The Encrochat operation is an example of the technological,  cross-border, and cross-disciplinary complexity of contemporary digital investigations. The use of encryption for large-scale criminal activity and organized crime requires law enforcement to act pro-actively to secure evidence, to rely on cross-border evidence exchange, and to use more efficient digital forensic techniques for decryption, data acquisition, and analysis of volumized evidence. The Encrochat investigation also poses the question whether the traditional fair trial principle can still ensure minimum state intrusion and upholding of legitimacy in the new ubiquitous investigation process, where digital forensics methods and tools for hacking and data acquisition are used to identify and arrest thousands of suspects and collect evidence in real-time during criminal activity. The operation is examined through the lens of the right to a fair trial, as codified in Art. 6 ECHR, in order to exemplify three challenging aspects. Firstly, in cross-border investigations there are no binding digital forensics standards in criminal proceedings or forensic reports exchange policy which demands reliability and compliance with Art. 6 ECHR-based evidence rules. Secondly, the defense’s stand is not sufficiently addressed in current digital evidence legislation or mutual trust-based instruments at the EU level. Finally, the judicial process lacks scalable procedures to scrutinize digital evidence processing and reliability and is exposed to technology dependences. The identified gaps and their practical impact require a novel approach to digital evidence governance.

Radina (Adi) Stoykova holds a dual PhD in law and information security from University of Groningen and the Norwegian University of Science and Technology and an LL.M in Technology law from Leibniz University Hannover. She is specializing in cybersecurity and cybercrime regulation, reliability of digital evidence, digital forensics standardization, and the impact of new technology on human rights in the criminal justice system. Adi was involved in research projects in the Norwegian police, and worked with digital forensics teams in Norway, Italy, and the Netherlands. She is a lecturer at the Norwegian Police University College and a member of the Cybercrime and Forensic Computing, Research Training Group 2475, Friedrich-Alexander-University Erlangen, Germany. Her research currently focuses on reliability of AI-generated evidence. ORCID: https://orcid.org/0000-0003-1399-3315; e-mail: r.stoykova@rug.nl 

More information: https://www.rug.nl/staff/r.stoykova/