The European Commission has unveiled a comprehensive roadmap as part of its ProtectEU strategy, aiming to enable law enforcement access to encrypted data by 2030.

This plan specifically addresses concerns that encrypted tools, such as VPNs and messaging apps, impede police investigations, focusing on six key areas for implementation.

The six focus areas include data retention, lawful interception, digital forensics, decryption, standardization, and the use of AI solutions for law enforcement.

As part of this initiative, the EU Commission will evaluate the impact of extending data retention obligations and enhancing cooperation between service providers and authorities.

By 2027, lawmakers are aiming to improve cross-border cooperation for lawful interception of data, which is crucial for effective law enforcement.

The Commission plans to present a Technology Roadmap in 2026, emphasizing decryption solutions to equip Europol officers with advanced capabilities by 2030.

EU Commissioner Magnus Brunner has highlighted the necessity of balancing lawful access for law enforcement with the protection of privacy rights and cybersecurity.

However, privacy experts have raised concerns that efforts to enhance decryption capabilities could introduce vulnerabilities, potentially undermining overall cybersecurity.

To manage the increasing volumes of digital evidence, AI tools are expected to be utilized effectively by 2028.

Plans for standardization are underway to establish common security standards through collaboration between law enforcement and the tech industry.

This initiative is rooted in the work of the High-Level Group under the Going Dark initiative, which aims to develop a strategic plan for effective law enforcement access to data.

The roadmap identifies end-to-end encryption as a significant challenge for law enforcement, particularly targeting tools such as VPNs and encrypted messaging apps.