In our article, ‘The future of data driven investigations in light of the Sky ECC operation’, we examine whether or not, and on what terms, there is a future for data driven criminal investigations.  To answer the research question, we identified the main characteristics and legal criteria for data driven investigations. We use the Sky…

In the EncroChat operation, French law enforcement authorities collected over 120 million messages from 60.000 EncroChat users. They cooperated with Dutch law enforcement authorities and Europol in a Joint Investigation Team (JIT). In the Netherlands, EncroChat data has already been used in over 200 criminal cases. In this blog, we explain how the right to…

On 10 September 2020, ransomware infected 30 servers at University Hospital Düsseldorf, crashing systems and forcing the hospital to turn away emergency patients. As a result, German authorities stated, a woman in a life-threatening condition was sent to a hospital 20 miles away in Wuppertal and died from treatment delays. On 28 September, another alarming news article stated that ‘a…

On 10 October 2018, ‘Convention 108’ of the Council of Europe regarding the ‘automatic processing of personal data’ (1985) was updated. Convention 108+ now explicitly incorporates the processing of personal data in a national security context. The Netherlands signed Convention 108+ on 10 October 2018 and is now in the ratification process. Surprisingly, Convention 108+ did not gain much…