Case Assessment
learn

What is the Commission for the Control of INTERPOL's Files?

What is the Commission for the Control of INTERPOL's Files?. What the measure is, the grounds that work, and the realistic prospects. Confidential and independent, lawful mandates only.

By Priya Anand7 min read

Most people encounter the Commission for the Control of INTERPOL's Files only after something has already gone wrong – a border refusal, a frozen account, a visa decline. As of early 2026, the CCF remains the sole independent body with the authority to order INTERPOL to correct or delete data about an individual. Understanding what it is, and what it actually does, is the necessary starting point for any challenge.

The Commission for the Control of INTERPOL's Files – the CCF – is an independent supervisory body that reviews the personal data INTERPOL processes about individuals. It can order INTERPOL to correct, restrict or delete that data, including a Red Notice or a diffusion. It is not a court and not part of any national police system. Its authority derives from INTERPOL's own rules, principally the RPD (INTERPOL's Rules on the Processing of Data) and the Constitution.

This page explains the CCF's role in plain English, what it can and cannot do, and where it sits in the process of challenging an INTERPOL measure.

What does the CCF actually do?

The CCF reviews whether data INTERPOL holds about a person complies with INTERPOL's own rules. It operates independently of the General Secretariat and of any member country's police or prosecution service. In our CCF practice, we see it act on two main categories of request: access requests (asking what data is held) and deletion or correction requests (asking for data to be changed or removed).

An access request is to be answered within four months of a finding of admissibility. A deletion request is to be decided within nine months of the same finding. These are the timelines the CCF's own Statute sets, though in practice external factors – volume of cases, the requesting state's responses – can affect how that period runs.

The CCF applies two principal tests when it reviews data. First, does the data meet INTERPOL's data-accuracy and data-quality requirements under the RPD? Second, does the underlying notice or diffusion comply with INTERPOL's Constitution – in particular Article 2, which requires respect for human rights, and Article 3, which bars notices connected to offences of a political, military, religious or racial character?

What the CCF cannot do is equally important to understand. It does not prosecute, convict, or acquit. It does not direct national police forces. It does not issue binding orders to member states on their domestic extradition procedures. It operates entirely within INTERPOL's internal rules, and its leverage is the integrity of INTERPOL's own database.

What is the difference between a Red Notice and a diffusion?

A Red Notice is a request published by INTERPOL – at a member state's request – to locate and provisionally detain a person with a view to extradition. It is not an arrest warrant. It is not a judicial decision. It does not establish guilt, and no country is legally obliged to arrest a person named in a Red Notice; each state decides under its own domestic law.

A diffusion is a different but closely related measure. It is an alert circulated directly by a national bureau to some or all member states, outside the formal Red Notice system. Diffusions are less visible and less well understood, yet they can carry the same practical consequences for travel, banking and contracts. Practitioners before the Commission observe that diffusions are sometimes issued precisely because the formal notice criteria would not be met – which is itself a ground for challenge.

Both a Red Notice and a diffusion can be reviewed by the CCF. The procedural route is broadly the same, but the evidential approach may differ depending on which measure is in issue and which national bureau issued it.

If you need to understand whether data about you is held at all – before a Red Notice becomes a practical problem – an INTERPOL data check is the appropriate first step. It establishes the position before you travel or before exposure becomes acute.

Why does the quality of the first CCF file matter so much?

There is no appeal against a CCF decision. This is the fact that changes everything about how a challenge should be prepared. If the CCF refuses a deletion request, there is no higher body to approach. A further request requires genuinely new elements – not simply a restatement of the same arguments in different words.

In our practice, the files that succeed are those that argue the grounds precisely, in INTERPOL's own language, with evidence rather than assertion. A weak first submission does not merely lose the first round. It narrows the options for any subsequent approach, because the CCF has already seen and rejected the core position.

This is not meant to create alarm. It is an honest account of the process. The point is that preparation – assembling evidence, identifying the strongest applicable ground under the Constitution or the RPD's data-quality requirements, and structuring the submission correctly – is where the outcome is determined, not in a hearing room.

For those considering a formal challenge to a Red Notice, the Red Notice removal service page sets out how we build and present a CCF file.

In a recent matter (a MENA-origin diffusion, winter 2025), we identified that the issuing bureau had processed data that did not meet the RPD's accuracy requirements. The CCF found in favour of deletion after the data defect was established in the file. The outcome turned entirely on documentary precision, not on broad submissions about fairness.

What grounds does the CCF recognise?

The CCF applies the grounds set out in INTERPOL's own rules. The most commonly argued are these. First, Article 3 of INTERPOL's Constitution: the notice or diffusion concerns an offence of a political, military, religious or racial character. Second, Article 2: the processing of data violates the requirement to respect human rights as understood in the spirit of the Universal Declaration of Human Rights. Third, the RPD's data-accuracy and data-quality conditions: the underlying data is inaccurate, incomplete or no longer current.

Beyond these, the CCF also considers procedural defects – whether the issuing state followed INTERPOL's own requirements when submitting the notice. Where a person holds refugee status, or where non-refoulement concerns arise, these are relevant to the Article 2 analysis, though the CCF applies them through INTERPOL's rules rather than as free-standing principles of international law.

For a full treatment of the political-offence ground, which remains one of the most litigated before the Commission, the Article 3 political-offence analysis sets out the applicable test and how it is argued.

In a separate matter (a CIS-origin Red Notice, autumn 2024), the file succeeded on the basis that the prosecution underlying the notice was shown to be connected to a commercial dispute in which state authorities had intervened on behalf of a connected party. The political character was evidenced through court documents and supporting correspondence, not through bare assertion. The CCF ordered deletion.

Related

Frequently asked questions

What is the short answer?

The CCF is INTERPOL's independent data-control body. It reviews whether INTERPOL's processing of your personal data – including a Red Notice or diffusion – complies with INTERPOL's own Constitution and Rules on the Processing of Data. Where it finds a violation, it can order correction or deletion. It is not a court and does not determine criminal guilt or innocence. Its decisions are binding on INTERPOL, not on member states' domestic proceedings.

Does this create any obligation to arrest me?

No. A Red Notice is not an arrest warrant. It is a request to locate and provisionally detain, with a view to extradition. No member state is legally obliged to arrest a person named in a Red Notice. Each country decides under its own domestic law whether and how to act. Some states with strong human-rights protections exercise particular scrutiny before acting on a notice from certain requesting countries. The practical risk varies significantly by jurisdiction.

Where does this sit in the CCF process?

A CCF challenge begins with an admissibility assessment. Once found admissible, an access request is to be decided within four months; a deletion or correction request within nine months. There is no appeal against a CCF decision. A further request is possible only on the basis of new elements. This is why the quality of the initial file is decisive. A poorly prepared first submission does not merely fail – it raises the threshold for any subsequent approach.

About NORTHLARK

NORTHLARK is an independent international boutique that acts for individuals facing INTERPOL Red Notices and diffusions before the CCF, and in related extradition proceedings. We are not affiliated with any national firm, network or government-connected practice – a feature that matters when a notice originates from a state where judicial independence is in question.

We act only on lawful mandates. We do not help anyone evade legitimate justice, and we take on a matter only where we see genuine grounds. No honest practitioner guarantees a CCF outcome, and we do not.

The first assessment is confidential. Our enquiry form does not require your real name, and you can reach us through a secure channel – Signal, Telegram or WhatsApp – as well as by email at info@northlarkfirm.com. For an honest view of whether there are grounds to challenge the data INTERPOL holds about you, contact us.

Facing an unjustified Red Notice?

Free initial assessment. Challenging Interpol Red Notices and extradition defence.

Request an assessment