Encryption lawsEuropean Union
The EU roadmap for lawful access to encrypted data
On 24 June 2025 the European Commission set out a roadmap for police access to data. It promises a Technology Roadmap on encryption to find "solutions that enable lawful access to encrypted data". It is a plan, not a law.1
Checked 28 October 2026 against the sources. This page describes EU policy. It is not legal advice.
The six areas
The roadmap is a deliverable of ProtectEU, the internal security strategy the Commission presented in April 2025.1
| Area | What the Commission said it will do | When |
|---|---|---|
| Decryption | Present a Technology Roadmap on encryption "to identify and evaluate solutions that enable lawful access to encrypted data by law enforcement, while safeguarding cybersecurity and fundamental rights"1 | 2026 |
| Decryption | Support new decryption technologies to give Europol "a next generation decryption capability"1 | From 2030 |
| Data retention | An impact assessment with a view to updating the EU's data retention rules1 | 2025 |
| Lawful interception | Explore measures to improve cross-border cooperation on lawful interception1 | By 2027 |
| Digital forensics | A gap and needs analysis with Europol, and EU funding for forensic tools1 | From 2026 |
| Standardisation | An EU approach to standards for internal security, including lawful disclosure and interception1 | Not dated |
| AI tools | AI tools to help authorities process large volumes of seized data1 | By 2028 |
Where it stands
As of 28 October 2026, the Commission's encryption page still says the Commission "will prepare a Technology Roadmap on encryption", and we found no published Technology Roadmap.2
An expert group is to support that work, with members from "law enforcement, cybersecurity, encryption, communication technologies, standardisation and fundamental rights", delivering "its conclusions by 2026". The same page says the Commission will support decryption research so Europol is "well equipped after 2030", citing developments such as quantum computing.2
The roadmap itself requires nothing of any company. Any binding rule would need a separate legislative proposal.
Questions people ask
Is the EU banning end-to-end encryption?
No EU law does. The roadmap commits the Commission to study "solutions" for lawful access to encrypted data, while "safeguarding cybersecurity and fundamental rights".1
Has the Technology Roadmap on encryption been published?
We found none as of 28 October 2026. The Commission's page still describes it as work to come.2
Sources 2
- Commission presents roadmap for effective and lawful access to data for law enforcement, 24 June 2025, European Commission, Directorate-General for Migration and Home Affairs. Read 28 October 2026.
- Encryption, European Commission, Directorate-General for Migration and Home Affairs. Read 28 October 2026.
We read the law itself, and every status has a date. How we check