Vilnius: From this August, a prosecutor in one member state will be able to demand emails, account records or stored messages directly from a service provider in another, without first routing the request through a foreign court. The European Union’s e-evidence package, the regulation of which begins to apply on 18 August 2026, is the bloc’s attempt to drag cross-border criminal cooperation into the era of cloud computing, and its arrival is reshaping how investigators and technology firms interact.
The logic is one of speed. Electronic evidence is volatile and rarely sits where a crime occurs; a fraud investigated in Lithuania may depend on data held on servers in Ireland or France. Under the old mutual legal assistance system, obtaining that data could take months, by which time it might be deleted. The new European Production Order and European Preservation Order let authorities address binding requests straight to providers, who must respond within ten days, or as little as eight hours in emergencies involving imminent threats to life.
That efficiency has always been the easy part to justify. The harder question, fought out through years of trilogue negotiation, was how to protect fundamental rights when one country’s police reach into another’s jurisdiction. The compromise gives the state where a provider is located a notification mechanism, allowing it to object in defined circumstances, such as where a request would breach press freedom or fundamental rights, or target a person not resident on the requesting state’s territory. Civil liberties groups argue the grounds for refusal remain too narrow and the review too quick; law enforcement bodies counter that broader veto rights would reproduce the very delays the reform was meant to cure.
For providers, the regime brings legal certainty but also operational strain. Companies must designate establishments or legal representatives in the Union to receive orders, build channels to authenticate and log requests, and train staff to distinguish a valid production order from an unlawful demand. The directive accompanying the regulation, which member states were required to transpose by February, governs those representative obligations, and several capitals were late, leaving a patchy compliance map as the application date nears.
The package also intersects with wider debates about EU criminal-justice architecture. Council discussions in June touched on the coming revision of the European Public Prosecutor’s Office and on simplifying the data-protection rules that bind law enforcement, part of an effort to remove fragmentation across the Union’s patchwork of judicial bodies. Aligning e-evidence powers with those reforms will determine whether cross-border investigations become genuinely seamless or simply faster in theory.
What is clear is that the balance struck here will be tested in court. The first contested production orders will reveal how robustly the notification safeguards work in practice, and whether the promise of speed can coexist with the rights protections that gave the package its democratic legitimacy. For now, Europe has chosen to trust direct cooperation over judicial intermediation, a bet whose consequences will unfold case by case.




