Guest editorial eucrim 2-2023

• Date: 11 October 2023
• Author: Birgit Sippel
• DOI: https://doi.org/10.30709/eucrim-2023-011
• Pages: 3

Dear Readers,

On 12 July 2023, after more than five years of, in part, very fraught negotiations, the European Parliament and the Council signed the so-called “e-evidence package”. This marked the turning point in the cooperation between law enforcement authorities and service providers. Criminal offences prepared and carried out exclusively offline are a thing of the past, which is why electronic evidence is becoming increasingly important for law enforcement authorities. However, e-evidence is frequently stored in another State and, until now, cross-border access to such evidence was often very burdensome, often resulting in possibly already getting lost and causing investigations to be stopped inconclusively. The new EU internal rules will now allow national authorities to request evidence directly from service providers in other Member States or to ask that data be preserved, based on EU-wide harmonised rules and deadlines.

Driven by the singular objective of speeding up the process, however, the initial Commission proposals and partly also the Council position completely ignored the fact that criminal law across the EU is far from being fully harmonised, beginning with the question of what constitutes a (serious) crime. The drafters of the new Regulation and Directive also turned a blind eye to the fact that the rule of law and the protection of fundamental rights is not a given, not even within the EU. In my capacity as Parliament Rapporteur for the package, I have therefore done my utmost to ensure that cross-border judicial and police cooperation were adapted to today’s digital reality, on the one hand, and, on the other, that fundamental rights (in particular the rights to privacy and to the protection of personal data) remain protected and procedural safeguards are ensured .

As representatives of the European Parliament, we successfully pushed for the introduction of a notification regime: When it comes to production orders for the most sensitive data categories – traffic and content data –, the State in which the service provider is addressed will (barring exceptions) have to be notified about the order. The notified authorities will then have ten days to refuse the order, based on a clear list of grounds, including concerns about media freedom and fundamental rights violations in the requesting Member State. Parliament also made sure that service providers will be able to flag concerns. Furthermore, we pushed through the...