FIRST SECTION
CASE OF TRAJKOVSKI AND CHIPOVSKI v. NORTH MACEDONIA
(Applications nos. 53205/13 and 63320/13)
 
 
 
JUDGMENT
Art 8 • Respect for private life • Disproportionate character of indefinite retention of DNA profiles of convicted persons • Blanket and indiscriminate nature of the powers of retention • Lack of consideration of the nature or gravity of the offence or other circumstances • Absence of a specific review of the necessity of data retention • Lack of possibility to request deletion of data
 
 
STRASBOURG
13 February 2020
 
FINAL
 
13/06/2020
 
This judgment has become final under Article 44 § 2 of the Convention. It may be subject to editorial revision. In the case of Trajkovski and Chipovski v. North Macedonia,
The European Court of Human Rights (First Section), sitting as a Chamber composed of:
 Ksenija Turković, President,
 Aleš Pejchal,
 Armen Harutyunyan,
 Pauliine Koskelo,
 Tim Eicke,
 Jovan Ilievski,
 Raffaele Sabato, judges,
and Abel Campos, Section Registrar,
Having deliberated in private on 21 January 2020,
Delivers the following judgment, which was adopted on that date:
PROCEDURE
1. The case originated in two applications (nos. 53205/13 and 63320/13) against the Republic of North Macedonia lodged with the Court under Article 34 of the Convention for the Protection of Human Rights and Fundamental Freedoms (“the Convention”) by two Macedonians/ citizens of North Macedonia, Mr Jovche Trajkovski (“the first applicant”) and Mr Dimitar Chipovski (“the second applicant”), on 16 August and 4 October 2013 respectively. 2. The applicants were represented by Ms N. Boshkova, a lawyer practising in Skopje. The Government of North Macedonia (“the Government”) were initially represented by their Agent, Mr K. Bogdanov, and then by their current Agent, Ms D. Djonova. 3. The applicants alleged that the regulatory framework on the basis of which the authorities had collected, processed and stored their DNA material was incompatible with the requirements under Article 8 of the Convention. 4. On 18 April 2016 the Government were given notice of the applications. THE FACTS
THE CIRCUMSTANCES OF THE CASE
5. The applicants were born in 1982 and 1979 respectively and live in Skopje. Application no. 53205/13Taking of a DNA sample from the first applicant and the subsequent criminal proceedings against him

6. On 11 February 2010 two police officers approached the first applicant while he was walking down a street and questioned him about a steering wheel lock which he was holding at the time. He was taken to a police station, where police officers took a mouth swab from him without giving him any explanation. In the ensuing criminal proceedings he was convicted of aggravated theft (theft of a car radio) and given a suspended prison sentence. The DNA findings of the sample taken from him were submitted as evidence against him. 7. The first applicant was convicted of other crimes of theft and aggravated theft prior to and after the proceedings in question. Proceedings before the Personal Data Protection Directorate regarding the DNA material
8. On 25 March 2010 the first applicant filed a complaint with the Personal Data Protection Directorate (“the Directorate”), alleging that the police officers had violated his right to privacy. He contended that they had taken cellular material from his mouth unlawfully, without a court order and without his consent. He argued that the police had had no legal right to take and retain his DNA material. 9. By a decision of 12 April 2010 the Directorate dismissed his complaint, finding that the police officers “had taken [the first applicant’s] DNA sample and processed it in order to detect any criminal and minor offences, that is, to establish the identity of a person suspected of committing a crime punishable by law”. Relying on section 5(1)(1) and (2) of the Personal Data Protection Act, sections 14 and 66 of the Police Act and section 6 of the Rules on Police Conduct (see paragraphs 21, 23, 24 and 29 below), the Directorate found that the police were authorised to take, retain and process the personal data of an individual when there was a reasonable suspicion that he or she had committed a punishable crime. Such actions were aimed at the prevention and detection of crime. Furthermore, the police were authorised to establish the identity of a person on the basis of, inter alia, a DNA sample. 10. The first applicant challenged that decision before the Administrative Court, arguing that there was no law regarding the collection, storage and processing of DNA material. In that connection, he submitted that DNA material was stored indefinitely. Furthermore, given that his identity had been known to the authorities at the relevant time, there had been no justification for taking a DNA sample from him. In his view, it could be used for “any future investigations which mark[ed him] out”. 11. On 6 June 2012 the Administrative Court dismissed the applicant’s complaint. In addition to the arguments given in the Directorate’s decision, the court referred to section 69 of the Police Act (see paragraph 25 below) and held that the police were authorised to collect and process personal data, including genetic data, for the purposes of “the detection and prevention of criminal and minor offences and for the detection and apprehension of perpetrators, i.e. regarding an individual about whom there was a reasonable suspicion that he or she [had] committed or participated in the planning, financing or execution of a criminal offence, as was the case with [the first applicant].”On 24 January 2013 (served on the applicant on 22 February 2013) the Higher Administrative Court upheld the lower court’s decision, finding no reason to depart from the reasoning given therein. Application no. 63320/13Taking of a DNA sample from the second applicant and the subsequent criminal proceedings against him

12. On 8 October 2009 the second applicant was arrested and taken to a police station, where he was interrogated in relation to allegations of theft. An identity parade was organised and a mouth swab was taken from him. After the proceedings had been reopened, in 2014 he was convicted of aggravated theft and given a suspended prison sentence. The analysis of his DNA make-up was not submitted as evidence against him. 13. The applicant has another more recent conviction (not yet final) of aggravated theft, for which he was given a suspended sentence. Proceedings regarding the DNA material before the Directorate
14. On 26 May 2010 the second applicant complained to the Directorate that the police had violated his right to privacy by taking and processing his DNA material. 15. In reply to the second applicant’s complaint, the Ministry of the Interior submitted several documents. It stated that on the basis of, inter alia, the Instruction on the manner and methods for forensic registration and identification dated 25 February 2009 (see paragraph 30 below), the Forensics Bureau within the Ministry of the Interior had requested that a DNA sample be taken from him. Attempts by him to obtain a copy of the Instruction were to no avail because the Ministry of the Interior stated that it “is not of a public nature, i.e. the Instruction is an internal act ... and has no effect outside the Ministry ...”
16. On 21 July 2010 the Directorate dismissed the second applicant’s complaint, holding that he had been arrested without a court order on account of a reasonable suspicion of theft. In the identity parade the victim had identified him as the perpetrator. The police had taken a DNA sample from his mouth and submitted a criminal complaint against him. Referring to the same provisions as in the first applicant’s case (see paragraph 9 above), the Directorate found that the police had undertaken investigative measures in respect of the second applicant, who had been suspected of committing aggravated theft. The police had therefore acted in accordance with the law and had not breached the Personal Data Protection Act. 17. The applicant challenged that decision, arguing that there was no legislative regulation of the collection, storage and processing of DNA material as a specific category of personal data that contained information about individuals, including information about their health and genetic make-up. Furthermore, there was no legislation on the use of DNA or the time-limits for storing it. He maintained that as there had been other means of establishing his identity, the collection and processing of his DNA had not been justified or necessary in his case. 18. On 6 June 2012 the Administrative Court dismissed the second applicant’s complaint, finding that the Ministry of the Interior was authorised to collect and process personal data, including genetic material, in order to prevent and detect criminal and minor offences and to find and apprehend the perpetrators of such crimes. 19. The applicant appealed. He submitted that his identity had been known to the police. Since the criminal complaint against him had pre-dated the analysis of his DNA, the relevant material had been unlawfully taken from him and stored. The criminal complaint concerned charges of aggravated theft and the Ministry of the Interior had confirmed in similar proceedings that no DNA analysis had ever been carried out in cases of suspected theft and aggravated theft (see paragraph 31 below). 20. On 12 March 2013 (served on the applicant on 12 April 2013) the Higher Administrative Court dismissed the second applicant’s appeal and upheld the lower court’s decision. Referring to the legislation specified above, the court held that the police had taken and processed the DNA material because the second applicant had been suspected of committing a crime. RELEVANT DOMESTIC LAW AND PRACTICERelevant domestic lawPersonal Data Protection Act (Official Gazette nos. 7/2005, 103/2008, 124/2010, 135/2011, 43/2014, 153/2015, 99/2016 and 64/2018)

21. Section 5 of the Personal Data Protection Act provides, inter alia, that personal data is to be processed reasonably and in accordance with the law and collected for specific and clear aims specified by law. It is to be processed in a manner suitable to those aims. It is to be retained in a form which allows for the identification of the person concerned and no longer than is necessary to fulfil the purposes for which the data has been collected. After the time-limit for storage of the personal data has expired, it may only be processed for historical, scientific or statistical purposes. 22. Under section 7, personal data related to criminal offences, penalties and security measures is to be processed by the competent State authorities in accordance with the law. Police Act (Official Gazette nos.114/2006, 6/2009, 145/2012, 41/2014, 33/2015, 31/2016, 106/2016, 120/2016, 21/2018 and 64/2018)
23. Section 14 of the Police Act provides that a police officer can take, of his or her own motion or by order of the public prosecutor, court or other body measures for the detection of a crime and prosecution of a person who is suspected of planning or committing a crime. 24. Under section 66(1) the police are authorised to collect, store, process, examine, transfer and delete personal data under the conditions specified by law and maintain a database of personal data for the prevention and detection of criminal and minor offences and in order to find the perpetrators of such acts. 25. Section 69 provides that the police are to maintain a database of persons for whom DNA profiles have been compiled. 26. Section 54 of the amendments to the Police Act, which became effective (се применува) as of 1 December 2012, namely after the taking of DNA samples from the applicants, provides that DNA data (section 69) are retained permanently (трајно). Criminal Proceedings Act (Official Gazette nos. 150/2010 and 100/2012, entered into force (влегува во сила) on 18 November 2010 and became effective on 1 December 2013)
27. Section 249(3) and (5) of the Criminal Proceeding Act provides that DNA samples can be collected for the identification of persons or for comparison with other biological samples and DNA profiles. In such circumstances the consent of the person concerned is not required. If no criminal proceedings are brought, samples taken under this section can only be retained until prosecution of the offence in question becomes time ‑barred. 28. Under section 277, the judicial police are authorised to collect biological material for DNA analysis in order to identify persons or objects or if it is in the interest of the proceedings. The judicial police can also take samples for DNA analysis from suspects in accordance with section 249(3) of the Act. In order to establish the origin of traces on certain objects, the police can collect biological material for DNA analysis from persons who are likely to have come into contact with those objects. Rules on Police Conduct (Official Gazette no. 149/2007)
29. Sections 6 and 7 of the Rules set out the powers of the police to establish the identity of a person who is suspected of committing a crime. The identity of an individual can be established, inter alia, on the basis of a DNA sample. Identification of a person who is not suspected of committing a crime on the basis of DNA analysis can be made only if he or she has consented in writing. Instruction on the manner and methods for forensic registration and identification of persons and unidentified corpses, Ministry of the Interior, February 2014 (“the 2014 Instruction”)
30. The 2014 Instruction provides that the Forensics Bureau within the Ministry of the Interior is to keep records of DNA profiles (section 3). It specifies that the arresting officer is to apply to register a person in the forensic records. In so doing, the officer can, inter alia, take biological material from that person for DNA analysis (section 9). The DNA samples are to be stored in special containers approved by the Forensics Bureau (section 20) and kept in a refrigerator for a maximum of seven days before they are sent to the Forensics Bureau. On expiry of that time-limit, a new sample is to be taken. Samples which are not submitted to the Forensics Bureau within the specified time-limit are to be destroyed by the Bureau (section 21). The 2014 Instruction further specifies the procedure for DNA analysis and access to records of DNA profiles. The 2014 Instructions set aside the 2009 Instruction, which contained no provisions regarding the collection, processing or storage of DNA material. Relevant domestic practice
31. By a decision of 11 June 2010 the Directorate dismissed a complaint by a person who, like in the present cases, alleged that police officers had taken a mouth swab for compiling his DNA profile in violation of his privacy. In that decision the Directorate referred to a statement of a representative of the Ministry of the Interior that cellular material had never been taken in cases of suspected theft and aggravated theft (decision no. 09‑30/7). INTERNATIONAL MATERIALS
32. The international materials relevant to the present case were described in the cases of S. and Marper v. the United Kingdom ([GC], nos. 30562/04 and 30566/04, §§ 41-44, ECHR 2008) and Gaughran v. the United Kingdom (no. 45245/15, §§ 50-52, 13 February 2020). COMPARATIVE LAW
33. Concerning the retention of DNA profiles following a conviction for a minor criminal offence, it appears from information available to the Court that, of thirty Council of Europe member States other than the respondent State, three (Cyprus, Ireland and Montenegro) have indefinite retention periods. Twenty States have retention periods limited in time (Albania, Austria, Belgium, Bosnia and Herzegovina, Croatia, Denmark, Estonia, Finland, France, Hungary, Latvia, Lithuania, the Republic of Moldova, the Netherlands, Norway, Poland, Portugal, Spain, Sweden and Switzerland). It may also be noted that some of those states for example Belgium and Latvia do not provide for retention of data for ‘administrative’ offences, but only criminal offences. Of those twenty, seven have a defined retention period (either general, or for more serious offences) linked to the date of death of the convicted person (Bosnia and Herzegovina, Denmark, Finland, the Republic of Moldova, the Netherlands, Norway and Switzerland). Of those seven, the legislation of the Netherlands specifies the longest retention period of twenty years from the date of death for serious offences, with decreasing periods for less serious offences. Three member States (the Czech Republic, Germany and Malta) do not have specific retention periods but have various substantive limitations on the data retention and require periodic assessments to determine whether the substantive requirements for a prolonged retention are met. Four are without relevant regulation (San Marino, Georgia, Lichtenstein and Romania). 34. In general, the reasons for retention of the relevant personal data (DNA profiles, fingerprints, photographs) of convicted offenders relate to the necessity of crime prevention and effective investigation and prosecution of crime. The legislation in Austria also refers to the need to protect public security and in Ireland the need to retain data for intelligence purposes. The legislation in Sweden also refers to the fulfilment of obligations which follow from international commitments. 35. As to the existence of review mechanisms, the report finds that in six of the member States subject to the survey (Albania, Bosnia and Herzegovina, the Czech Republic, the Republic of Moldova, Norway and Poland) there is a possibility of an administrative or other similar specialised review of the necessity of the data retention. In eighteen (Austria, Belgium, Croatia, Cyprus, Finland, France, Georgia, Germany, Hungary, Ireland, Lithuania, Malta, Montenegro, Portugal, Romania, Spain, Sweden and Switzerland) there is a possibility of a judicial review, often coupled with a prior administrative review. In five States (Denmark, Estonia, Latvia, the Netherlands, Lichtenstein) there is no possibility of a review of the necessity of data retention. In San Marino, it would appear that there is no specific regulation on the matter. THE LAW
JOINDER OF THE APPLICATIONS
36. The Court considers that, in accordance with Rule 42 § 1 of the Rules of Court, the applications should be joined, given their similar factual and legal background. ALLEGED VIOLATION OF ARTICLE 8 OF THE CONVENTION
37. The applicants complained under Article 8 of the Convention that the collection, processing and storage of their DNA material had violated their right to respect for their private life. In that connection, they alleged that there had been no legislative framework that clearly regulated the taking, use, processing, storing and deletion of DNA material. The legislation on which the authorities had relied in their cases did not meet the “quality of law” requirement under Article 8 of the Convention. This Article reads as follows:
“1. Everyone has the right to respect for his private and family life, his home and his correspondence. 2. There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.”
Admissibility
38. The Government did not raise any objection as to the admissibility of the applications. 39. The Court notes that the applications are not manifestly ill‑founded within the meaning of Article 35 § 3 (a) of the Convention. It further notes that they are not inadmissible on any other grounds. They must therefore be declared admissible. MeritsThe parties’ submissions

40. The applicants observed that the legislative framework at the time had not provided clear rules on the collection, use, retention and deletion of DNA material. It had not been accessible (regarding the Guidelines), sufficiently precise and foreseeable. In this connection, they maintained that the purposes for which DNA material could be taken, processed and stored had been vague and broadly defined. The inconsistent domestic practice demonstrated that the applicable rules had lacked clarity and foreseeability. Furthermore, the applicable law had not specified any time-limit for the retention of DNA findings. That was also the case with the rules that post‑dated and had accordingly not applied to the applicants’ cases, namely the Criminal Proceedings Act and the 2014 Instruction. The Criminal Proceedings Act neither provided safeguards for the applicants nor defined a time-limit for the retention of the DNA material of convicted persons who had already served their sentences, such as the applicants. The indefinite retention of DNA material, irrespective of the offences concerned, was not necessary in a democratic society. That the courts had not relied on the DNA findings in the proceedings against the second applicant proved that such an analysis had not been justified in his case. Lastly, there were no safeguards against the arbitrary use of their DNA material in the future. In this connection, they argued that DNA registers could be accessed by authorities other than the police. 41. The Government agreed that DNA material constituted personal data that required protection and that there had been an interference with the applicants’ right to respect for their private life. However, in their view that interference had been in accordance with the law (paragraphs 21-29), which had been sufficiently precise and foreseeable, and had pursued a legitimate aim, namely the detection and prevention of crime. Furthermore, it had been proportionate to the aim sought to be achieved. In this connection, they maintained that even though it had not been the only means available, DNA analysis had been the most efficient way of identifying the applicants, as prior convicts who had been suspected of committing a crime. The applicants had not objected to the taking of the DNA samples (both applicants) and use of the DNA findings in the impugned proceedings (the first applicant). 42. According to the Government, the regulatory framework in force at the material time had been subsequently developed in order to strengthen and improve the safeguards against arbitrary conduct by State authorities in future cases. The amendments to the Criminal Proceedings Act set a time‑limit for the retention of DNA material. Furthermore, the 2014 Instruction provided that DNA samples were to be destroyed immediately after the DNA analysis had been completed. The DNA profiles derived from that analysis were to be recorded in registers and “retained for a certain [length of] time, but not indefinitely”. The applicants’ DNA information had not been used in any other proceedings or for purposes different from those for which it had been collected. Accordingly, the applicants’ allegations of potential misuse of the DNA material were speculative. Moreover, they had not presented any evidence in support of any actual or potential misuse of their personal (genetic) material.

Outcome for Article 8: violation