{"id":2301,"date":"2026-04-10T08:00:00","date_gmt":"2026-04-10T07:00:00","guid":{"rendered":"https:\/\/ic-services.io\/resources\/blog\/e-evidence-vs-mlat\/"},"modified":"2026-10-21T14:21:57","modified_gmt":"2026-10-21T13:21:57","slug":"e-evidencia-vs-mlat","status":"publish","type":"post","link":"https:\/\/ic-services.io\/es\/resources\/blog\/e-evidence-vs-mlat\/","title":{"rendered":"e-Evidence vs. MLAT: Qu\u00e9 ha cambiado para los proveedores de servicios en la UE"},"content":{"rendered":"

Until now, a prosecutor in France who needed data from a provider in Germany had to use judicial cooperation: since 2017 mainly the European Investigation Order (up to 120 days), and outside the EU, mutual legal assistance (MLA\/MLAT)<\/strong>, which takes about 10 months on average according to the European Commission. These channels worked \u2014 eventually \u2014 but they were built for paper-era investigations, not for cloud-era cybercrime, ransomware, online fraud or cross-border terrorism. By the time a provider finally received a request, suspects had often disappeared and ephemeral data had been lost.<\/p>\n\n\n\n

En Reglamento sobre la prueba electr\u00f3nica (UE) 2023\/1543<\/a><\/strong>, which has applied directly since 18 de agosto de 2026<\/strong>, fundamentally changes that picture. It adds a fast, harmonised, judicial-to-provider channel alongside the slower EIO and MLA routes, which operates in days \u2014 and in emergencies, in hours. For every electronic communications, hosting, cloud, marketplace and online platform provider operating in the EU, this is the most significant shift in cross-border evidence law in a generation.<\/p>\n\n\n\n

This article explains, in practical terms, what changed between the MLAT world and the e-Evidence world, what it means operationally, and how service providers should reshape their compliance programmes now that the Regulation applies.<\/p>\n\n\n\n

El viejo mundo: c\u00f3mo funcionaban los MLAT (y por qu\u00e9 tuvieron problemas)<\/h2>\n\n\n\n

Un MLAT es un tratado bilateral o multilateral de Derecho internacional p\u00fablico que permite a un Estado solicitar cooperaci\u00f3n judicial -incluida la aportaci\u00f3n de pruebas- a otro. En la pr\u00e1ctica, una solicitud MLAT para obtener pruebas electr\u00f3nicas segu\u00eda un largo camino de varias etapas:<\/p>\n\n\n\n

    \n
  1. Un fiscal de la Estado solicitante<\/strong> redact\u00f3 una comisi\u00f3n rogatoria formal y la remiti\u00f3 a su Autoridad Central nacional (normalmente el Ministerio de Justicia).<\/li>\n
  2. The Central Authority reviewed and translated the request, then forwarded it to its counterpart Central Authority (or, under some treaties, through diplomatic channels) in the Estado requerido<\/strong>.<\/li>\n
  3. La Autoridad Central receptora transmiti\u00f3 la solicitud a un tribunal o fiscal local competente.<\/li>\n
  4. La autoridad local emiti\u00f3 una orden judicial interna contra el proveedor de servicios.<\/li>\n
  5. El proveedor produc\u00eda los datos, que luego se reenviaban a trav\u00e9s de la misma cadena en sentido inverso.<\/li>\n<\/ol>\n\n\n\n

    Cada paso a\u00f1ad\u00eda semanas o meses. Los requisitos de traducci\u00f3n y formalidad a\u00f1ad\u00edan m\u00e1s retrasos. Para cuando el proveedor solicitado recib\u00eda finalmente una orden nacional ejecutable, la investigaci\u00f3n subyacente a menudo hab\u00eda avanzado, los datos pod\u00edan haber caducado o el sospechoso hab\u00eda cruzado otra frontera. Los estudios han constatado repetidamente que la duraci\u00f3n media de los ciclos de las MLAT es de alrededor del 10 meses<\/strong>, Muchos casos se prolongan m\u00e1s de un a\u00f1o.<\/p>\n\n\n\n

    El nuevo mundo: \u00d3rdenes directas en virtud del Reglamento de la UE sobre pruebas electr\u00f3nicas<\/h2>\n\n\n\n

    El Reglamento sobre la prueba electr\u00f3nica introduce dos nuevos instrumentos: el European Production Order<\/strong> y el European Preservation Order<\/strong>, transmitted as standardised certificates (EPOC and EPOC-PR) \u2014 that judicial authorities can issue directamente a un proveedor de servicios<\/strong> in another Member State, without going through diplomatic or governmental intermediaries. Orders travel through the EU’s decentralised IT system, whose Member State access points use e-CODEX<\/strong>. Providers connect to their Member State’s national system, either manually through the web-based interface or automatically through an API based on ETSI TS 104 144.<\/p>\n\n\n\n

    Tomemos el mismo caso: un fiscal franc\u00e9s que investiga un ataque de ransomware dirigido a hospitales de la UE necesita datos de los abonados y datos de tr\u00e1fico<\/a> held by a German hosting provider. Under e-Evidence, the prosecutor has the order validated by a judge, issues a European Production Order and sends it directly to the provider’s designated establishment or legal representative; because traffic data are requested, the German enforcing authority is notified at the same time. The provider validates the order, extracts the data, and delivers it back through the decentralised IT system. Evidence larger than 25 MB, and any traffic with Member States whose national components are not yet live, goes by secure alternative means with a hash-protected manifest. El plazo est\u00e1ndar es de 10 d\u00edas. El plazo de entrega urgente es de 8 horas.<\/strong><\/p>\n\n\n\n

    e-Evidence frente a MLAT: Comparaci\u00f3n detallada<\/h2>\n\n\n\n
    Dimensi\u00f3n<\/th>MLAT<\/th>Reglamento de la UE sobre la prueba electr\u00f3nica<\/th><\/tr><\/thead>
    Base jur\u00eddica<\/strong><\/td>Tratado bilateral \/ multilateral<\/td>Reglamento de la UE, directamente aplicable<\/td><\/tr>
    Destinatario de la solicitud<\/strong><\/td>Autoridad de un Estado extranjero<\/td>Provider’s designated establishment \/ legal representative (directly)<\/td><\/tr>
    Canal de transmisi\u00f3n<\/strong><\/td>Autoridades diplom\u00e1ticas \/ centrales<\/td>EU decentralised IT system (e-CODEX-based)<\/td><\/tr>
    Plazos habituales<\/strong><\/td>MLA: ~10 months on average; EIO: up to 120 days<\/td>10 d\u00edas est\u00e1ndar \/ 8 horas de emergencia<\/td><\/tr>
    Formato<\/strong><\/td>Exhorto libre<\/td>Certificados EPOC \/ EPOC-PR normalizados<\/td><\/tr>
    Papel del proveedor<\/strong><\/td>Receptor de una orden dom\u00e9stica<\/td>Destinatario directo de la orden extranjera<\/td><\/tr>
    Sanciones a los proveedores<\/strong><\/td>Derecho interno del Estado requerido<\/td>Pecuniary penalties of up to 2% of total worldwide annual turnover of the preceding financial year<\/td><\/tr>
    Conservaci\u00f3n de datos<\/strong><\/td>Ad hoc, dependiente de la jurisdicci\u00f3n<\/td>EPOC-PR armonizado (60 + 30 d\u00edas)<\/td><\/tr>
    \u00c1mbito geogr\u00e1fico<\/strong><\/td>S\u00f3lo de Estado a Estado<\/td>Providers offering services in the EU (substantial connection); all Member States except Denmark<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Lo que no cambia y lo que sigue siendo importante para los MLAT<\/h2>\n\n\n\n

    El Reglamento sobre la prueba electr\u00f3nica no suprime los MLAT. Siguen siendo el principal mecanismo para las solicitudes de pruebas que implican a pa\u00edses no pertenecientes a la UE, y contin\u00faan aplic\u00e1ndose en muchas situaciones de la justicia penal fuera del \u00e1mbito de aplicaci\u00f3n del Reglamento. Dentro de la UE, los fiscales tambi\u00e9n pueden seguir recurriendo a la Orden Europea de Investigaci\u00f3n (OEI) en virtud de la Directiva 2014\/41\/UE para medidas de investigaci\u00f3n m\u00e1s amplias. El Reglamento sobre la prueba electr\u00f3nica se entiende mejor como un instrumento especializado y m\u00e1s r\u00e1pido<\/strong> para una necesidad espec\u00edfica -la producci\u00f3n y conservaci\u00f3n de pruebas electr\u00f3nicas- superpuesta al conjunto de herramientas existente.<\/p>\n\n\n\n

    Para los proveedores de servicios de fuera de la UE, el efecto pr\u00e1ctico es que las solicitudes de las autoridades de la UE llegar\u00e1n cada vez m\u00e1s a trav\u00e9s de e-Evidence en lugar de MLAT - siempre que el proveedor ofrezca servicios en la UE y tenga, o nombre, un representante legal en un Estado miembro.<\/p>\n\n\n\n

    Qu\u00e9 significa esto para los proveedores de servicios en la pr\u00e1ctica<\/h2>\n\n\n\n

    Switching from a months-long cooperation process (about 10 months for MLA, up to 120 days for an EIO) to a 10-day (or 8-hour) direct process is not just faster \u2014 it is a different operating model. Compliance can no longer be a quarterly side-task handled by a single privacy lawyer. It has to be embedded into engineering, security operations and customer support. The implications fall into four broad areas.<\/p>\n\n\n\n

    1. Recepci\u00f3n y validaci\u00f3n automatizadas de pedidos<\/h3>\n\n\n\n

    Manual mailbox-based intake will not scale. You need an authenticated connection to your Member State’s national system (via the web-based interface or an API based on ETSI TS 104 144) and an intake process that can receive, time-stamp, validate signatures, check issuing-authority credentials and route orders to the right responders. Solutions such as the ICS Plataforma de conformidad e-Evidence<\/a> se fabrican precisamente para este flujo de trabajo, pero los proveedores tambi\u00e9n pueden fabricarlas ellos mismos si disponen de la capacidad de ingenier\u00eda necesaria.<\/p>\n\n\n\n

    2. Extracci\u00f3n de datos normalizada en todos los sistemas<\/h3>\n\n\n\n

    The Regulation distinguishes between subscriber, identification, traffic and content data, each with different thresholds. Your data inventory must map each system to the categories of data it holds, and your extraction tooling must deliver results through the decentralised IT system (web interface or the API based on ETSI TS 104 144) or, where that is not possible, by secure alternative means, always with integrity protection and in formats the issuing authority can process.<\/p>\n\n\n\n

    3. Disponibilidad operativa 24\/7<\/h3>\n\n\n\n

    La ventana de emergencia de 8 horas se aplica a cualquier hora del d\u00eda, cualquier d\u00eda del a\u00f1o. Para ello, es necesario contar con personal jur\u00eddico y t\u00e9cnico de guardia, manuales de funcionamiento, v\u00edas de escalada y ejercicios de simulaci\u00f3n ensayados. Para las organizaciones que no pueden mantener esa huella internamente, un Legal Representative service<\/a><\/strong> (for providers outside the EU), combined with managed operations, is increasingly the pragmatic answer.<\/p>\n\n\n\n

    4. Pistas de auditor\u00eda a prueba de manipulaciones<\/h3>\n\n\n\n

    Cada acci\u00f3n -recepci\u00f3n, validaci\u00f3n, encaminamiento interno, extracci\u00f3n, revisi\u00f3n y entrega- debe plasmarse en una pista de auditor\u00eda lo suficientemente s\u00f3lida como para ser admitida como prueba y demostrar, a posteriori, que se han respetado los plazos, la minimizaci\u00f3n y el alcance espec\u00edfico del pedido.<\/p>\n\n\n\n

    Sanciones: Por qu\u00e9 desaparece la holgura de la era MLAT<\/h2>\n\n\n\n

    Under MLAT, friction in the system was tolerated because everyone \u2014 investigators, providers, courts \u2014 knew it was slow. The e-Evidence Regulation has no such slack. Member States are required to impose effective, proportionate and dissuasive penalties, with pecuniary penalties of up to 2% of the provider’s total worldwide annual turnover of the preceding financial year<\/strong>, imposed by the enforcing authority. Repeated or systemic failures can also trigger court orders, regulatory action by national competent authorities and serious reputational damage with enterprise customers and regulators.<\/p>\n\n\n\n

    Interacci\u00f3n con el GDPR, el NIS2 y la Ley de Servicios Digitales<\/h2>\n\n\n\n

    e-Evidence does not override the GDPR. Disclosures must remain lawful, minimised and properly logged in records of processing. Where the provider is in scope of the NIS2 Directive, security controls and incident handling must also align with it, and intermediary service providers<\/a> (other than micro and small enterprises) must report orders received from Member State authorities in their DSA transparency reports. A modern compliance programme treats these regimes as overlapping rather than competing \u2014 the same intake, audit and minimisation infrastructure can serve all of them.<\/p>\n\n\n\n

    Preguntas frecuentes<\/h2>\n\n\n\n

    Para m\u00e1s informaci\u00f3n, consulte nuestra secci\u00f3n e-Evidencia FAQ<\/a>.<\/p>\n\n\n\n

    \u00bfSustituye el Reglamento de la UE sobre pruebas electr\u00f3nicas a los MLAT?<\/h3>\n\n\n\n

    No. Los complementa. Los MLAT siguen en vigor, sobre todo para la cooperaci\u00f3n con pa\u00edses no pertenecientes a la UE. Dentro de la UE, e-Evidence ofrece un canal m\u00e1s r\u00e1pido y especializado para la producci\u00f3n y conservaci\u00f3n de pruebas electr\u00f3nicas.<\/p>\n\n\n\n

    \u00bfPuede realmente un fiscal de un Estado miembro pedir datos directamente a un proveedor de otro?<\/h3>\n\n\n\n

    Yes. That is the central innovation of the Regulation. Subject to the safeguards and grounds for refusal in the Regulation, a competent judicial authority issues a European Production Order that the provider must execute directly, without first going through the authorities of the receiving State. For traffic and content data, that State’s enforcing authority is notified in parallel and has 10 days (96 hours in emergencies) to raise a ground for refusal.<\/p>\n\n\n\n

    \u00bfSe aplica e-Evidence a los proveedores de fuera de la UE?<\/h3>\n\n\n\n

    Yes \u2014 any provider offering services in the EU (with a substantial connection, such as a significant number of EU users or targeting EU markets) is in scope and must appoint a legal representative in a Member State where it offers services to receive and act on orders.<\/p>\n\n\n\n

    \u00bfQu\u00e9 ocurre si mi organizaci\u00f3n no puede cumplir el plazo de 8 horas?<\/h3>\n\n\n\n

    Missed deadlines can lead to enforcement by the competent authority of the enforcing State, including fines of up to 2% of global annual turnover. If you cannot meet a deadline, report the reasons on the Annex III form before the deadline expires. Documented, proportionate efforts are your main mitigation.<\/p>\n\n\n\n

    Del cumplimiento de la era MLAT a las operaciones preparadas para las pruebas electr\u00f3nicas<\/h2>\n\n\n\n

    El paso de MLAT a e-Evidence es, en el fondo, un paso de ocasional, lento, con papel<\/em> cooperaci\u00f3n para continuo, r\u00e1pido, basado en software<\/em> cooperation. Service providers that thrived under the MLAT model \u2014 relying on legacy email queues and ad-hoc legal review \u2014 are already struggling now that the Regulation applies. Those that invest now in Operaciones de cumplimiento de la normativa preparadas para e-Evidence<\/a> no s\u00f3lo evitar\u00e1n sanciones, sino que convertir\u00e1n la preparaci\u00f3n para la aplicaci\u00f3n de la ley en una se\u00f1al de confianza para los clientes empresariales y los reguladores.<\/p>\n\n\n\n

    Si desea una evaluaci\u00f3n independiente de su grado de preparaci\u00f3n, ICS le ofrece una completa Evaluaci\u00f3n del cumplimiento de e-Evidence<\/a><\/strong> covering legal scope, technical infrastructure and operational processes \u2014 together with a clear roadmap to close any gaps now that the Regulation applies. P\u00f3ngase en contacto hoy mismo con ICS<\/strong><\/a> para programar la suya.<\/p>","protected":false},"excerpt":{"rendered":"

    Until now, a prosecutor in France who needed data from a provider in Germany had to use judicial cooperation: since […]<\/p>\n","protected":false},"author":7,"featured_media":2556,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2301","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-buyers-guides-comparisons"],"uagb_featured_image_src":{"full":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat.jpg",1600,2133,false],"thumbnail":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-150x150.jpg",150,150,true],"medium":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-225x300.jpg",225,300,true],"medium_large":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-768x1024.jpg",768,1024,true],"large":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-768x1024.jpg",768,1024,true],"1536x1536":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-1152x1536.jpg",1152,1536,true],"2048x2048":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-1536x2048.jpg",1536,2048,true],"trp-custom-language-flag":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/09\/e-evidence-vs-mlat-9x12.jpg",9,12,true]},"uagb_author_info":{"display_name":"David Son","author_link":"https:\/\/ic-services.io\/es\/author\/david\/"},"uagb_comment_info":0,"uagb_excerpt":"Until now, a prosecutor in France who needed data from a provider in Germany had to use judicial cooperation: since […]","_links":{"self":[{"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/posts\/2301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/comments?post=2301"}],"version-history":[{"count":6,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/posts\/2301\/revisions"}],"predecessor-version":[{"id":2740,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/posts\/2301\/revisions\/2740"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/media\/2556"}],"wp:attachment":[{"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/media?parent=2301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/categories?post=2301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ic-services.io\/es\/wp-json\/wp\/v2\/tags?post=2301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}