The European Commission introduced a Roadmap outlining how EU law enforcement can gain effective and lawful access to data. This roadmap is a crucial deliverable under ProtectEU – the EUs Internal Security Strategy presented in April.

Crimes like terrorism, organized crime, and online fraud leave digital traces. With 85% of criminal investigations depending on electronic evidence, law enforcement needs improved tools and updated legal frameworks to access digital data lawfully while respecting fundamental rights.

The Roadmap targets six key areas: 

• Data retention: In 2025, the Commission will assess the impact of updating the EUs data retention rules. Europol and Eurojust will enhance cooperation between law enforcement and service providers for accessing electronic evidence.

• Lawful interception: To facilitate evidence gathering across systems and borders, the Commission will explore measures to enhance cross-border cooperation for lawful data interception by 2027, including strengthening the European Investigation Order and developing secure information sharing among Member States and agencies from 2026 to 2028.

• Digital forensics: Law enforcement must analyze and preserve digital evidence on devices. The Commission, in collaboration with Europol, will conduct a gap analysis for digital forensics solutions and support the development of forensic tools with EU funding. Europol will work towards becoming a center of excellence in digital forensics from 2026.

• Decryption: In 2026, the Commission will propose a Technology Roadmap on encryption to find solutions for lawful access to encrypted data, ensuring cybersecurity and fundamental rights. The Commission will also back new decryption technologies for Europol.

• Standardisation: The Commission will partner with Europol and industry to create a streamlined EU approach to internal security standardization, focusing on digital forensics and lawful data disclosure.

• AI solutions for law enforcement: By 2028, the Commission will promote AI tools to help authorities lawfully process large volumes of seized data, improving the analysis of digital evidence.

Next Steps

The Commission invites Member States to discuss the Roadmap during the July Informal Justice and Home Affairs (JHA) Council on July 22-23.

Background

President von der Leyens political guidelines of July 2024 emphasized the need for law enforcement to have adequate tools for lawful access to digital information while upholding fundamental rights.

In April 2025, the Commission presented ProtectEU – the EUs Internal Security Strategy, announcing plans for a Roadmap on lawful and effective data access for law enforcement in early 2025.

The roadmap responds to the JHA Council conclusions of December 2024, where Member States urged the Commission to create this work plan, following recommendations from the High-Level Group on Access to Data for Law Enforcement, established in 2023 to tackle challenges in accessing crucial digital evidence.

For more information

Roadmap for effective and lawful access to data for law enforcement

Cybercrime - European Commission

High-Level Group (HLG) on access to data for effective law enforcement - European Commission