INTERPOL does not accept direct public requests for its data. That is the first thing any legal professional, researcher or journalist needs to understand. The organisation operates as a clearinghouse for police information shared between its member countries, and its databases are not open to the general public. If you need to request access to INTERPOL data, the route runs through a member country’s National Central Bureau (NCB) or, in specific circumstances, through authorised entities such as the Commission for the Control of INTERPOL’s Files (CCF).
This guide sets out the practical steps for professionals who need to submit a formal request for INTERPOL data through official channels. It covers who is eligible, what documentation supports a request, how to route it correctly, what happens during review, and what the realistic outcomes look like. The focus is on procedure rather than theory, because in this area the paperwork and the channel matter as much as the legal argument.
Who is eligible to request INTERPOL data?
Eligibility is narrower than many people assume. INTERPOL’s rules are built around the principle that data flows between states, not between the organisation and the public. That means the default position is that an individual cannot simply write to INTERPOL headquarters and ask what information is held about them.
The categories of requester that can legitimately seek access fall into a few groups. First, national law enforcement authorities acting through their NCB. Second, authorised government bodies with a statutory mandate, such as immigration or border agencies. Third, data subjects exercising rights under INTERPOL’s own data protection framework, usually through a request routed via their NCB or the CCF. Fourth, legal representatives acting on behalf of a data subject or a client with a demonstrable interest in the data. Fifth, researchers and journalists where a member country or an authorised institution sponsors or facilitates the request.
For a legal researcher or compliance officer, the practical question is not whether you personally have a right to see the data, but whether you can establish a lawful basis and a proper channel. A request that arrives without either will be returned or simply ignored. A request that identifies a clear legal basis and routes through the correct national authority has a realistic chance of being processed.
It helps to think in terms of standing. If you are acting for a client who believes a Red Notice or other INTERPOL record exists, your standing derives from that client’s interest. If you are researching INTERPOL’s data practices, your standing usually derives from an institutional affiliation or a formal research agreement. If you are a journalist investigating a specific case, standing often depends on the subject’s consent or on a public interest justification that a member country is willing to support.
What documentation and legal basis are required?
Documentation is where most requests succeed or fail. INTERPOL and the NCBs that handle requests expect a file that is complete, coherent and verifiable. Missing documents cause delays; inconsistent documents cause refusals.
At a minimum, a request should include proof of identity, proof of the requester’s legal capacity, and a clear statement of the legal basis for access. For a data subject request, that means a passport or equivalent identity document, a signed authority if a lawyer is acting, and a reference to the applicable data protection provisions. For a request made on behalf of an organisation, it means evidence of the organisation’s mandate and the signatory’s authority.
The legal basis needs to be articulated, not assumed. Different routes rely on different grounds. A data subject request typically relies on INTERPOL’s data protection rules and the right of access they provide. A law enforcement request relies on the requesting state’s operational need and the applicable mutual assistance framework. A research request relies on the sponsoring institution’s mandate and any agreement with the relevant authority. A journalist’s request relies on the subject’s consent or on a recognised public interest basis.
Supporting material strengthens the file. If the request relates to a specific notice or record, include any reference numbers, dates or correspondence that help identify it. If the request concerns a name that may appear in multiple records, explain the identifying details that distinguish the subject. If the request is urgent, say why and provide evidence of the urgency, such as an upcoming hearing or a travel deadline.
One practical point that catches people out: translations. Documents in a language other than one used by the receiving authority may need certified translation. A file that is otherwise strong can stall for weeks over an untranslated identity document or authority letter. Check the requirements of the specific NCB or entity before submitting.
It is also worth being realistic about what documentation cannot do. No amount of paperwork will convert an ineligible requester into an eligible one. If you do not have a lawful basis or a proper channel, the correct step is to obtain one before submitting, not to submit and hope.
How to submit a request through the correct national or international channel?
Choosing the right channel is the step that determines whether your request is processed at all. There are two main routes, and they are not interchangeable.
The first route is through a National Central Bureau. Each INTERPOL member country has an NCB that serves as the point of contact between the country’s law enforcement and the organisation. For most requests, including data subject access requests, the NCB of the country where the requester resides or where the relevant record originates is the correct entry point. The NCB reviews the request, verifies the legal basis, and forwards it as appropriate.
The second route is through the Commission for the Control of INTERPOL’s Files. The CCF is an independent oversight body that handles requests concerning INTERPOL’s processing of personal data. It can receive requests directly in certain circumstances, particularly where a data subject has already attempted to resolve the matter through an NCB or where the request concerns the lawfulness of a record. The CCF route is more formal and typically slower, but it is the appropriate channel for challenges to INTERPOL data rather than simple access queries.
In practice, many professionals begin with the NCB route and escalate to the CCF if the response is unsatisfactory or if the matter concerns the legality of a notice. Understanding which route applies to your situation saves time and avoids the frustration of a request being bounced between authorities.
Where the request is complex, or where the client faces related extradition exposure, specialist advice can prevent costly procedural errors. Firms such as extraditionsolicitors.co.uk, which focuses on INTERPOL notices and international extradition matters, assist clients with CCF requests and challenges to INTERPOL data. Their work illustrates the kind of expertise that a straightforward access request may not require, but which becomes relevant when a Red Notice or extradition risk is in play.
Submission mechanics matter too. Most NCBs accept requests in writing, often by secure email or through a designated portal. Some require a specific form. Include a covering letter that summarises the request, identifies the legal basis, and lists the enclosures. Keep a copy of everything you send, and note the date of submission, because timelines for review often run from that date.
If you are unsure which channel applies, a short preliminary enquiry to the relevant NCB can clarify the position. That enquiry should not contain sensitive personal data; it should simply ask which route and which documents are required for your type of request.
What happens during review and how long does it take?
Once submitted, a request enters a review process that can involve several layers. The NCB checks completeness and legal basis. If the request concerns a record held by another country, it may be forwarded to that country’s authorities for comment. The CCF, if involved, conducts its own assessment and may correspond with the requester for further information.
Timelines vary widely. A straightforward data subject access request routed through an NCB might be acknowledged within weeks and resolved within a few months. A contested request, or one that requires input from multiple countries, can take considerably longer. The CCF process is typically measured in months rather than weeks, and complex cases can extend beyond a year.
During review, you may receive requests for clarification or additional documents. Respond promptly and precisely. A delayed response can be treated as a withdrawal or can simply push your file to the back of the queue. If you do not hear anything within the expected timeframe, a polite follow-up to the same channel is reasonable.
Outcomes fall into a few broad categories. The authority may confirm that data exists and provide it, sometimes in redacted form. It may confirm that no relevant data is held. It may decline to confirm or deny, particularly where a record relates to an ongoing investigation or where disclosure would prejudice law enforcement. It may also find that the record is unlawful or should be corrected, which can lead to modification or deletion.
It is important to understand the limits of what a review can achieve. A successful access request tells you what INTERPOL holds; it does not automatically remove a notice or prevent action by a member country. Separate procedures apply to challenges and deletions. For professionals advising clients on Red Notice matters, the access request is often one step in a broader strategy that may include a CCF challenge, diplomatic representations, or domestic legal remedies.
Where the request is made in the context of extradition proceedings, coordination with the legal team handling the extradition is essential. The information obtained through an access request can inform the defence, but it must be used within the applicable procedural rules. This is another area where specialist input, such as that provided by extraditionsolicitors.co.uk, can help ensure that the access request and the extradition case are aligned rather than working at cross purposes.
Practical pitfalls and how to avoid them
Most failed requests fail for predictable reasons. Knowing them in advance improves your chances considerably.
The first pitfall is submitting to the wrong channel. A request sent to INTERPOL headquarters in Lyon will not be processed as a public access request. It needs to go through an NCB or the CCF. Confirm the correct route before you send anything.
The second is an unclear legal basis. Stating that you need the information is not the same as stating why you are entitled to it. Cite the specific provision or framework that supports your request, and explain how it applies to your situation.
The third is incomplete documentation. Missing identity documents, unsigned authority letters, or untranslated enclosures are common causes of delay. Use a checklist and verify it against the receiving authority’s published requirements.
The fourth is over-broad requests. Asking for all data relating to a name, without identifying details, invites a refusal or a request for narrowing. Be specific about dates, reference numbers, and the context in which the record is believed to exist.
The fifth is failing to follow up. Requests can stall for administrative reasons. A courteous follow-up after a reasonable interval keeps the matter moving.
The sixth is treating the access request as an end in itself. If your client faces a Red Notice or extradition risk, the access request is a means of gathering information. Plan the next steps before you receive the response, so you can act quickly if the outcome requires it.
Finally, keep expectations calibrated. INTERPOL data access is a regulated process with legitimate limits. Not every request will succeed, and some will yield only partial information. The professionals who navigate it best are those who understand the procedure, prepare thoroughly, and use the correct channels from the outset. With the right documentation and the right route, a request access to INTERPOL data can be a productive step in a wider legal or investigative strategy.
