Statistics on Requests for data under the Data Retention Directive

Statistics on Requests for data under the Data Retention Directive Introduction 1. Directive 2006/24/EC on data retention ('the DRD') 1 requires Member States to provide the Commission on a yearly basis with statistics on data retention. Article 10 of the DRD states: (1) Member States shall ensure that the Commission is provide on a yearly basis with statistics on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or a public communications network. Such statistics shall include: - the cases in which information was provided to the competent authorities in accordance with applicable national law, - the time elapsed between the date on which the data were retained and the date on which the competent authority requested the transmission of the data, - the cases where requests for data could not be met. (2) Such statistics shall not contain personal data. 2. In January 2009, following advice from the Commission's Data Retention Experts Group, the Commission issued a template for submitting annual statistics. The group in November 2012 adopted updated and more comprehensive guidance on the provision of statistics under Article 10, which the Commission encourages all Member States to follow. 2 3. Statistics for 2008 and 2009 were published in the report on the evaluation of the Directive 3, and 2010 statistics were published on the DG Home Affairs website. Subsequently some Member States have provided statistics for 2011 and 2012. This document brings together all of those the statistics, including where required updates and corrections. General notes 4. The evaluation report stated that not all Member States had been able to provide statistics and, where they had been provided, statistics differed in scope and detail: for instance, in Czech Republic, Latvia and Poland, competent authorities submit identical requests to each of the main mobile telephone operators, and the statistics reported 1 Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC, OJ L 105, 13.4.2006, p. 54-63. 2 This experts group was established under Commission Decision 2008/324/EC which applied until 31 December 2012. Commission Decision C(2013) 2144 of 18.4.2013 set up a new experts group on best practice in the implementation of electronic communications data retention for the investigation, detection and prosecution of serious crime (C(2013) 2144 final). The current guidance is published here http://ec.europa.eu/dgs/home-affairs/what-we-do/policies/police-cooperation/data-retention/expertsgroup/docs/guidance_on_statistics_position_paper_16_datret_final_en.pdf 3 COM(2011) 225 Evaluation report on the Data Retention Directive (Directive 2006/24/EC). 1

therefore distort the overall picture. This remains the case. A number of specific areas of confusion regarding Article 10 have been raised with the Commission. i. There are different interpretations of the term 'cases'. This term could mean (i) each and every item of data that was or was not provided, (ii) each request which may be for one set or multiple sets of data, or (iii) each investigation in which there might be multiple requests for multiple items of data. ii. iii. iv. Where the request is addressed to a service provider is for more than one item of data, the data may be of different ages. Recording the age of individual data records could be unduly onerous for operators and/or competent authorities. Statistics submitted from some Member States only refer to requests for traffic and location data and not to subscriber information acquired from operators. The phrase 'Cases where requests for data could not be met' has been interpreted in various ways to mean i) cases where the service provider was unable to provide data that should have been retained under the DRD but were not retained; ii) data that were needed but which do not fall within the scope of the DRD, or iii) data that had been retained but were no longer available because the request was made after the expiry of the retention period. 5. Furthermore, Member States law enforcement authorities and data protection authorities are generally not in a position to know whether the precise data used in investigations and prosecutions was stored by the operators solely in order to comply with the data retention obligation. There is no obligation to store separately those data needed for (a) business purposes), (b) purposes of combating 'serious crime', as referred to in the DRD, and (c) for public order purposes other than combating serious crime, which may be permitted under Directive 2002/58/EC. Supervisory authorities do not have enforcement powers to ascertain which data is kept for which purposes, although, according to a report by the Article 29 Working Party, separation seems to be the norm in most Member States. 4 6. Statistics are presented in two separate tables for each year from 2008: i. requests for retained data where data was disclosed according to age of data when requested; 4 Article 15(1) of Directive 2002/58/EC on 'e-privacy' allows Member States to restrict privacy rights and obligations, including through the retention of data for a limited period, to safeguard national security, defence, public security and the prevention, investigation, detection and prosecution of criminal offences or of unauthorised use of the electronic communication system. See EDPS opinion on evaluation report on the DRD, May 2011 http://www.edps.europa.eu/edpsweb/webdav/shared/documents/consultation/opinions/2011/11-05-30_evaluation_report_drd_en.pdf and Article 29 Working Party Report 01/2010 Report 01/2010 on the second joint enforcement action: compliance at national level of telecom providers and ISPs with the obligations required from national traffic data retention legislation on the legal basis of article 6 and 9 of the e-privacy Directive 2002/58/EC and the Data Retention Directive 2006/24/E amending the e-privacy Directive http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2010/wp172_en.pdf. Recital 12 of the DRD acknowledges that data may be retained beyond the categories in the scope of the DRD and for purposes other than those set down in DRD. 2

ii. requests for retained data where data was disclosed according to the category of data requested. (Note: this information is not required under the DRD.) 7. Figures in brackets indicate cases number of requests where data was not disclosed. 8. 'Age' means time elapsed between the date on which the data were retained and the date on which the competent authority requested the transmission of the data. 9. 'Internet-related data' means data concerning internet access, internet e-mail and internet. 10. Statistics in brackets denote number of requests where data could not be disclosed to competent authority. Notes on Member States which have provided statistics (1) DRD has not been fully transposed. Data provided by Ministry of Justice. Bulgaria (1) Statistics provided by the Bulgarian data protection authority, the Commission for Personal Data Protection (CPDP), on the basis of information provided by operators subject to data retention requirements. (2) No breakdown of age of data was provided, but the CPDP has instructed operators to provide such a breakdown in statistics for 2013. (3) Breakdowns were provided according to operator receiving the requests for the data, and according to the competent authority requesting the data. (4) The CPDP did not report using the categories of data in the template developed in 2009 by the Data Retention Expert Group template. Instead the DPA statistics included breakdown of requests according to four 'types of service': (i) 'public telephone service', (ii) 'data transmission services', (iii) 'access to internet' and (iv) 'other electronic communications services'. For the purposes of this document, we treat (ii) and (iii) as 'internet-related data' and (i), (iii) and (iv) as 'not specified'. (5) The 2010 statistics cover the period 10 May 2010-31 March 2011 and represented the information provided by 33 operators; the 2011 statistics cover the whole calendar year (therefore there is duplication between the 2010 and 2011 statistics) and represent information from 22 operators; 2012 statistics cover the whole calendar year and represent information from 111 operators. (6) The CPDP adopted end 2012 compulsory instructions to all operators required to comply with data retention measures which led to the increase in the number of operators providing data for 2012. (7) According to the CPDP in its submission of 2012 statistics to the Commission, the category 'other electronic communications services' is defined as 'the transfer of radio and television programs and ones not specified by the company'. This term has been 3

the subject of 'misunderstanding' on the part of operators, which is believed to explain the considerable discrepancy between the 2011 and 2012 statistics. Czech Republic (1) Statistics provided by Ministry of Justice, which stated that 'The statistical register in the Czech Republic is kept according to case and not according to applications. A single application might contain several cases.' Estonia (1) Statistics provided by Estonian Technical Surveillance Authority, which stated that 'the increase in the number of cases was caused by the fact that the enquiries were made about ranges of telephone numbers, but the enumeration counted all the numbers separately and there were also used various modes of enquires that also imposed the figures.' (1) The overall statistic for 2010, which was submitted by the Ministry of the Interior, is an estimate of the total number of requests for data by the Hungarian authorities. Greece (1) Statistics provided by Hellenic Authority for the Information and Communication Security (ADAE) and Privacy via Ministry of Justice. (2) Data based on information from 11 operators. (3) No detailed breakdown available, although ADEA reported that the time elapsed between date of retention and date of request from competent authority was '3-5 months'. Ireland (1) Statistics provided by the Ministry of Justice. Lithuania (1) Statistics provided by State Data Protection Inspectorate. (2) Method for collating statistics was changed in 2010. Pre-2010 statistics include all requests for data; statistics for 2010 onwards include only requests in connection with serious crime. (3) Lithuanian law enforcement agencies calculate each query as a separate case, which may include a request for data on say, 10 telephone numbers. To investigate mobile phone activity, identical requests tends to be sent to the three mobile operators. Luxembourg (1) Only partial statistics available, which were provided by Police Grand-Ducal (2) Statistics on requests by data category refer to mobile location data - cell ID and data and time of communication. 4

Poland (1) Statistics provided by Office of Electronic Communications (UKE) (2) 2010 statistics were based on information from 262 entities (or 4% of all entities which are subject to the data retention obligation) which transmitted data on behalf of 283 operators. 2011 statistics were based on information from 1040 entities (14% of all entities) transmitting data on behalf of 1074 operators; 2012 statistics were based on reports from 1908 entities (26% of all entities)on behalf of 1948 operators. (3) UKE considers that those entities which did not provide information probably did not receive any requests for data. (4) UKE report that in 2010 and 2011, 96% of overall number of requests were tended to be addressed to the five largest operators, and in 2012 78% of total requests for data were addressed to the five largest operators. (1) No overall annual statistics available, but Ministry of Justice reported in March 2012 that since legislation transposing the DRD was adopted, there had been 225 requests for data for 39 separate judicial processes. The average age of the data requested was reported to be 4.7 months. (2) Statistics which have been provided only relate cases of data retained and requested for the purposes of investigation and prosecution of organised crime and terrorism,in compliance with national measures transposing the DRD. (3) Ministry of the Interior reported in May 2012 that the Immigration and Borders Service made 131 requests for data (not necessarily under the DRD) in 2010, 107 in 2011 and 80 in 2012; no figures were provided for other competent authorities. Slovenia (1) Statistics provided by the Ministry of Justice based on data from the courts. (2) Statistics are broken according to 'voice traffic' (understood to be fixed and mobile data) and 'internet traffic' (internet related data). Slovakia (1) Statistics provided by the Ministry of Transport, Posts and Telecommunications. (2) Breakdown by age and category of data not available for years before 2011. Finland (1) Statistics provided by the Ministry of the Interior (2) Number of requests where data could not be provided concerned data which was not available as the retention period had elapsed. (3) Breakdown by data type not available. 5

UK (4) Finland also provided statistics on the number of requests from the police and the number of requests from other authorities: the majority of requests were from the police. (1) Statistics are provided by the Home Office who require service providers to provide statistical information annually. Statistics provided concern not calendar year but financial year (ie April March). Service providers each operate different working practices and have different data retention systems which may cause some variability across the statistics provided. For example, some providers report the figures on the basis of the number of requests (which may involve several individual pieces of data of differing ages) where as others report on the number of pieces of data disclosed. (2) Due to the different working practices, the statistics may include requests for traffic, subscriber and user data as well as data retained already for business purposes and not necessarily as a result of DRD obligation. Separate statistics collected within the UK indicate that subscriber data may account for up to 50% of the data returned. (3) No more than 2/3 of service providers were able to supply the age of data disclosed between 2009 and 2012. Between 2008 and 2012 74.73% of disclosures where the age of the data is known concerned data under 3 months old, 13.60% concerned data 3-6 months old, 6.13% concerned data 6-9 months old and 5.54% concerned data 9-12 months old. As the UK s transposition of the DRD mandates retention for a 12 month period, cases where the returns were known to include data which had been retained by a service provider beyond 12 months for business purposes have not been included. (4) The increase in the number of disclosures in 2011 and 2012 can, at least in part, be attributed to the fact that the UK hosted the Olympic and Paralympic Games in 2012 and that communications data supported a number of operations undertaken to ensure the Games were safe. Other significant events during the period, including the Queen s Diamond Jubilee celebrations, will also have an impact on these figures. (5) The sum of the figures on age of data requested for 2011 and 2012 do not equal the total number of disclosures. This is because some service providers were unable to distinguish and remove requests which were withdrawn or not met from their breakdown of the figures but could do so for the estimated number for the total period. (6) There may be a range of reasons why data requested were not disclosed: this includes where data requested were outside the retention period (and were not retained for business purposes), where data were requested from the wrong service provider in error, or where a system error prevented retrieval of the data. 6

2008: Requests for retained traffic data: Age of data when requested Age of data requested (months) 0-3 3-6 6-9 9-12 12-15 15-18 18-21 21-24 Not specified 258 767 258 767 Bulgaria Czech Republic 102 691 18440 10110 319 0 0 0 0 (2490) 131 560 (2490) Denmark 2669 672 185 37 23 2 7 4 (5) 3599 (5) Germany 9363 2336 985 0 0 0 0 0 (931) 12 684 Estonia 2773 733 157 827 0 0 0 0 (1526) 4490 (931) (1526) Ireland 8981 2016 936 1855 90 85 78 54 97 14 095 Greece 584 584 Spain 22629 15868 10298 4783 0 0 0 0 53 578 France 503 437 503 437 Cyprus 30 4 0 0 0 0 0 0 (5) 34 (5) Latvia 10539 2739 1368 1211 597 438 0 0 (696) 16 892 Lithuania Luxembourg Malta 810 59 0 0 0 0 0 0 (133) 869 (133) Netherlands 85 000 85 000 Austria 3093 3093 Poland Slovenia 2821 2821 Slovakia Finland 9134 1144 448 214 268 4008 315 350 88 339 34 665 19 398 6385 2973 1536 1576 470 222 477 769 132 350 59 152 28 644 7095 3498 1621 1634 854 970(5883) (97) (696 1 565 733 (5883) 7

2008: Requests for retained traffic data: Category of data Category Fixed network Mobile Internetrelated Not specified 258 767 258 767 Bulgaria Czech Republic 4983 (131) 125 040 (2276) 1537 (83) 131 560 (2490) Denmark 192 (0) 3273 (5) 134 (0) 3599 (5) Germany 12 684 (931) 12 684 (931) Estonia 4114 (1519) 376 (7) 4490 (1526) Ireland 5317 (16) 5873 (48) 2905 (33) 14 095 (97) Greece 584 584 Spain 4448 (0) 40 013 (0) 9117 (0) 53578 (0) France 503 437 503 437 Cyprus 3 (0) 31 (5) 0 (0) 34 (5) Latvia 1602 (90) 14 238 (530) 1052 (76) 16 892 (696) Lithuania Luxembourg Malta 29 (0) 748 (120) 92 (13) 869 (133) Netherlands 85 000 85 000 Austria 3093 3093 Poland Slovenia 2821 2821 Slovakia Finland 4008 4008 90 747 (0) 329 421 (0) 50 054 (0) 470 222 (0) 111 435 51 9013 64 891 870 394 1 565 733 (5786) 8

Age of data requested (months) Bulgaria Czech Republic 2009: Requests for retained data: Age of data when requested 0-3 3-6 6-9 9-12 12-15 15-18 18-21 21-24 Not specified 210 975 56 623 11 620 1053 0 0 0 0 10 446 280 271 (10 446) Denmark 2980 685 179 104 54 38 12 14 11 4066 (11) Germany Estonia 4299 1836 1210 1065 0 0 0 0 (2768) 8410 (2768) Ireland 8117 1652 805 297 168 134 69 41 (92) 11 283 (92) Greece Spain 29775 19346 13999 6970 0 0 0 0 70 090 France 514 813 514 813 Cyprus 29 8 0 0 0 0 0 0 (3) 37 (3) Latvia 20 758 2414 1088 796 565 475 0 0 (560) 26 096 (560) Lithuania 30 247 35 456 5886 884 0 0 0 0 0 72 473 Luxembou rg 124 124 Malta 3336 362 151 174 0 0 0 0 (902) 4023 (902) Netherlan ds Austria Poland 642 327 178 306 75 525 52 526 27 098 23 924 13 984 34 628 1 048 318 Slovenia 1918 (48) Slovakia 5214 (157) 1918 (48) Finland 2000 1310 532 152 76 0 0 0 4070 5214 (157) 124 324 22 891 11 166 7770 196 953 363 104 1079 167 320 889 122 161 71791 27 961 24 571 14 065 34 683 719 022 (14 987) 2 414 310 (14 987) 9

2009: Requests for retained data: Category of data Category Bulgaria Czech Republic Fixed network 13 843 (934) Mobile 256 074 (9141) Internetrelated 10 354 (371) Not specified 28 0271 (10 446) Denmark 133 3771 (10) 162 (1) 4066 (11) Germany Estonia 6422 (2279) 902 (21) 1086 (468) 8410 (2768) Ireland 4542 (16) 5239 (20) 1502 (56) 11 283 (92) Greece Spain 5055 56 133 (0) 8902 70 090 France 514 813 514 813 Cyprus 0 23 (3) 14 37 (3) Latvia 1672 (218) 22 796 (102) 1628 (240) 26 096 (560) Lithuania 1321 (0) 51 573 (6237) 19 579 (343) 72 473 (6580) Luxembourg 124 124 Malta 156 (10) 3693 (882) 174 (10) 4023 (902) Netherlands Austria Poland 1 048 318 Slovenia 1918 (48) 1918 (48) Slovakia 5214 (157) 5214 (157) Finland 4070 33 268 400 204 (6237) 43 401 (343) 363 104 363 104 1 937 437 (14 987) 2 414 310 (21 567) 10

2010: Requests for retained data: Age of data when requested Age of data requested (months) 0-3 3-6 6-9 9-12 12-15 15-18 18-21 21-24 Not specified Bulgaria 38 861 (920) Czech Republic 221 549 (104) 57 162 (35) 9964 (9986) 38 861 (920) 494 (69) 289 169 (10 194) Denmark 3092 800 192 94 34 9 6 8 4235 Germany Estonia 1466 (692) Ireland 10 962 (3) Greece 952 (251) 1612 (1) 612 (17 379) 1143 (80 086) 4173 (98 408) 1234 573 164 145 115 123 14 928 (4) Spain 201 209 94 656 39 775 10 132 345 772 France Cyprus 76 (7) 3 (1) 79 (8) Latvia 23 654 (288) Lithuania 71 995 (1) 4407 (95) 1734 (40) 32 035 696 (30 701) 2013 (46) 392 (438) 1443 (52) 1216 (39) 34 467 (560) 105 118 (31 140) Luxembourg 112 112 130 000 130 000 Malta Netherlands Austria Poland 898 135 199 604 93 334 58 325 39 206 28 881 24 194 41 852 (16 623) 3 8 7 5 (3) 23 (3) Slovenia 1151 350 149 45 27 4 1 1 1728 (18) Slovakia 3758 1931 722 714 (291) 7125 (291) Finland 2633 1909 653 319 149 (149) 5663 (149) 1 571 973 (1095) 132 290 34 042 16 761 26 124 379 219 (492) 428 471 (383) 165 833 (58 106) 100 373 (80 639) 41 023 (52) 30 255 (39) 24 316 41 984 548 192 (18 496) 588 436 (492) 2 952 420 (158 810) 11

2010: Requests for retained data: Category of data Category Fixed network Mobile Internetrelated Not specified Bulgaria 38 752 (916) 109 (4) 38 861 (920) Czech Republic 13 542 (761) 267 820 (9086) 7807 (347) 289 169 (10 194) Denmark 191 3801 243 4235 Germany Estonia 2570 (97 935) 706 (27) 897 (446) 4173 (98 408) Ireland 4694 5768 (4) 4464 14 298 (4) Greece Spain 33 746 275 961 36 065 345 772 France Cyprus 57 (8) 22 79 (8) Latvia 1132 (191) 31 731 (122) 1604 (247) 34 467 (560) Lithuania 1018 102 280 (31 102) 1820 (38) 105 118 (31 140) Luxembourg 112 112 130 000 130 000 Malta Netherlands Austria Poland 1 382 521 (16 623) 1 382 521 (16 623) 23 (3) 23 (3) Slovenia 1728 (18) 1728 (18) Slovakia 7125 (291) 7125 (291) Finland 5663 (149) 5663 (149) 56 895 (98 887) 688 236 (40 349) 53 031 (1082) 588 436 (492) 588 436 (492) 2 154 258 (18 492) 2 952 420 (158 810) 12

2011: Requests for retained data: Age of data when requested Age of data requested (months) 0-3 3-6 6-9 9-12 12-15 15-18 18-21 21-24 Not specified Bulgaria 74 296 (1376) 74 296 (1376) Czech 91 497 26408 994 3786 122 685 Republic (4791) (5011) (9027) (187) (19 016) Denmark 3092 800 192 94 34 9 6 8 4235 Germany Estonia 1689 (367) 954 (222) Ireland 9301 (1) 1152 (1) Greece Spain France 545 (180 625 (5569) 3813 (1338) 1277 520 177 65 98 98 12 688 (2) Cyprus 55 (1) 11 (1) 66 (2) Latvia 26 823 (430) 4982 (183) 1822 (102) 1623 (89) 1622 (87) 2171 (131) 39 043 (1022) Lithuania 18516 9047 109 (1847) 104 (25) 27 776 (1872) Luxembourg 87 87 Malta Netherlands Austria Poland 194 884 208 237 85 727 52 311 32 259 22 599 19 593 41 205 (17 219) 1 856 915 (17 219) Slovenia 996 326 90 36 17 3 5 (6) 1473 (6) Slovakia 21 576 (115) 4520 (86) 2050 (89) 2905 (24) Finland 5331 (221) 1 747 731 (5705) 176 812 16 973 10 178 9143 515 800 (786) 275 288 (5504) 103 471 (11 245) 71 402 (894) 34 430 (87) 24 847 (131) 19 702 41 311 590 183 (19 608) 31 051 (314) 5331 (221) 728 852 (786) 2 908 311 (43 174) 13

2011: Requests for retained data: Category of data Category Bulgaria Czech Republic Fixed network Mobile Internetrelated 24086 (517) 24 500 (151) 6370 (179) 111 759 (17 117) 4556 (1720) Not specified 25 710 (708) 74 296 (1376) 122 685 (19 016) Denmark 191 3801 243 4235 Germany Estonia 1477 (1030) 807 (25) 1529 (283) 3813 (1338) Ireland 3525 5062 (2) 4101 12 688 (2) Greece Spain France Cyprus 1 43 22 (2) 66 (2) Latvia 981 (157) 34 816 (330) 3246 (535) 39 043(1022) Lithuania 376(14) 26 887 (1858) 513 Luxembourg 87 87 Malta Netherlands Austria Poland 1 856 915 (17 219) 27 776 (1872) 1 856 915 (17 219) Slovenia 1473 (6) 1473 (6) Slovakia 158 (62) 30 204 (88) 689 (164) 31 051 (314) Finland 5331 (221) 37 165 (1959) 213 466 (19 420) 39 399 (2855) 728 852 (786) 2 618 281 (18 940) 5331 (221) 728 852 (786) 2 908 311 (43 174) 14

2012: Requests for retained data: Age of data when requested Age of data requested (months) 0-3 3-6 6-9 9-12 12-15 15-18 18-21 21-24 Not specified Bulgaria 91 159 (1083) Czech Republic 48 972 (7581) 4539 (1831) 720 (1794) 2104 (110) 91 159 (1083) 56 335 (11 316) Denmark 4375 1232 532 305 181 32 13 8 6678 Germany Estonia 1561 (427) Ireland 6415 (257) 910 (371) 1034 (329) 925 (167) 589 (30) 773 (366) 325 (32) 87 123 105 (12) Greece 28 313 (3026) Spain France Cyprus Latvia Lithuania 14 555 6681 294 (1878) Luxembourg 35 (10) 145 (1) 6 (2) 4149 (1331) 8829 (664) 28 313 (3026) 21 565 (1888) Malta Netherlands Austria Poland 1 111 243 287 342 101 762 64 333 42 633 28 738 21 917 60 147 (44 505) 1 718 115 (44 505) Slovenia 793 248 112 42 31 5 3 43 (1) 1277 (1) Slovakia Finland 2196 1489 976 376 497 (497) 5534 (497) 1 445 996 (8265) 255 886 20 545 9664 12 027 426 652 (716) 324 020 (2531) 115 574 (3869) 80 320 (518) 43 429 28 898 22 038 60 300 546 173 (49 831) 724 751 (716) 2 666 725 (65 027) 15

2012: Requests for retained data: Category of data Category Bulgaria Czech Republic Fixed network Mobile Internetrelated 56 857 (699)* 34 289 (355) 22 477 (1104) 30 842 (9161) 3016 (1051) Not specified 13 (29) 91 159 (1083) 56 335 (11 316) Denmark 187 4221 2270 6678 Germany Estonia 1469 (1030) 845 (43) 1855 (258) 4169 (1331) Ireland 2286 4356 (193) 2187 (469) 8829 (662) Greece 28 313 (3026) Spain France Cyprus 22 22 Latvia Lithuania Luxembourg Malta Netherlands Austria 621 20 842 (1888) 102 Poland 1 718 115 (44 505) 28 313 (3026) 21 565 (1888) 1 718 115 (44 505) Slovenia 1263 (1) 14 1277 (1) Slovakia Finland 5534 (497) 85 160 (2834) 61 106 (11 285) 43 733 (2133) 724 751 (716) 2 476 726 (48 775) 5534 (497) 724 751 (716) 2 666 725 (65 027) DG Home Affairs European Commission October 2013 16