPOL’s Structure?

INTERPOL processes millions of data entries annually. Red Notices (international wanted person alerts), Diffusions (faster-track alerts), stolen and lost travel documents, DNA profiles, fingerprints, and police records flow through its secure communications network to law enforcement agencies in 196 countries.

The CCF monitors this vast apparatus to ensure compliance with INTERPOL’s constitutional limits. Article 3 of INTERPOL’s Constitution prohibits the organization from undertaking any intervention or activities of a political, military, religious, or racial character — the neutrality principle. Data processing must serve legitimate international police cooperation and respect human rights standards recognized in the Universal Declaration of Human Rights.

What is the CCF’s supervisory role?

Supervision allows the CCF to initiate ex officio reviews without waiting for an individual complaint. The Commission monitors compliance across all databases, examines procedures for recording and circulating data, and checks whether National Central Bureaus meet data quality requirements when submitting information to INTERPOL.

This authority extends to proportionality assessments. The CCF evaluates whether circulation of a particular notice or diffusion strikes an appropriate balance between law enforcement objectives and impact on the individual’s rights. Deletion or correction may be ordered even when no individual has filed a request.

What is the CCF’s advisory role?

INTERPOL’s General Secretariat and member countries regularly consult the CCF on data protection questions. The Commission issues opinions on proposed policy changes, draft General Assembly resolutions affecting data processing, and technical measures for implementing the Rules on the Processing of Data.

Advisory opinions have shaped key INTERPOL policies: retention periods for different data categories, procedures for assessing the neutrality principle in politically sensitive cases, and protocols for notifying individuals when their data is processed. These opinions carry significant institutional weight, though they are not legally binding.

What Types of Requests Can You Submit to the CCF?

Two primary rights are enforceable through the CCF: the right to access INTERPOL data concerning you, and the right to correction or deletion of data that violates INTERPOL’s rules.

An access request reveals what information INTERPOL holds about you. The organization does not proactively notify individuals when their data is recorded—many people first discover a Red Notice or Diffusion only when detained at a border or airport. An access request lets you learn this before such an encounter.

A deletion or correction request challenges the lawfulness of data processing. You may request deletion if data violates INTERPOL’s Constitution (political, military, religious, or racial character, for instance), breaches the Rules on the Processing of Data, is inaccurate or incomplete, or fails a proportionality assessment. Correction requests address factual errors — misspelled names, incorrect dates, or misattributed offenses.

Both must be submitted through INTERPOL’s secure online portal. As of 26 March 2026, email submissions, postal mail, and other channels are no longer accepted. The portal accepts PDF, JPG, and DOCX files; video and audio uploads are not permitted.

How do I access my INTERPOL data?

Account creation on INTERPOL’s secure portal requires identification documents (passport or national identity card), proof of current address, and a statement explaining why you believe INTERPOL may hold data concerning you.

The CCF first assesses admissibility — whether the request meets formal requirements and falls within the Commission’s competence. Common grounds for rejection include lack of proper identification, failure to demonstrate a plausible link to INTERPOL data, or requests concerning purely national law enforcement databases unconnected to INTERPOL systems.

Once declared admissible, the CCF has four months to decide. This timeline runs from the admissibility date, not from initial submission — a crucial distinction if you need a decision by a specific deadline. The Commission will inform you whether INTERPOL holds data concerning you and, if so, provide specified information about its nature, source, and recipients.

INTERPOL applies certain limitations to access. You will not receive copies of raw intelligence files, ongoing investigative materials that could compromise active operations, or information revealing law enforcement methods. The CCF balances your access rights against operational security.

How do I request deletion or correction of INTERPOL data?

Deletion and correction requests follow the same portal submission process but require more extensive documentation. You must specify which INTERPOL rule the data processing violates and provide supporting evidence.

The most common legal grounds are:

Violation of Article 3 (neutrality principle): Data has a political, military, religious, or racial character — prosecution based on political opposition, military conscription evasion, religious practice, or ethnic identity, for example.

Non-compliance with the Rules on the Processing of Data: Data fails accuracy, completeness, or currency requirements; the underlying offense does not meet INTERPOL’s threshold for international cooperation; or proper procedures were not followed when recording the data.

Proportionality failure: The impact on your rights, reputation, and freedom of movement outweighs the law enforcement interest in circulating the data, considering offense severity, time elapsed, and individual circumstances.

The CCF has nine months from admissibility to decide deletion or correction requests. During this period, the Commission may request additional information from you, consult the National Central Bureau that submitted the data, and conduct its own analysis of INTERPOL’s files. If nine months pass without a decision, your case remains pending — there is no automatic approval if the deadline is missed.

“The CCF ordered deletion of Red Notices in 65 documented cases between 2005 and 2026 where data violated INTERPOL’s Constitution or Rules on the Processing of Data, according to the INTERPOL Case Law Database.”

What Principles Does the CCF Apply When Reviewing Data?

The CCF evaluates every request against INTERPOL’s Constitution, the Rules on the Processing of Data, and relevant General Assembly resolutions. Seven core principles structure this analysis:

Lawfulness: Data processing must have a valid legal basis in INTERPOL’s governing documents. The CCF examines whether the requesting country followed proper channels through its National Central Bureau, whether the data category is authorized for international circulation, and whether recording procedures were correctly applied. If lawfulness fails, your data gets deleted — which means Red Notices disappear from member countries’ systems, though the issuing nation can still pursue you domestically.

Purpose limitation: Data recorded in INTERPOL’s files must serve the organization’s mission of international police cooperation. Information collected for immigration control unrelated to criminal matters, civil disputes, or administrative violations exceeds INTERPOL’s mandate and becomes grounds for deletion.

Accuracy: Data must be factually correct, complete, and current. The CCF frequently encounters Red Notices that remain active despite acquittals, case dismissals, or completed sentences — situations where the issuing country simply failed to update records. Outdated information violates this principle and typically triggers deletion.

Proportionality: This principle balances law enforcement needs against individual rights. A Red Notice for a minor offense carrying a six-month maximum sentence often fails proportionality review, especially if years have passed since the alleged conduct. The practical consequence: your global arrest risk disappears, but you remain prosecutable in your home country.

Human rights compliance: INTERPOL’s processing must respect fundamental rights articulated in the Universal Declaration of Human Rights — fair trial rights, freedom of movement, protection from arbitrary detention. The CCF considers whether domestic prosecution meets international fair trial standards when evaluating data lawfulness. Countries with documented torture or systematic rights abuses face particular scrutiny.

Neutrality: Article 3 of INTERPOL’s Constitution prohibits activities of a political, military, religious, or racial character. The CCF applies a functional test: does the data processing serve legitimate criminal law enforcement, or does it primarily advance political objectives, suppress dissent, enforce military discipline, punish religious practice, or target ethnic groups? Political prosecution is INTERPOL’s most common ground for deletion.

Non-discrimination: Data processing must not discriminate based on race, nationality, religion, political opinion, or other protected characteristics. The CCF examines whether prosecution patterns suggest selective or discriminatory application of criminal law — for instance, whether certain ethnic groups face charges while others committing identical acts do not.

What happens during a proportionality assessment?

Proportionality analysis turns on three core questions. First: how serious is the alleged offense? INTERPOL’s Rules on the Processing of Data establish a minimum threshold. Offenses punishable by less than two years’ imprisonment generally do not warrant Red Notice circulation, though exceptions exist for certain categories like terrorism or organized crime.

Second: how reliable is the source data? The CCF examines whether the requesting country provided sufficient information for other member states to evaluate the legal basis for potential arrest and extradition. Notices based on vague descriptions, missing key dates, or contradictory information raise immediate concerns and often result in deletion rather than CCF approval.

Third — and most consequential for you — what are the real-world impacts? A Red Notice creates a global arrest risk. It affects your ability to travel, secure employment, open bank accounts, and maintain family contact across borders. The CCF weighs these concrete consequences against the law enforcement interest:

• How much time has passed since the alleged conduct?
• Do you have family, property, or employment ties outside the requesting country?
• Could authorities achieve their goals through less invasive means — requesting you appear voluntarily, for example?
• Did the issuing country actually attempt arrest in countries where you lived?

Proportionality assessments resist formulaic answers. The CCF examines each case individually rather than applying rigid rules. Practitioners often call proportionality the most unpredictable element of CCF review — two cases with nearly identical facts sometimes yield opposite outcomes based on details that seem minor until the decision lands.

Can You Challenge a CCF Decision?

The CCF Statute provides one post-decision mechanism: revision under Article 42. Revision is not an appeal. It is not a second chance to argue the same points. Instead, it requires presenting new facts that, if known during the original review, would likely have changed the outcome.

“New facts” means information that existed at the time of the original decision but was unknown to you and could not reasonably have been discovered through diligent effort — or factual developments that occurred after the decision, such as an acquittal, case dismissal, or completed sentence. Legal arguments you could have made earlier, alternative interpretations of known facts, and disagreement with the CCF’s balancing do not qualify.

You must submit a revision request within six months of discovering the new facts. This deadline is strict; the CCF has no discretion to extend it. Miss it, and revision becomes permanently unavailable. Your request must explain what the new facts are, when you discovered them, why they could not have been presented initially, and how they would likely change the result.

Revision requests follow the same portal process as initial requests. The CCF first determines whether the revision meets admissibility criteria — whether genuine new facts have been presented within the deadline. If admissible, the Commission conducts a fresh analysis incorporating the new information.

What qualifies as “new facts” for revision?

The INTERPOL Case Law Database documents several categories of new facts that have supported successful revisions:

Subsequent judicial developments: A criminal case that was pending during CCF review is dismissed, results in acquittal, or concludes with a sentence significantly shorter than initially indicated. The CCF may find that changed circumstances tip the proportionality balance toward deletion — especially when original Red Notice details suggested a longer sentence than materialized.

Newly discovered procedural defects: Documents obtained after the initial decision reveal that the requesting country violated its own criminal procedure law when issuing the arrest warrant, that INTERPOL procedures were not followed when recording the data, or that material information was withheld from the CCF. These defects can trigger deletion even if the underlying suspicion was legitimate.

Changed personal circumstances: Developments such as asylum grant, refugee status recognition, or official determination by another country that prosecution is politically motivated constitute new facts affecting the neutrality principle. A grant of asylum in a rights-respecting country often supports a revision request by demonstrating that the requesting state’s justice system was not reliable.

Corrected factual errors: Discovery that key facts underlying the CCF decision — dates, offense descriptions, identity of the wanted person — were materially incorrect due to database errors or mistaken identity. These corrections sometimes entirely undermine the original grounds for the Red Notice.

Revision remains discretionary. Even when new facts exist, the CCF may conclude they would not have altered the original outcome and decline to modify the decision.

How to Submit a Request to the CCF in 2026 and Beyond

INTERPOL’s secure online portal became the only submission channel for all CCF requests on 26 March 2026. Email, postal mail, fax, and in-person delivery no longer work. This change enhances security, ensures complete documentation, and gives you real-time status tracking — eliminating the old uncertainty of not knowing whether your papers ever arrived.

Creating an account requires an email address and identity documents — a passport or national identity card with a photograph. INTERPOL verifies document authenticity before activating your account, which typically takes three business days. Plan accordingly if you need to submit urgent requests.

Once active, select your request type: access, deletion, or correction. The portal guides you through a structured form requesting:

• Full name, including aliases or name variations
• Date and place of birth
• Nationality and any prior nationalities
• Current address and contact information
• Countries where you have resided
• Detailed explanation of your request and its legal grounds
• Supporting documents

Acceptable file formats are PDF, JPG, and DOCX. Each document must be smaller than 10 MB. The portal rejects video files, audio files, compressed archives, and executable files. Upload multiple documents separately rather than combining them into a zip file.

For deletion or correction requests, attach evidence supporting your legal grounds. Common documents include:

• Court judgments — acquittals, dismissals, completed sentences
• Asylum letters or refugee determinations
• Reports documenting human rights violations in the requesting country
• Expert opinions on the political nature of prosecution
• Identity documents proving mistaken identity
• Police certificates of no criminal history

Documents in languages other than INTERPOL’s working languages (English, French, Spanish, Arabic) should include certified translations. The CCF may request additional documentation during its review, which can extend processing timelines by weeks.

After submission, the portal assigns a unique reference number. Log in at any time to check your request status: pending admissibility review, admissible and under substantive review, request for additional information, or decision issued. The CCF communicates exclusively through the portal via email notifications and messages in your account. Do not expect responses to external emails or phone calls.

What is the secure online portal?

INTERPOL’s portal uses end-to-end encryption for all data transmission and storage. Two-factor authentication protects your account — you enter your password and a one-time code sent to your registered email or mobile phone each time you log in. This prevents unauthorized access even if someone obtains your password.

The portal infrastructure resides on INTERPOL servers in Lyon, France, subject to French data protection law and INTERPOL’s internal data security protocols. Account data, submitted documents, and CCF decisions are retained for seven years after final case closure, then deleted — which means your case file eventually disappears from INTERPOL’s systems entirely.

Technical support for portal access is available in English and French during European business hours. For substantive questions about your CCF request, use the messaging function within your portal account rather than contacting INTERPOL by external email — messages routed through the portal are logged and guaranteed to reach the CCF Secretariat.

Takeaway: Access requests move fastest — four months versus nine for deletion. If you suspect INTERPOL holds data but haven’t confirmed it, start with an access request. Once you know what exists, you can mount a targeted deletion case with full knowledge of the specific violations.

What Legal Standards Guide CCF Decision-Making?

The Rules on the Processing of Data constitute the primary legal framework. Adopted by the General Assembly and binding on all INTERPOL member countries, the RPD establish detailed requirements for each data category: Red Notices, Diffusions, stolen documents, biometric data, and criminal intelligence.

Red Notices carry specific gravity thresholds. The offense must warrant punishment of at least two years’ imprisonment, or a sentence already imposed requiring at least six months’ incarceration. Below that floor, international circulation typically doesn’t happen — though sexual offenses against children and certain organized crime activities receive exceptions. Why does this matter? If you’re challenging a Red Notice, proving the offense falls below the threshold provides a direct deletion argument.

Requesting countries must supply:

• Name, date of birth, nationality, photograph
• What the person allegedly did or was convicted of
• The criminal law violated and its penalty
• Confirmation that a national arrest warrant actually exists
• Whether provisional arrest and extradition are available

Incomplete submissions violate the RPD outright. The CCF regularly finds vague descriptions like “fraud” with no details, missing warrant dates, or no legal basis stated for extradition. Incompleteness alone grounds deletion.

The neutrality principle is where most deletion cases succeed. INTERPOL’s Constitution forbids political, military, religious, or racial interventions. The CCF applies a two-part test: What is the offense itself? What were the actual motives behind prosecution?

Certain offenses are inherently political: treason, sedition, espionage for political opposition, financial crimes tied to activism, military discipline violations. Beyond category, context matters enormously. Was the person targeted after criticizing the government or joining protests? Do human rights monitors document a pattern of using criminal charges to suppress dissent in that country? These facts swing CCF decisions.

INTERPOL’s case law is substantial. The INTERPOL Case Law Database — publicly accessible and maintained by independent legal practitioners — annotates 65 CCF decisions that ordered deletion for Article 3 or related constitutional violations.

This article is published by an independent law firm for informational purposes only and does not represent or claim affiliation with any government body, international organization, or official authority.

Frequently Asked Questions About the CCF