The EU e-Evidence Package now applies. Ensure your compliance before the first order arrives.
One package, two instruments, a single addressee
Who has to appoint a Legal Representative
Electronic communications
Providers of electronic communications services reaching users in the EU.
Domain & IP numbering
Registries, registrars, and privacy or proxy services for domain names and IP numbering.
Information society services
Cloud, SaaS, hosting, social media and marketplaces enabling communication or storing user data.
You offer services accessed by, or clearly aimed at, EU residents.
You have no EU establishment already empowered and equipped to receive judicial orders.
Non-appointment of the Legal Representative is not a paperwork oversight. It is a compliance failure.
Why you must act now: risks of non-compliance
2%
of total worldwide annual turnover — the maximum penalty for non-compliance.
Liability
Joint and several — you and your legal representative can be held liable together.
10 days / 8h
to respond to a European Production Order in standard and emergency cases, respectively.
60 days
a Preservation Order can require you to freeze data before it is requested.
Three steps to a
compliant appointment
01
Initial consultation & assessment
We review how your service is offered in the EU and confirm exactly what representation you need.
02
Official appointment
You sign a mandate agreement and complete onboarding digitally — no paperwork back-and-forth.
03
Ongoing compliance & support
Orders are received, translated where needed, and forwarded to your team, with continuous updates as the framework evolves.
e-Evidence representation is delivered by EDSR, EDPO’s specialist entity
EDSR is EDPO’s Brussels-based sister company, dedicated to e-Evidence, DSA and TCOR representation. Same group, same standards — one contract, one point of contact for orders across the EU and EEA.
Onboarding, pricing and the full FAQ are handled on edsr.eu.
Your questions, answered
- $The General Data Protection Regulation (GDPR) – EU & UK
- $The Swiss Federal Act on Data Protection (FADP)
- $The AI Act
- $The NIS2 Directive (NIS2)
- $The Data Governance Act (DGA)
- $The Digital Services Act (DSA)
The e-Evidence Package consists of Regulation (EU) 2023/1543 and Directive (EU) 2023/1544, both adopted on 12 July 2023. Together they allow judicial and law enforcement authorities in one EU Member State to directly order service providers to hand over or preserve electronic evidence. Since 18 August 2026, these orders must be executed within days or hours.
Three categories: (1) electronic communications services (internet access, messaging, telecom); (2) internet domain name and IP numbering services (registries, registrars, privacy/proxy services); (3) other information society services that enable user-to-user communication or store/process data on behalf of users (cloud, SaaS, hosting, social media, marketplaces). Financial services are explicitly excluded.
Two conditions must both be met: (1) You actively enable EU users to access your service (not just that it is technically accessible). (2) You have a substantial connection to an EU Member State through an establishment, a significant EU user base, or deliberate EU facing activities such as local language support, EU currency, or EU customer service.
Full FAQ, pricing and onboarding details are on EDSR’s e-Evidence page →