EU Plans Lawful Access to Encrypted Data by 2030
- EU unveils roadmap to enable police access to encrypted data by 2030.
- Plan includes new decryption, AI, and digital forensics tools for law enforcement.
- Privacy experts warn this may weaken encryption and introduce cybersecurity risks.
The European Commission has unveiled a roadmap under its ProtectEU strategy, aiming to ensure law enforcement can lawfully and effectively access citizens' encrypted data, potentially by 2030. The plan, introduced on June 24, 2025, stems from concerns over tools like VPNs and encrypted messaging apps impeding investigations.
The roadmap outlines six main focus areas:
- Data retention: Plans are underway to update retention laws and boost cooperation between providers and authorities.
- Lawful interception: Cross-border data interception processes are set to improve by 202.
- Digital forensics: Tools and techniques for analyzing seized digital evidence will be strengthened from 2026.
- Decryption: A technology roadmap in 2026 will explore ways to lawfully decrypt data, with Europol expected to gain “next-generation decryption capabilities” by 2030.
- Standardisation: Collaboration with law enforcement and industry will develop common security standards.
- AI tools: AI-based methods to handle large volumes of digital evidence are planned by 2028.
Privacy experts have expressed concern about the plan’s impact on encryption and security. Robin Wilton, Senior Director at the Internet Society, warned that such decryption efforts could introduce new vulnerabilities and encourage the hoarding of exploits. A coalition of 89 civil society groups also cautioned that weakening encryption would undermine cybersecurity and fundamental rights.
EU Commissioner Magnus Brunner acknowledged the need for balance, stating the commission will seek solutions that allow lawful access while respecting privacy and maintaining strong cybersecurity. Despite past setbacks, such as the stalled Chat Control proposal, lawmakers are pressing ahead with this updated roadmap under the ProtectEU banner.
As the EU moves forward, the debate continues between enhancing law enforcement capabilities and preserving encryption as a foundational security tool.










