# Roadmap on Lawful and Effective Access to Data Canonical URL: https://digital-acquis.eu/initiative/roadmap-on-lawful-and-effective-access-to-data Entry type: initiative Source edition current through: 17 July 2026 (2026-07-17). This is not a page modification date. Status: delivered. A delivered initiative is not necessarily legislation in force. Instrument: Communication Date as recorded: 24 Jun 2025 Date kind: date Status note: full date links only to published artifact types ## Summary The Roadmap for lawful and effective access to data for law enforcement sets out the conditions that should govern access to digital evidence. It says access must be necessary, proportionate, founded on clear, precise and accessible legal rules, subject to independent oversight and accompanied by effective remedies. The roadmap identifies deleted data, jurisdictional conflicts, difficult device forensics, encryption and limited analytical capacity as obstacles to obtaining criminal evidence. ## Sources - [Official source]() - [Official source]() ## Action items (19; complete published list) ### 1. Action item 350001 In 2025, the Commission will prepare an impact assessment with a view to updating EU rules on data retention as appropriate. Provenance: source document doc-039, paragraph 1. Digital dimension: no. ### 2. Action item 350002 With the continued support of the Commission, Europol and Eurojust are urged to build on the SIRIUS project to streamline cooperation with electronic communications service providers. Provenance: source document doc-039, paragraph 2. Digital dimension: no. ### 3. Action item 350003 Europol and Eurojust are urged to develop, in cooperation with the private sector, a catalogue of data that electronic communications providers process for their business purposes (to start in Q4 2025). Provenance: source document doc-039, paragraph 3. Digital dimension: no. ### 4. Action item 350004 Propose measures to improve the efficiency of cross-border requests for lawful interception through existing instruments, including assessing the need to further strengthen the European Investigation Order (by 2027); Provenance: source document doc-039, paragraph 4. Digital dimension: no. ### 5. Action item 350006 Explore measures to create a level-playing field for all types of communication providers in the enforcement of lawful interception obligations; Provenance: source document doc-039, paragraph 6. Digital dimension: no. ### 6. Action item 350007 determine the most efficient approach to tackle non-cooperative communication providers; Provenance: source document doc-039, paragraph 7. Digital dimension: no. ### 7. Action item 350008 support the deployment of secured information sharing capacities between Member States, Europol and other security agencies (from 2026 to 2028). Provenance: source document doc-039, paragraph 8. Digital dimension: no. ### 8. Action item 350009 coordinate a gap and needs analysis of research, development, deployment maintenance and uptake of common technical solutions for digital forensics before Q2-2026; Provenance: source document doc-039, paragraph 9. Digital dimension: no. ### 9. Action item 350010 continue to support the development of technical solutions for digital forensics through appropriate funding and coordination mechanisms; Provenance: source document doc-039, paragraph 10. Digital dimension: no. ### 10. Action item 350011 support Member States and procurement authorities in putting in place joint purchases of licences for digital forensics tools (before Q2-2027), starting with a pilot phase. Provenance: source document doc-039, paragraph 11. Digital dimension: no. ### 11. Action item 350013 continue supporting the creation of training materials and resources. Provenance: source document doc-039, paragraph 13. Digital dimension: no. ### 12. Action item 350014 deliver a technology roadmap on encryption (in Q2-2026); Provenance: source document doc-039, paragraph 14. Digital dimension: no. ### 13. Action item 350015 support the research and development of new decryption capacities to equip Europol with next-generation decryption capabilities (from 2030). Provenance: source document doc-039, paragraph 15. Digital dimension: no. ### 14. Action item 350016 The Commission, in close cooperation with Europol, will develop and streamline standardisation activities for lawful access, supported by suitable governance mechanisms (from Q2-2025 to Q2-2027). Provenance: source document doc-039, paragraph 16. Digital dimension: no. ### 15. Action item 350017 Member States are encouraged to devote sufficient resources to ensure that security practitioners participate in relevant standardisation forums on lawful access. Provenance: source document doc-039, paragraph 17. Digital dimension: no. ### 16. Action item 350019 Foster the creation and uptake of new AI solutions and improve existing ones for filtering and analysing digital evidence, including through the full use of AI regulatory sandboxes for their development, testing and evaluation, in line with the AI Act (from 2025 to 2028); Provenance: source document doc-039, paragraph 19. Digital dimension: no. ### 17. Action item 350020 engage in a dialogue with law enforcement and other stakeholders to identify their needs, building on the work of Europol’s Innovation Hub and the EU Justice and Home Affairs agencies’ Lab; Provenance: source document doc-039, paragraph 20. Digital dimension: no. ### 18. Action item 350021 support the creation of clear guidelines for the use of AI in law enforcement; Provenance: source document doc-039, paragraph 21. Digital dimension: no. ### 19. Action item 350022 support pilot projects aimed at developing and training legally and technically sound AI solutions for digital forensics, data analysis and other investigative tools for law enforcement use. Provenance: source document doc-039, paragraph 22. Digital dimension: no. ## Citing documents - [ProtectEU: a European Internal Security Strategy]() — status: delivered. Source document doc-031, action item 300007: > Roadmap on Lawful and Effective Access to Data: The Commission will present a roadmap setting out legal and practical measures to ensure law enforcement authorities can access data lawfully and effectively, prioritising a review of EU data retention rules and a Technology Roadmap on encryption to identify solutions enabling lawful access while safeguarding cybersecurity and fundamental rights. [Roadmap H1 2025; encryption roadmap 2026] - [ProtectEU: Agenda to prevent and counter terrorism]() — status: not recorded. Source document doc-090, action item 640040: > Implement the actions in the Roadmap on lawful and effective access to data for law enforcement ## Current developments Latest updates from Digital Policy Alert and Global Trade Alert. No reviewed developments available; this does not establish that no developments exist. ## Associated policy priorities - [External Strategy, Security & Democratic Resilience]() ## Broader policy context (shared priority; not a direct citation) - [Action Plan on Drone and Counter Drone Security]() — status: delivered. Action Plan on Drone and Counter-Drone Security prioritises a Drone Security Package, coordinated risk assessment and industrial coordination to address drone threats. Proposed actions include registration and direct remote identification for drones above 100g, D-TECT Forum launch in Q2 2026, a Drone Security Toolbox and an EU Trusted Drone Label. The plan also covers resilience testing for critical infrastructure, training, cellular detection, voluntary deployment and procurement, annual exercises, a centre of excellence and cooperation with Ukraine. - [Action Plan on the Cybersecurity of Hospitals and Healthcare Providers]() — status: delivered. Healthcare cybersecurity action is centred on a European Cybersecurity Support Centre, sector-specific guidance, maturity assessment and incident-response support. Planned measures include a rapid-response service in the EU Cybersecurity Reserve, a Health Cybersecurity Advisory Board, a network of health CISOs, cyber exercises and a ransomware recovery subscription service. The plan also covers cyber hygiene, threat intelligence, procurement guidance, training, regulatory mapping and international cooperation. - [Digitalisation of Return Case Management]() — status: forthcoming. The Commission will table a dedicated initiative to digitalise Member States’ return case management, as part of a new common approach on returns. COM(2025) 101 sets a common return system and, in Art. 42(1)(d), makes national digital systems for return/readmission/reintegration a core component; a separate act will specify interoperability, once-only data flows and statistics. The Commission’s Political Guidelines commit to digitalising case management; von der Leyen’s 17 March letter signalled presentation by end-2025. A 2026 consultation under the Work Programme will prepare governance and implementation, aligning with SIS/Eurodac and digital-by-default delivery while ensuring uniform practice across the Union. - [DigitalJustice@2030]() — status: delivered. The Commission's justice digitalisation programme will expand shared tools, data availability and cross-border digital cooperation. It plans a repository of digital justice tools, an IT toolbox, exchanges among Member States and guidance on high-risk AI. Other actions cover legal and judicial-data reuse, common videoconferencing requirements, remote participation in criminal hearings, support for national digitalisation and further development of the European Electronic Access Point. - [EU Action Plan on Cable Security]() — status: delivered. EU Action Plan on Cable Security aims to prevent, detect and respond to risks affecting submarine cables. By Q4 2025, the Commission, Member States and ENISA are to complete cable mapping, a coordinated risk assessment, a Cable Security Toolbox and a priority list of Cable Projects of European Interest. Further measures address investment, integrated surveillance, regional hubs, sensors, surveillance drones, incident reporting, repair vessels and spare parts, alongside crisis response, NATO cooperation, diplomacy, sanctions and attribution. - [European Centre for Democratic Resilience]() — status: not recorded. The Centre will be the operational backbone of the European Democracy Shield, uniting national capabilities to detect, analyse and attribute foreign information manipulation and interference (FIMI). It will pool open-source intelligence, media forensics and platform signals, provide rapid alerts and incident-response templates, and coordinate joint attribution with partners. The Centre will convene Member States and neighbouring countries, standardise methodologies, and channel support to independent media and media-literacy initiatives. By closing gaps between monitoring, policy action and sanctions, it will strengthen deterrence, help protect elections and debate, and build a European capacity against hybrid threats. - [European Democracy Shield]() — status: delivered. It will harden democratic resilience by combining early detection of foreign information manipulation, coordinated analysis and rapid response across the Union. A new European Centre for Democratic Resilience will pool national expertise and capacities as the hub for monitoring, attribution and joint action with partners. The Shield will leverage the EU’s FIMI toolbox and the Digital Services Act, expand media- and digital-literacy efforts, and strengthen crisis communication to counter disinformation systematically. It complements a forthcoming Media Resilience Programme supporting independent journalism, and is anchored in upgrades to EU internal-security governance. Work will also address harmful social-media design and youth well-being through expert advice on safeguards and enforcement. - [European Preparedness Union Strategy]() — status: delivered. The Preparedness Union Strategy would improve EU anticipation, coordination and response across crises through an EU risk and threat assessment, crisis dashboard and an upgraded Emergency Response Coordination Centre. It also proposes stockpiling, minimum preparedness requirements, revised civil-protection arrangements, early-warning guidance and preparedness training. The strategy includes measures for public-private continuity planning, population self-sufficiency during extreme disruptions, EU-wide exercises, civil-military coordination and cooperation with partner countries. - [European Space Shield]() — status: forthcoming. The European Space Shield is a proposed flagship within the Readiness Roadmap for defence readiness. It would establish and protect a European system of space capabilities for defence purposes, building on EU space systems and national capacities. The roadmap envisages endorsement of the shield as a priority flagship, coordinated prioritisation through space and defence programmes, coordination with Member States' procurement plans, and the shield's launch. - [Europol & Eurojust Revision]() — status: in progress. Europol & Eurojust Revision seeks to modernise Eurojust's legal framework and strengthen cross-border criminal-justice cooperation. The proposal addresses structural and operational constraints identified by the 2025 evaluation, improving governance and operational performance, cooperation with EU partners and third countries, and analytical and proactive capacity. It would expand Eurojust's mandate to cybercrime, gender-based violence and violations of EU restrictive measures, while reinforcing coordination with Europol and supporting work on serious and organised cross-border crime. - [Frontex Revision & EU Visa Support Office]() — status: forthcoming. Frontex is slated for a stronger mandate and reinforced standing corps, allowing the European Border and Coast Guard Agency to expand its presence and operational support. The Commission also assigns Frontex a stronger role in supporting Member States with returns and places a visa strategy among measures aimed at attracting international talent and reducing administrative barriers. - [Harmonised EU Framework for Data Retention]() — status: forthcoming. The Commission is preparing an impact assessment on data retention by service providers for criminal proceedings. The work responds to divergent national rules and the absence of an EU-wide framework, which authorities identify as an obstacle to investigations and cross-border cooperation. Consultations will examine the obstacles, possible non-regulatory and regulatory responses, and impacts on citizens' security, electronic-communications services and the protection of fundamental rights. - [International Digital Strategy]() — status: delivered. International Digital Strategy would extend EU digital cooperation through partnerships, dialogues, trade agreements and infrastructure with trusted partners. The programme covers secure connectivity, Digital Public Infrastructure, AI, software, submarine cables, satellite connectivity, quantum research, semiconductors, high-performance computing, cybersecurity and digital identity. Measures include the Digital Partnership Network, additional bilateral and regional partnerships, EU Tech Business Offer, support for Arctic, MEDUSA and Blue-Raman cables, and integration work on the EU Digital Identity Wallet with Ukraine, Moldova and the Western Balkans. - [New Strategic EU-India Agenda]() — status: delivered. Europe have tabled a Strategic EU–India Agenda that elevates the partnership across five pillars: prosperity, technology, security, connectivity and enablers. It prioritises concluding an FTA and an Investment Protection Agreement, alongside Global Gateway investments and supply-chain de-risking via the EU–India TTC (chips, solar, APIs). It deepens digital cooperation (e.g. trusted data flows, secure 5G/6G and interoperable digital public infrastructures) and expands joint R&I in AI, HPC/quantum and space. A Security and Defence Partnership with a Security of Information Agreement will underpin maritime, cyber and hybrid resilience. Delivery will be steered by an annual summit, upgraded TTC, and an EU–India Business Forum. - [Strengthening EU Economy Security]() — status: delivered. Strengthening EU Economy Security centres on faster risk assessment, shared intelligence and action to reduce dependencies in critical supply chains, technologies and infrastructure. The Commission proposes an Economic Security Information Hub, stronger coordination with Member States, an adviser group involving businesses, trade-resilience information and an expanded Observatory on Critical Technologies. It will also consider funding safeguards, foreign-investment screening guidance, dual-use export-control evaluation, trade-defence tools, customs measures, procurement preferences and restrictions on high-risk suppliers. - [Team Europe]() — status: delivered. Aligns the EU, Member States, the EIB/EBRD, agencies and the private sector to act as one, pooling finance, expertise and diplomacy for maximum impact. Born during COVID-19, it is now the default delivery model for international partnerships and Global Gateway. It coordinates over 160 Team Europe Initiatives and mobilised €179 billion in 2021–2023, underpinned by instruments such as the €40 billion EFSD+ guarantee and regular Global Gateway business fora, with governance via a Board, Business Advisory Group, and a Civil Society & Local Authorities platform. By joining up investments, reforms and standards, Team Europe scales high-standard projects worldwide and strengthens EU strategic influence. - [The Pact for the Mediterranean]() — status: delivered. The EU will forge a new pact with Southern Neighbourhood partners, building on the 2021 Agenda, with a strong digital pillar to deepen political engagement and cooperation. Priorities include secure connectivity under Global Gateway (most visibly the MEDUSA submarine cable linking the northern and southern shores and boosting regional capacity) alongside resilient cable and satellite links. Cooperation will use Trade & Technology-style dialogues, Cyber Dialogues, and association to Horizon Europe and Digital Europe, embedded in tailor-made Comprehensive and Strategic Partnerships (e.g. Tunisia, Egypt, Jordan). Work will advance trusted 5G/cable security, skills and innovation, and gradual policy harmonisation supporting integration with EU digital rules where relevant. - [White Paper for European Defence]() — status: delivered. The White Paper invites Member States to increase collaborative defence procurement and proposes fast consideration of SAFE and the European Defence Industry Programme. It calls for military support to Ukraine and greater integration of Ukraine's defence industry, mobility corridors and access to EU space-based governmental services. Further measures include a defence-industry dialogue, a Defence Omnibus Simplification proposal, an armament technology roadmap and military-mobility action. --- [Reading guide and interpretation notes]() · [Methodology]()