The e-Evidence Package: Ireland’s Strategic Leadership Role in a Changing Justice Landscape

As crime becomes increasingly digital and more complex, Europe is reshaping how member states cooperate to protect victims, uphold rights and bring offenders to justice. Accessing data across borders at times can mean delay, complexity and legal uncertainty. Criminal investigations that need to keep pace and move at internet-speed have been entangled in 20th-century procedures.

Across Europe, investigations increasingly rely on digital evidence – the European Commission reported that 85% of criminal cases now involve electronic evidence, and in 65% of those cases, the data is held in another member state – meaning investigators must submit a cross-border request to access what is often crucial information.

The challenge for modern EU justice systems is clear: how to secure fast lawful access to digital evidence while safeguarding privacy and fundamental rights. Achieving this balance – can make the difference between justice served and justice denied.

Ireland now finds itself at the centre of this change as the country is home to hundreds of global and EU digital service providers – it is a strategic gateway for Europe’s digital justice system.

In relation to this, Ireland’s Minister for Justice, Home Affairs and Migration, Jim O’Callaghan said: “The e-Evidence package is more than a piece of legislation, it is a demonstration of how democracies can adapt to the digital age and it challenges us to uphold justice across borders, to protect privacy while ensuring accountability, and to delivery security without sacrificing freedom.”

A Transformative Moment

On 18 August 2026, the EU’s e-Evidence Package will become fully operational. This landmark reform creates a single, standardised system allowing law enforcement in one EU member state to request digital evidence directly from service providers operating in another member state.

This new system replaces older, slower pre-digital mutual legal assistance channels. Instead of waiting months for information, authorities will work to strict EU-wide deadlines which include:

10 days for standard requests
Eight hours for emergency cases

For victims – including those affected by organised crime, child exploitation, violence, coercion, or abuse – these timelines matter. A delay can mean lost evidence, further harm or missed opportunities to prevent crime. Speed, when paired with the right legal safeguards, can save lives.

As a global digital hub, Ireland has both the responsibility and the opportunity to set the standard for how Europe balances safety, accountability and civil liberties in the digital age.

Ireland is expected to receive a substantial number of requests with some reports estimating hundreds of thousands of production orders each year, involving more than 600 designated service providers. Ireland’s ‘hub’ status will require a strong domestic framework with clear processes and properly resourced teams.

To deliver this, the Government established the Criminal Justice International Cooperation Office (CJICO). This new national authority will:

Receive, transmit and enforce European Production Orders (EPOC) and European Preservation Orders (EPOC-PR)
Ensure service providers have the resources needed to process requests
Impose penalties for failure to comply
Raise concerns if an order appears to breach rights, legal protections or immunities

For law enforcement, it means faster, clearer, and legally secure access to the evidence required to tackle serious crime.

For service providers, it means consistency, proportionality, and a single point of contact.

For citizens, it means confidence that their data and rights are protected, as we boost our capability to fight crime in the digital age.

This is not just an administrative function. It is a crucial safeguard for privacy, due process and the proper functioning of Europe’s justice system.

So why does this matter?

Crime as a Human Rights Violation – The Dwyer Judgment

The murder of Elaine O’Hara by Graham Dwyer in 2012 provides one of the strongest examples of why digital evidence is vital in modern investigations.

The Graham Dwyer litigation became one of the most consequential cases for digital-era criminal justice in Europe. His challenge to the use of mobile phone metadata – central to his 2015 murder conviction – led courts to examine Ireland’s data-retention laws considering EU fundamental rights protections.

In 2022, the Court of Justice of the European Union (CJEU) ruled that Ireland’s system of general and indiscriminate retention of mobile phone traffic and location data breached EU law, as such retention represented a disproportionate interference with privacy and data-protection rights under the EU Charter. The CJEU emphasised that EU law “precludes the general and indiscriminate retention” of such data and highlighted that even the fight against serious crime cannot justify broad, population-wide metadata retention practices.

The Dwyer ruling therefore triggered a dual legislative overhaul:

In Ireland, lawmakers were required to revise national legislation to meet EU fundamental-rights standards.
Across the EU, Member States had to reassess—and in many cases scale back—wide-reaching data-retention laws that survived despite the earlier collapse of the Data Retention Directive.

Mr. Justice Peter Charleton in Dwyer’s supreme court judgement sounded an alarm when he said: “Experience puts this following proposition beyond any doubt: without the secure retention of metadata and the potential to access and analyse it for strictly limited purposes related criminal investigation, the most serious crime against life and limb would remain undetected… leaving victims and families without justice”.

He spoke to Article 47 of the EU Charter of Fundamental Rights, which guarantees everyone the right to an effective remedy before a court. If investigators are denied essential evidence, victims are denied this right. Justice Charleton warned that excluding reliable digital evidence would distort the legal process and weaken society’s ability to deter crime.

This case significantly shaped Europe’s journey toward modern, rights-compliant digital evidence systems –and remains a key backdrop to the forthcoming EU e-Evidence Regulation entering into force in August 2026.

Ireland’s Upcoming EU Presidency: A Leadership Opportunity

Ireland will assume the Presidency of the Council of the European Union from 1 July to 3 December 2026 — just as the e-Evidence Regulation takes full effect. This places Ireland in a unique leadership position and can use its Presidency to:

Guide member states in interpreting and implementing the new system
Promote best-practice approaches to digital justice
Ensure victims’ rights, privacy and data protection remain central
Strengthen cooperation and trust between governments, regulators and service providers

What Service Providers must do now?

With the new regime only months away, service providers – large and small, EU-based or global with users in the EU – must act before 18 August 2026. Five key steps are essential:

Appoint a “Designated Establishment” or Legal Representative

Service providers offering services in the EU must appoint a ‘designated establishment’ or ‘legal representative’ who will be responsible for receiving and responding to requests from law enforcement authorities for electronic evidence.

Prepare for Extremely Tight Deadlines

Providers must be capable of responding to requests within:

10 days (standard)
Eight hours (emergency)

This requires 24/7 operational readiness and trained staff.

Strengthen Order-Review and Compliance Processes

Providers must verify the legality of each order, confirm data categories, ensure GDPR compliance and document decisions clearly and securely.

Upgrade Data Preservation and Retrieval Systems

Data linked to a preservation order must be safeguarded for 60 days, extendable to 90 days, and must be retrievable at speed – even in complex, decentralised architectures.

Prepare for Penalties and Cross-Border Enforcement

Failure to comply can result in significant fines, up to 2% of global turnover and reputational damage. Internal assessments, process testing and legal readiness are essential.

Companies that have obligations under the e-Evidence Regulation can now find out how you register the designated entity – here is the link provided by the Department of Justice on how to register: https://lnkd.in/eRg3GZSi

Ireland Isn’t Just a Hub, It Is Now the Heart of Europe’s Digital Justice System

As the e-Evidence Package comes into force, Ireland sits at a pivotal intersection: the crossroads of cross-border cooperation and human rights protection. The country is not only at the centre of Europe’s evidence flows — it is now at the core of Europe’s digital rights and justice framework.

Author: Maureen King, Founder & CEO of iTrust 6A™, Executive MBA Alumni