OTT lawful interception is rapidly becoming one of the most critical compliance challenges for communication service providers in Europe. As hundreds of millions of users shift their daily conversations from traditional phone calls and SMS to over-the-top platforms like WhatsApp, Microsoft Teams, Telegram, and Signal, law enforcement agencies face a widening gap in their ability to conduct legally authorized surveillance. The EECC (2018) brought OTT messaging into the definition of electronic communications services. Some member states have used it to extend national interception laws to these services, often with ETSI TS 103 707 as the handover format, but the technical and legal complexity of OTT lawful interception remains significant.<\/p>\n\n\n\n
For decades, lawful interception obligations focused on telecom operators providing voice, SMS, e-mail and internet access over circuit-switched and packet-switched networks. These operators maintained full control over the communication infrastructure and could implement standardized interfaces de transfert<\/a> de transmettre les contenus et les m\u00e9tadonn\u00e9es intercept\u00e9s aux services charg\u00e9s de l\u2019application de la loi. Cependant, l\u2019essor des services de messagerie et de t\u00e9l\u00e9phonie OTT a profond\u00e9ment boulevers\u00e9 ce mod\u00e8le. Des plateformes telles que WhatsApp, Telegram, Microsoft Teams et Signal traitent d\u00e9sormais des milliards de messages et d\u2019appels chaque jour \u00e0 travers l\u2019Europe, mais bon nombre de ces services ont, par le pass\u00e9, fonctionn\u00e9 en dehors du champ d\u2019application de la r\u00e9glementation des t\u00e9l\u00e9communications. Cela signifie que les forces de l\u2019ordre, m\u00eame lorsqu\u2019elles sont munies de mandats judiciaires valides, ne peuvent souvent pas acc\u00e9der aux communications qui ont migr\u00e9 vers ces plateformes.<\/p>\n\n\n\n Le Code europ\u00e9en des communications \u00e9lectroniques (Directive europ\u00e9enne 2018\/1972<\/a>)<\/strong> repr\u00e9sente un changement r\u00e9glementaire historique qui a un impact direct sur l'interception l\u00e9gale des OTT. L'EECC a \u00e9largi la d\u00e9finition des services de communication \u00e9lectronique (SCE), passant d'une d\u00e9finition purement technique bas\u00e9e sur la transmission de signaux \u00e0 une approche fonctionnelle qui englobe tout service permettant une communication interpersonnelle. Cela signifie que les services OTT entrent d\u00e9sormais dans le champ d'application de la r\u00e9glementation, en \u00e9tant class\u00e9s dans l'une ou l'autre des cat\u00e9gories suivantes services de communication interpersonnelle bas\u00e9s sur le num\u00e9ro (NB-ICS)<\/strong> ou services de communication interpersonnelle ind\u00e9pendants du num\u00e9ro (NI-ICS)<\/strong>. Number-based services that connect to the public telephone network, such as VoIP calling plans with phone numbers, fall under the general authorisation regime. Member states can attach lawful-interception conditions to it and apply their own data-retention rules. Number-independent services like WhatsApp, Telegram, and Signal face a lighter framework: the EECC does not attach lawful-interception conditions to them. Member states can still impose such duties through national law, and several do.<\/p>\n\n\n\n According to Cullen International (July 2025), fewer than half of the 27 EU member states require OTT providers like WhatsApp to enable lawful interception. This fragmented implementation creates significant challenges for both service providers and law enforcement. Germany, for example, applies its interception rules (\u00a7 170 TKG, TK\u00dcV) to number-independent messaging services with more than 100,000 users, with a dedicated technical annex in the BNetzA’s TR TK\u00dcV, while other countries maintain a lighter regulatory touch. As more member states extend their national interception laws to messaging services, OTT providers operating across multiple EU countries face an increasingly complex web of country-specific compliance requirements. Each jurisdiction may impose different technical standards, retention periods, and handover procedures, making pan-European compliance a daunting task for any single provider.<\/p>\n\n\n\n Relever les d\u00e9fis techniques de l'interception l\u00e9gale OTT, ETSI<\/strong> (Institut europ\u00e9en des normes de t\u00e9l\u00e9communications) a d\u00e9velopp\u00e9 ETSI TS 103 707<\/strong>, ‘Lawful Interception (LI); Handover Interface for HTTP delivery’ (originally ‘Handover for messaging services over HTTP\/XML’). This standard provides a generic HTTP\/XML handover for lawful interception and lawful disclosure, designed in particular for messaging services, including instant messaging, group chats, multimedia messages, and file transfers. ETSI TS 103 707 defines how intercepted messages are delivered from OTT messaging platforms to installations de surveillance des forces de l'ordre<\/a> (LEMFs). The standard has been continuously updated since its initial release in 2020, with version 1.11.1 published in August 2025, reflecting the rapidly evolving nature of OTT communication technologies. ETSI TS 103 707 delivers each intercepted message as an XML handover item: sender, receivers and timestamp as standard fields, attachments (images, voice notes, files) as binary data, and service-specific details such as group events as provider-defined fields. Real-time voice and video calls are out of its scope and use other handovers such as ETSI TS 102 232-5. It reuses the ETSI TS 103 120 message and delivery framework, which is also used for electronic warrants (HI-1).<\/p>\n\n\n\n L'un des aspects les plus controvers\u00e9s de l'interception l\u00e9gale des OTT est chiffrement de bout en bout (E2EE)<\/strong>. Services like WhatsApp, Signal, and Telegram (in secret chats) employ E2EE, which means that even the service provider cannot access the plaintext content of communications. This creates a fundamental tension between privacy rights and lawful interception capabilities. Law enforcement agencies argue that E2EE creates safe havens for criminal communication, while privacy advocates and technology companies maintain that any backdoor or lawful access mechanism would weaken security for all users. The EU debate continues: the Council dropped mandatory scanning from the child-abuse regulation in 2025, and the Commission’s 2025 roadmap on lawful access to data plans an encryption technology roadmap. No EU law requires providers to decrypt end-to-end encrypted messages. Regardless of how the encryption debate resolves, the metadata and communication patterns available through OTT lawful interception under ETSI TS 103 707 provide significant intelligence value to law enforcement, even when content encryption is maintained.<\/p>\n\n\n\n Implementing OTT lawful interception is far more complex than traditional telecom interception for several reasons. First, OTT interception has to be built into the provider’s own platform, because network operators carrying the encrypted traffic cannot see its content. Second, many OTT providers have no physical presence in the EU countries where their users reside, creating jurisdictional challenges for enforcement. Third, the diversity of OTT communication protocols and architectures means there is no single interception approach that works across all platforms. Fourth, the volume and variety of content types (text, voice, video, files, location data, status updates) far exceeds what traditional telephony interception systems were designed to handle. Fifth, OTT services frequently update their protocols, encryption methods, and server infrastructure, requiring interception systems to be continuously adapted. These complexities demand specialized expertise and flexible, multi-protocol interception platforms that can adapt to the evolving OTT landscape while maintaining compliance with ETSI standards.<\/p>\n\n\n\n As an LI managed-service provider operating in several European countries, ICS (Services de transport international)<\/a> helps communication service providers and OTT platforms meet their lawful interception obligations across multiple EU jurisdictions. ICS helps OTT and messaging providers implement ETSI-based solutions d'interception l\u00e9gale<\/a>, including ETSI TS 103 707, and meet national requirements such as Germany’s TR TK\u00dcV, enabling providers to deliver intercepted messaging content and metadata to law enforcement agencies through standardized handover interfaces. Whether you are a global messaging platform entering the European market, a telecom operator offering bundled OTT services, or a number-independent communication provider subject to national interception duties, ICS fournit des solutions compl\u00e8tes en mati\u00e8re d'interception l\u00e9gale<\/a> that cover the compliance lifecycle from int\u00e9gration de syst\u00e8mes<\/a> and testing to ongoing operations.<\/p>\n\n\n\n Where member states extend their national interception laws to messaging services, they typically use ETSI TS 103 707 or ETSI TS 102 232-2 for messages, and ETSI TS 102 232-5 for calls, as national rules allow (in Germany, TR TK\u00dcV Annex I). Providers subject to national interception duties who delay compliance risk regulatory penalties, service restrictions, and reputational damage. Contact ICS to discuss how our lawful interception services can help your OTT communication platform meet the regulatory requirements that apply to it efficiently, securely, and cost-effectively.<\/p>\n\n\n\n Pour en savoir plus sur des sujets connexes, consultez les articles suivants :<\/p>\n\n\n\n Les ressources externes suivantes fournissent un contexte suppl\u00e9mentaire et une documentation officielle :<\/p>\n\n\n\nDirective europ\u00e9enne 2018\/1972 EECC : les services OTT sous r\u00e9glementation<\/h4>\n\n\n\n
Mise en \u0153uvre nationale : Un paysage fragment\u00e9<\/h4>\n\n\n\n
ETSI TS 103 707 : La norme technique pour l'interception l\u00e9gale OTT<\/h4>\n\n\n\n
Chiffrement de bout en bout : L'\u00e9l\u00e9phant dans la pi\u00e8ce<\/h4>\n\n\n\n
Pourquoi l'interception l\u00e9gale OTT est techniquement complexe<\/h4>\n\n\n\n
ICS: Your Partner for OTT Lawful Interception in Europe<\/h4>\n\n\n\n
Se pr\u00e9parer d\u00e8s maintenant \u00e0 la mise en conformit\u00e9 avec les r\u00e8gles d'interception l\u00e9gale de l'OTT<\/h4>\n\n\n\n
Articles connexes<\/h2>\n\n\n\n
Ressources externes<\/h2>\n\n\n\n