Lyon: In less than three months, a prosecutor in one member state will be able to compel a service provider in another to hand over electronic evidence directly, with only limited involvement from authorities in the provider’s home country. The EU’s e-Evidence framework enters into application on 18 August 2026 across every member state except Denmark, and the gap between that deadline and the readiness of national systems has become uncomfortably wide.
The framework rests on two instruments. A regulation, which applies directly without national legislation, creates the operative tools. An accompanying directive, which member states were required to transpose by 18 February 2026, sets out the obligations on service providers to designate establishments or legal representatives capable of receiving orders. It is the directive that has exposed the bloc’s uneven pace: in late March the Commission sent formal notices to twenty-two member states for failing to communicate complete transposition, opening infringement proceedings with the application date barely four months off.
The substance of the reform is a deliberate break with the slow choreography of mutual legal assistance. Two new tools sit at its centre. A European Production Order lets a judicial authority in one state require a provider in another to produce data, with compliance generally due within ten days and, in urgent cases involving an imminent threat to life or safety, within eight hours. A European Preservation Order lets authorities freeze data for sixty days so that it survives long enough to be sought through a production order. The data in scope runs from subscriber and traffic information to the content of communications, and the obligations reach electronic communication services, messaging apps and social platforms offering services in the Union.
The attraction for investigators is obvious. Evidence that once required months of inter-governmental correspondence, often stranded by mismatched legal categories and overloaded ministries, can be obtained on a clock measured in days. For a continent where serious crime routinely leaves its traces on servers in a different jurisdiction from the offence, the promise is faster, more reliable access to the material that modern cases turn on.
The concerns track the same speed. Civil-liberties groups and some defence practitioners have warned that the diminished role of the provider’s home authorities weakens a traditional check, and that the safeguards for protected categories of data, for journalistic sources and for legal privilege will be tested in practice rather than in theory. Providers, for their part, face the operational burden of standing up compliant intake systems, training staff to assess orders against the regulation’s limited grounds for refusal, and meeting an eight-hour emergency window that leaves little room for legal review.
With twenty-two capitals under formal notice, the likeliest scenario is a framework that goes live on schedule into a landscape of partial readiness, with the burden falling first on providers and on the courts that will police the new orders. The August date is fixed. Whether the national plumbing beneath it will be is the question now consuming ministries and compliance teams alike.
