European judicial authorities will soon have a faster path to digital evidence, thanks to new EU rules enabling direct binding production and preservation orders to service providers in different member states. This development aims to reduce delays in criminal investigations but depends on courts, governments, and tech companies consistently applying safeguards.
Regulation (EU) 2023/1543, effective from 18 August, addresses electronic communications, internet addressing, cloud storage, and other data-processing services in the EU, regardless of where the data is stored.
The regulation addresses investigators’ challenges, acknowledging that digital evidence is relevant to about 85% of criminal investigations and may involve multiple jurisdictions.
The new European e-Evidence framework allows authorities to issue a European Production Order for specified data or a European Preservation Order to prevent data deletion during further requests. Providers have 10 days to respond to production orders, reduced to eight hours in emergencies, while preservation orders require immediate action with data retained for 60 days, extendable by another 30 days.
Orders must target specific data, be proportionate, and align with domestic investigation conditions. Judicial involvement varies by information sensitivity, with judges, courts, or investigating judges handling sensitive data while prosecutors manage less intrusive data categories.
Direct communication between issuing authorities and providers simplifies the process, avoiding delays from requests to provider-country authorities. The enforcing state must receive certain orders simultaneously with the provider and can object if information is protected or orders breach fundamental rights.
Providers must report incomplete, erroneous, or impossible orders, especially if professional privileges or press freedom are involved. Non-compliant companies face penalties up to 2% of their total worldwide turnover.
Implementation relies on competent authorities in member states and providers appointing an EU establishment or representative. The European Commission will monitor the regulation and evaluate it by August 2029.
Monitoring should reveal emergency procedure usage, order corrections or refusals, delayed notifications, and challenge outcomes before data enters criminal proceedings.
Mutual recognition requires confidence in justice systems applying comparable standards, especially where judicial independence or civil society treatment is disputed. Independent authorisation, narrow targeting, and effective remedies are crucial for legitimacy.
The regulation establishes a targeted data procedure without indiscriminate retention or unrestricted online access. While faster access aids justice, it risks magnifying errors if orders are overly broad, politically motivated, or insufficiently scrutinized. The system’s success hinges on maintaining judicial protection alongside accelerated criminal cooperation.
Leave a Reply