After the terrorist attacks in the US and later in Madrid (March, 2004) and in London (July, 2005), the sharing of personal information of citizens between police authorities in different EU member states become an essential element in the framework of the international cooperation against terrorism and organised crime. As a consequence of this increasing processing of personal data for public security issues, the European Union adopted in November 2008 the Council Framework Decision 2008/977/JHA with the aim of providing a general rule regarding data protection in the field of police and judicial co-operation in criminal matters. Taking into account this scenario, and the changes imposed by the Lisbon Treaty, this article aims to analyse this Council Framework Decision and its compliance with the already established European Data Protection Legal Framework: mainly Council of Europe Convention 108 and Directive 95/46/EC.