Another (small) correction: There aren't hundred of millions persons registered in the SIS. The "hundred of millions" comes from the number of EU citizens. Of c

Another (small) correction: There aren't hundred of millions persons registered in the SIS. The "hundred of millions" comes from the number of EU citizens. Of course, one person's data leaked is too many, but anyway, that's how it is. Also, most of the person alerts do not have binaries (photos or fingerprints); usually only the persons that have an European Arrest Warrant do have these. I see this as more of a security issue than a privacy issue. The data in the SIS is mostly about law enforcement, meaning that a leak would expose that a person is wanted (some of the person searches are undercover, and the data also covers a person's aliases - so if a "bad" person has access to the data it can react) and also, the SIS data is a "living" organism - using a copy (snapshot) of the data in a law enforcement activity is actually unlawful - if the snapshot is old it means that you cannot find a person that was added yesterday and also that you will find a person that was "cleared" yesterday.