On 25 October 2025, the European Commission signed the United Nations Convention against Cybercrime on behalf of the European Union. The Convention aims to strengthen international cooperation in addressing specific crimes committed through information and communications technology systems and to facilitate the exchange of electronic evidence relating to serious crimes. It applies to criminal investigations and proceedings concerning offences established under its provisions, harmonising a limited set of offences and establishing minimum rules on the liability of legal persons while allowing flexibility consistent with domestic legal principles. The Convention criminalises acts such as child sexual abuse, online fraud, and ransomware attacks, and includes measures for extradition, mutual legal assistance, and the exchange of electronic evidence. It contains safeguards ensuring judicial or independent review, the right to an effective remedy, and proportionality in investigative powers, as well as a personal data protection article requiring adherence to principles of purpose limitation, data minimisation, necessity, and proportionality.
Original source