Electronic Evidence after E-evidence Package’s Adoption: Challenges for Application and Unresolved Problems

Stanisław Tosza

Abstract


On 12 July 2023, the European Union adopted the e-evidence package after five lengthy years of negotiating this controversial legislation. This package introduces a new model of cooperation to ensure transnational access to data for criminal investigations and prosecutions. The new model aims to offer a more efficient way of requesting data from service providers, often located in different countries, by allowing direct requests to Internet service providers active within the European Union. This approach will bypass the authorities in the Member States where the request is received. Providers will be required to designate at least one establishment or representative capable of receiving and responding to such requests promptly, and authorities will be permitted to send their requests directly to these designated entities. While the adoption of the e-evidence package marks a crucial step forward, its effectiveness, viability and practical application depend on several unresolved issues left to the Member States, or not addressed at all, and on reaching an agreement with the U.S. under the so-called CLOUD Act. This article aims to present the current state of play, examine these remaining issues and assess their impact on the final design of the system for accessing electronic evidence in the European Union.


Keywords


electronic evidence; European Production Order; Internet service providers; encryption; admissibility of evidence; European Investigation Order

Full Text:

PDF

References


LITERATURE

Bachmaier Winter L., Salimi F. (eds.), Admissibility of Evidence in EU Cross-Border Criminal Proceedings: Electronic Evidence, Efficiency and Fair Trial Rights, Oxford 2024, DOI: https://doi.org/10.5040/9781509972029.

Bilgiҫ S., Digital Evidence Collection in Turkey, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Brodowski D., Digital Evidence and the Cooperation of Service Providers in Germany, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Careel S., Verbruggen F., Digital Evidence in Criminal Matters: Belgian Pride and Prejudice, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Christakis T., From Mutual Trust to the Gordian Knot of Notifications: The EU E-evidence Regulation and Directive, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Cuadrado Salinas C., Ortiz Pradillo J.C., Access to Retained Data and Cooperation of Service Providers in Criminal Investigations in Spain, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Daalen O.L. van, The Right to Encryption: Privacy as Preventing Unlawful Access, “Computer Law & Security Review” 2023, vol. 49, DOI: https://doi.org/10.1016/j.clsr.2023.105804.

Daskal J., The Un-territoriality of Data, “The Yale Law Journal” 2015, vol. 125.

Daskal J., Unpacking the CLOUD Act, “Eucrim” 2018, no. 4, DOI: https://doi.org/10.30709/eucrim-2018-022.

Delpech de Saint Guilhem C., On Encryption Technologies and Potential Solutions for Lawful Access, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Di Paolo G., Admissibility of E-evidence, Transnational E-evidence and Fair-Trial Rights in Italy, [in:] Admissibility of Evidence in EU Cross-Border Criminal Proceedings: Electronic Evidence, Efficiency and Fair Trial Rights, eds. L. Bachmaier Winter, F. Salimi, Oxford 2024, DOI: https://doi.org/10.5040/9781509972029.ch-005.

Filatova M., Kostyleva O., Alekseeva T., Cooperation of Service Providers in Criminal Investigations in the Russian Federation, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Franssen V., Cross-border Gathering of Electronic Evidence in the EU: Toward More Direct Cooperation under the E-evidence Regulation, [in:] Research Handbook on EU Criminal Law (2), eds. M. Bergström, V. Mitsilegas, T. Quintel, [forthcoming].

Franssen V., The Belgian Internet Investigatory Powers Act – A Model to Pursue at European Level?, “European Data Protection Law Review” 2017, vol. 3(4), DOI: https://doi.org/10.21552/edpl/2017/4/18.

Franssen V., The European Commission’s E-evidence Proposal: Toward an EU-wide Obligation for Service Providers to Cooperate with Law Enforcement?, “European Law Blog” 2018, DOI: https://doi.org/10.21428/9885764c.8139cb70.

Franssen V., Tosza S. (eds.), The Cambridge Handbook of Digital Evidence in Criminal Matters, Cambridge University Press, 2025 [forthcoming].

Kusak M., Dostęp do danych elektronicznych dotyczących treści w postępowaniu karnym – wyzwania krajowe i międzynarodowe, “Gdańskie Studia Prawnicze” 2024, no. 2, DOI: https://doi.org/10.26881/gsp.2024.2.05.

Lasagni G., Admissibility of Digital Evidence, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Ligeti K., Robinson G., Digital Evidence and the Cooperation of Service Providers in Luxembourg, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

McIntyre T.J., Murphy M.H., Accessing Digital Evidence in Criminal Matters: An Inadequate Irish Legal Framework, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Mitsilegas V., The Privatisation of Mutual Trust in Europe’s Area of Criminal Justice: The Case of E-evidence, “Maastricht Journal of European and Comparative Law” 2018, vol. 25(3), DOI: https://doi.org/10.1177/1023263X18792240.

Moraes T., Sparkling Lights in the Going Dark: Legal Safeguards for Law Enforcement’s Encryption Circumvention Measures, “European Data Protection Law Review” 2020, vol. 6(1), DOI: https://doi.org/10.21552/edpl/2020/1/7.

Sieber U., Neubert C., Transnational Criminal Investigations in Cyberspace: Challenges to National Sovereignty, “Max Planck Yearbook of United Nations Law Online” 2017, vol. 20, DOI: https://doi.org/10.1163/13894633_02001010.

Thaman S.C., Balancing Truth Against Human Rights: A Theory of Modern Exclusionary Rules, [in:] Exclusionary Rules in Comparative Law, ed. S.C. Thaman, Cham 2013.

Topalnakos P.G., Critical Issues in the New EU Regulation on Electronic Evidence in Criminal Proceedings, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Tosza S., All Evidence Is Equal, but Electronic Evidence Is More Equal Than Any Other: The Relationship between the European Investigation Order and the European Production Order, “New Journal of European Criminal Law” 2020, vol. 11(2), DOI: https://doi.org/10.1177/2032284420919802.

Tosza S., Internet Service Providers as Law Enforcers and Adjudicators: A Public Role of Private Actors, “Computer Law & Security Review” 2021, vol. 43, DOI: https://doi.org/10.1016/j.clsr.2021.105614.

Tosza S., Mutual Recognition by Private Actors in Criminal Justice? E-evidence Regulation and Service Providers as the New Guardians of Fundamental Rights, “Common Market Law Review” 2024, vol. 61(1), DOI: https://doi.org/10.54648/COLA2024005.

Tosza S., The E-evidence Package Is Adopted: End of a Saga or Beginning of a New One?, “European Data Protection Law Review” 2023, vol. 9.

Tosza S., W poszukiwaniu dowodów elektronicznych – europejski nakaz wydania dowodów elektronicznych oraz inne narzędzia międzynarodowego pozyskiwania danych dla potrzeb postępowania karnego, “Gdańskie Studia Prawnicze” 2024, no. 2, DOI: https://doi.org/10.26881/gsp.2024.2.03.

Tosza S., FranssenV., A Comparative Analysis of National Law and Practices: Unravelling Differences in Views of EU-Wide Solutions, [in:] The Cambridge Handbook of Digital Evidence in Criminal Investigations, eds. V. Franssen, S. Tosza, 2025 [forthcoming].

Wahl T., AG: EncroChat Data Can, in Principle, Be Used in Criminal Proceedings, “Eucrim” 2024, no. 3.

Walden I., ‘The Sky is Falling!’ – Responses to the ‘Going Dark’ Problem, “Computer Law & Security Review” 2018, vol. 34, DOI: https://doi.org/10.1016/j.clsr.2018.05.013.

Zontek W., „Mój smartfon to ja”. Hasła i zabezpieczenia biometryczne a reguły procesowe w XXI wieku, [in:] Prawo karne gospodarcze. Księga jubileuszowa profesora Zbigniewa Ćwiąkalskiego, eds. P. Kardas, M. Małecki, W. Wróbel, Kraków 2023.

ONLINE SOURCES

Agreement between the Government of Australia and the Government of the United States of America on Access to Electronic Data for the Purpose of Countering Serious Crime, https://www.homeaffairs.gov.au/nat-security/files/cloud-act-agreement-signed.pdf (access: 16.12.2024).

Böse M., An Assessment of the Commission’s Proposals on Electronic Evidence, 2018, https://www.europarl.europa.eu/RegData/etudes/STUD/2018/604989/IPOL_STU(2018)604989_EN.pdf (access: 16.12.2024).

Carrera S., Stefan M., Mitsilegas V., Cross-Border Data Access in Criminal Proceedings and the Future of Digital Justice: Navigating the Current Legal Framework and Exploring Ways Forward Within the EU and Across the Atlantic. Report of a CEPS and QMUL Task Force, Brussels, October 2020, https://cdn.ceps.eu/wp-content/uploads/2020/10/TFR-Cross-Border-Data-Access.pdf (access: 16.12.2024).

Clarke R.A., Morell M.J., Stone G.R., Sunstein C.R., Swire P., Liberty and Security in a Changing World: Report and Recommendations of the President’s Review Group on Intelligence and Communications Technologies, 12.12.2013, https://obamawhitehouse.archives.gov/sites/default/files/docs/2013-12-12_rg_final_report.pdf (access: 16.12.2024).

Connect on Tech, New EU Regulation on Digital Evidence Opens Up Risk of Data Misuse, 9.2.2024, https://www.connectontech.com/new-eu-regulation-on-digital-evidence-opens-up-risk-of-data-misuse (access: 16.12.2024).

Council of Europe, Chart of Signatures and Ratifications of Treaty 224, https://www.coe.int/en/web/conventions/full-list?module=signatures-by-treaty&treatynum=224 (access: 16.12.2024).

Daniele M., Le sentenze “gemelle” delle Sezioni Unite sui criptofonini, “Sistema penale”, 17 July 2024, https://www.sistemapenale.it/it/scheda/daniele-le-sentenze-gemelle-delle-sezioni-unite-sui-criptofonini#_ftnref41 (access: 16.12.2024).

EDRi, e-Evidence Compromise Blows a Hole in Fundamental Rights Safeguards, 7.2.2023, https://edri.org/our-work/e-evidence-compromise-blows-a-hole-in-fundamental-rights-safeguards (access: 16.12.2024).

European Commission, Non-Paper: Progress Report Following the Conclusions of the Council of the European Union on Improving Criminal Justice in Cyberspace, Brussels, 7.12.2016, https://data.consilium.europa.eu/doc/document/ST-15072-2016-REV-1/en/pdf (access: 16.12.2024).

European Commission, EU-U.S. Announcement on the Resumption of Negotiations on an EU-U.S. Agreement to Facilitate Access to Electronic Evidence in Criminal Investigations, 2.3.2023, https://commission.europa.eu/news/eu-us-announcement-resumption-negotiations-eu-us-agreement-facilitate-access-electronic-evidence-2023-03-02_en (access: 16.12.2024).

European Criminal Bar Association, E-evidence, https://www.ecba.org/content/index.php/working-groups/e-evidence (access: 16.12.2024).

European Law Institute, ELI Proposal for a Directive of the European Parliament and the Council on Mutual Admissibility of Evidence and Electronic Evidence in Criminal Proceedings: Draft Legislative Proposal of the European Law Institute, 2023, https://www.europeanlawinstitute.eu/fileadmin/user_upload/p_eli/Publications/ELI_Proposal_for_a_Directive_on_Mutual_Admissibility_of_Evidence_and_Electronic_Evidence_in_Criminal_Proceedings_in_the_EU.pdf (access: 16.12.2024).

Europol, First Report on Encryption by the EU Innovation Hub for Internal Security, 2024, https://www.eurojust.europa.eu/sites/default/files/assets/eu-innovation-hub-first-report-on-encryption.pdf (access: 16.12.2024).

General Secretariat of the Council, Proposal for a Regulation of the European Parliament and of the Council on European Production and Preservation Orders for Electronic Evidence in Criminal Matters – Compilation of Member States Comments, 28.6.2018, https://data.consilium.europa.eu/doc/document/ST-10470-2018-REV-1/en/pdf (access: 16.12.2024).

U.S. Department of Justice, Cloud Act Agreement between the Governments of the U.S., United Kingdom of Great Britain and Northern Ireland, https://www.justice.gov/criminal/criminal-oia/cloud-act-agreement-between-governments-us-united-kingdom-great-britain-and-northern#:~:text=The%20Agreement%20provides%20an%20efficient,consistent%20with%20its%20law%20and (access: 16.12.2024).

Woods K., Swire P., The CLOUD Act: A Welcome Legislative Fix for Cross-Border Data Problems, 6.2.2018, https://www.lawfaremedia.org/article/cloud-act-welcome-legislative-fix-cross-border-data-problems (access: 16.12.2024).

LEGAL ACTS

Clarifying Lawful Overseas Use of Data Act – CLOUD Act, S. 2383, 115th Cong. § 2(1)–(2) (2018) (codified at 18 U.S.C. §§ 2713, 2523 (2018).

Directive 2014/41/EU of the European Parliament and of the Council of 3 April 2014 regarding the European Investigation Order in criminal matters (OJ EU L 130/1, 1.5.2014).

Directive (EU) 2023/1544 of the European Parliament and of the Council of 12 July 2023 laying down harmonised rules on the designation of designated establishments and the appointment of legal representatives for the purpose of gathering electronic evidence in criminal proceedings (OJ EU L 191/181, 28.7.2023).

French Criminal Code.

Proposal for a Directive of the European Parliament and of the Council laying down harmonised rules on the appointment of legal representatives for the purpose of gathering evidence in criminal proceedings, Strasbourg,17.4.2018, COM/2018/226 final.

Proposal for a Regulation of the European Parliament and of the Council on European Production and Preservation Orders for electronic evidence in criminal matters, Strasbourg, 17.4.2018, COM/2018/225 final.

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ EU L 119/1, 4.5.2016).

Regulation (EU) 2018/1805 of the European Parliament and of the Council of 14 November 2018 on the mutual recognition of freezing orders and confiscation orders (OJ EU L 303/1, 28.11.2018).

Regulation (EU) 2022/850 of the European Parliament and of the Council of 30 May 2022 on a computerised system for the cross-border electronic exchange of data in the area of judicial cooperation in civil and criminal matters (e-Codex system), and amending Regulation (EU) 2018/1726 (OJ EU L 150/1, 1.6.2022).

Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services and amending Directive 2000/31/EC (OJ EU L 277/1, 27.10.2022).

Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for electronic evidence in criminal proceedings and for the execution of custodial sentences following criminal proceedings (OJ EU L 191/118, 28.7.2023).

Second Additional Protocol to the Convention on Cybercrime on enhanced co-operation and disclosure of electronic evidence, CETS no. 224.

CASE LAW

Cour de Cassation, Assemblée plénière, 7 novembre 2022, no. 21-83146, no. 21-83146.

Decision of the U.S. Court of Appeals – Second Circuit of 14 July 2016, Microsoft Corp. v. United States (so-called Microsoft Ireland Case), 829 F.3d 197.

Judgment of the Court of 21 September 1989 in case C-68/88, Commission of the European Communities v Hellenic Republic, ECLI:EU:C:1989:339.

Judgment of the Court (Grand Chamber) of 8 April 2014 in joined cases C-293/12 and C-594/12, Digital Rights Ireland and others, ECLI:EU:C:2014:238.

Judgment of the Court (Grand Chamber) of 30 April 2024 in case C-670/22, Criminal proceedings against M.N. (EncroChat), ECLI:EU:C:2024:372.

Judgment of the Permanent Court of International Justice on 7 September 1927, SS Lotus (Fr. v. Turk.), Publications of the Permanent Court of International Justice, Series A.-No. 70.




DOI: http://dx.doi.org/10.17951/sil.2024.33.5.237-260
Date of publication: 2024-12-31 10:51:59
Date of submission: 2024-09-24 23:05:14


Statistics


Total abstract view - 22
Downloads (from 2020-06-17) - PDF - 0

Indicators



Refbacks

  • There are currently no refbacks.


Copyright (c) 2024 Stanisław Tosza

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 International License.