From admissibility to contestability: Structural opacity, encrypted-platform evidence, and the limits of adversarial review
Autor/i: Janko Munjić,
Stranice: 83-102
UDK: 004.6:343.13(4–6EU)
DOI: https://doi.org/10.47152/rkkp.64.1.5
Apstrakt: Digital evidence from encrypted platforms such as EncroChat and Sky ECC is increasingly treated as formally admissible across multiple jurisdictions, yet core questions of provenance, integrity, and attribution remain structurally resistant to adversarial testing. Existing scholarship has mapped the doctrinal and cooperation routes through which such datasets enter domestic proceedings, but has not sufficiently operationalised the conditions under which they remain genuinely contestable once admitted. This paper addresses that gap through a doctrinal analysis of selected EU, ECtHR, and domestic case law, combined with a normative analysis of Serbian criminal procedure and recent regional scholarship on digital evidence. It argues that structural opacity is sustained by cross-border procedural architecture, confidentiality constraints, and restrained legality review under mutual recognition, and that formal admissibility cannot by itself secure fair evidential use where the defence cannot test method-relevant premises. The paper makes three original contributions. First, it proposes a minimal contestability test structured around provenance, integrity, and attribution, together with a staged verification package designed to function under persistent secrecy. Second, it develops a tiered remedial model linking failed contestability to calibrated procedural consequences, from reduced weight and mandatory corroboration to exclusion where the material is sole or decisive. Third, it maps contestability onto the Serbian Criminal Procedure Code and shows how existing procedural levers can operationalise the framework without legislative change. The paper further argues that the EU AI Act is relevant only as an external traceability benchmark for algorithmically processed investigative outputs, but not as a direct source of evidentiary law.
Ključne reči: encrypted-platform evidence, contestability, opacity, EncroChat, Sky ECC, adversarial principle, EU AI Act
Reference:
Appellate Court in Kragujevac, Kž2-402/22, 7 July 2022.
Appellate Court in Kragujevac, Kž2-434/22, 19 July 2022.
Appellate Court in Kragujevac, Kž2-467/22, 19 July 2022.
Appellate Court in Kragujevac, Kž-Kre 11/2023, 29 May 2023.
Appellate Court in Kragujevac, Kž2-48/23, 24 January 2023.
Appellate Court in Kragujevac, Kž2-465/23, 22 August 2023.
Appellate Court in Kragujevac, Kž2Po1-7/23, 7 April 2023.
Bajović, V. and Ćorić, V. (2025) 'EncroChat and Sky ECC data as evidence in criminal proceedings in light of the CJEU decision', European Journal of Crime, Criminal Law and Criminal Justice, 33. https://doi.org/10.1163/15718174-bja10062
Bundesgerichtshof (BGH). (2022). Beschluss vom 2. März 2022, 5 StR 457/21 (EncroChat).
Clarifying Lawful Overseas Use of Data Act (CLOUD Act) (2018) Division V of the Consolidated Appropriations Act, 2018, Pub. L. No. 115-141, 132 Stat. 348, 23 March 2018.
Council of Europe (2024) Framework Convention on Artificial Intelligence, Human Rights, Democracy and the Rule of Law (CETS No. 225).
Council of Europe (2022) Second Additional Protocol to the Convention on Cybercrime on enhanced co-operation and disclosure of electronic evidence (CETS No. 224).
Cour de cassation (2025). Challenging the regularity of measures carried out within the national territory pursuant to a European Investigation Order (Ruling 24.84.262). Criminal Chamber, 16 September 2025. Available at: https://www.courdecassation.fr/toutes-les-actualites/2025/09/16/challenging-regularity-measures-carried-out-within-national (Accessed: 27 December 2025)
Court of Appeal of England and Wales, A, B, D & C v R [2021] EWCA Crim 128.
Court of Justice of the European Union (Grand Chamber) (2024) Criminal proceedings against M.N. (EncroChat), Case C-670/22, Judgment of 30 April 2024.
Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for law enforcement purposes, OJ L 119, 04 May 2016.
Elola-Calderón, T. (2024) 'L’argot de la drogue dans le procès SKY ECC en Belgique. Quels défis pour l’interprète français-espagnol?', Traduire, 251, pp. 14-23. Available at: https://journals.openedition.org/traduire/4302 (Accessed: 12 January 2026)
EUR-Lex, Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 (Artificial Intelligence Act), OJ L, 2024/1689, 12.7.2024.
Eurojust (2024). Cybercrime Judicial Monitor, Issue 9.
European Commission for the Efficiency of Justice (CEPEJ) (2018) European Ethical Charter on the use of Artificial Intelligence in judicial systems and their environment. Strasbourg: Council of Europe.
European Court of Human Rights (Fifth Section) (2024) A.L. v. France (Application no. 44715/20) and E.J. v. France (Application no. 47930/21), 24 September 2024.
European Court of Human Rights (Grand Chamber) (2000) Jasper v. the United Kingdom, Application no. 27052/95, Judgment of 16 February 2000.
European Court of Human Rights (Grand Chamber) (2000) Rowe and Davis v. the United Kingdom, Application no. 28901/95, Judgment of 16 February 2000.
European Court of Human Rights (Grand Chamber) (2004) Edwards and Lewis v. the United Kingdom, Applications nos. 39647/98 and 40461/98, Judgment of 27 October 2004.
European Court of Human Rights (Plenary) (1988) Schenk v. Switzerland, Application no. 10862/84, Judgment of 12 July 1988.
European Court of Human Rights (Second Section) (2017) Matanović v. Croatia, Application no. 2742/12, Judgment of 4 April 2017.
European Court of Human Rights (Third Section) (2000) Khan v. the United Kingdom, Application no. 35394/97, Judgment of 12 May 2000.
European Union Regulation (EU) 2023/1543 on European Production and Preservation Orders for electronic evidence, OJ L 243, 29 September 2023.
Fiorino, D. (2026) 'SkyECC and EncroChat: Italian Court Developments Strengthening Defence Challenges to Digital Evidence', Joint Defense Team, 4 February 2026. Available at: https://www.joint-defense-team.com/post/skeyecc-encrochat-italy-defence-evidence-challenges (Accessed: 20 March 2026)
Government of the Republic of Serbia, 'Decoding of the Sky application contributed to detecting the most serious criminal offences', 7 July 2023. Available at: https://www.srbija.gov.rs/vest/717873/dekodiranje-sky-aplikacije-doprinelo-otkrivanju-najtezih-krivicnih-dela.php (Accessed: 16 January 2026)
Griffiths, C. and Jackson, A. (2022) 'Intercepted Communications as Evidence: The Admissibility of Material Obtained from the Encrypted Messaging Service EncroChat', The Journal of Criminal Law, 86(4), 271-276. https://doi.org/10.1177/00220183221113455
Hoxhaj, A. (2025) 'The CJEU ruled that the EncroChat data can be admissible evidence in the EU', European Journal of Risk Regulation, 16(4), 1567-1579. https://doi.org/10.1017/err.2025.10047
Ilić, A. (2024) 'Kriptovana komunikacija u svetlu međunarodne pravne pomoći u krivičnim stvarima', Izazovi međunarodnog krivičnog prava i krivičnog prava [Challenges of international criminal law and criminal law] (Tom 1), 393-409. https://doi.org/10.51204/Zbornik_UMKP_25117A
Investigatory Powers Act (2016), UK Public General Acts, 2016, c.25.
International Organization for Standardization and International Electrotechnical Commission (2012) ISO/IEC 27037:2012 Information technology: Security techniques. Guidelines for identification, collection, acquisition and preservation of digital evidence. Available at: https://www.iso.org/standard/44381.html (Accessed: 15 January 2026)
Oerlemans, J.J. and Royer, S. (2023) 'The future of data-driven investigations in light of the Sky ECC operation', New Journal of European Criminal Law, 14(4), 447-458. https://doi.org/10.1177/20322844231212661
Janusz-Pohl, B. (2025) 'About Constitutive Rules once again, Deliberation Based on the Judgment of 30 April 2024 of the CJEU in the EncroChat Case', Izazovi međunarodnog krivičnog prava i krivičnog prava [Challenges of international criminal law and criminal law] (Tom 2), 745-757. https://doi.org/10.51204/Zbornik_UMKP_25169A
Jocić, M. (2025) 'Korišćenje dokaza pribavljenih sa kriptovanih aplikacija (SKY, ECC i drugih)' [Use of evidence obtained from encrypted applications (SKY, ECC and others)], Bilten Vrhovnog suda Republike Srbije [Bulletin of the Supreme Court of the Republic of Serbia], 1/2025.
Lasagni, G. (2025) 'Admissibility of Digital Evidence', in: Franssen, V. i Tosza, S. (eds.) The Cambridge Handbook of Digital Evidence in Criminal Investigations. Cambridge: Cambridge University Press.
Merkevičius, R. (2025) 'The significance of the Court of Justice of the European Union judgment of 30 April 2024 in case C-670/22 (“EncroChat”) for the admissibility of evidence in criminal proceedings', International May Conference on Strategic Management, XXI(1), https://doi.org/10.5937/IMCSM25551M
Munjić, J. (2025) 'Veštačka inteligencija u fudbalu: krivičnopravni izazovi i perspektive', in Stanić, M. (ed.) Srpski fudbal – uporednopravni izazovi i perspektive V [Serbian football - comparative legal challenges and perspectives V]. Beograd: Institut za uporedno pravo, 63-88. https://doi.org/10.56461/ZR_25.SF.13
Paunović, B. (2025) 'Dokazna upotrebljivost podataka dobijenih sa kriptovanih aplikacija' [Evidentiary admissibility of data obtained from encrypted applications], Bilten Vrhovnog suda Republike Srbije [Bulletin of the Supreme Court of the Republic of Serbia], 1/2025.
Parojčić, S., 'Šariću šest godina zatvora za pokušaj diskreditacije svedoka saradnika', KRIK, 31.08.2023. Available at: https://www.krik.rs/saricu-sest-godina-zatvora-za-pokusaj-diskreditacije-svedoka-saradnika/ (Accessed: 14 January 2026)
Quattrocolo, S. (2020) Artificial Intelligence, Computational Modelling and Criminal Proceedings: A Framework for A European Legal Discussion. Cham: Springer. https://doi.org/10.1007/978-3-030-52470-8
Smart, R. and Mosley, O. (2021) 'Cracking the Enigma Code: A, B, D & C and Regina [2021] EWCA Crim 128', QEB Hollis Whiteman. Available at: https://www.qebholliswhiteman.co.uk/site/library/articles/cracking-the-enigma-code-a-b-d-c-and-regina-2021-ewca-crim-128 (Accessed: 26 December 2025)
Stoykova, R. (2024) 'A New Right to Procedural Accuracy: A Governance Model for Digital Evidence in Criminal Proceedings', Computer Law & Security Review, 55, 106040. https://doi.org/10.1016/j.clsr.2024.106040
Stoykova, R. (2023) 'Encrochat: The Hacker with a Warrant and Fair Trials?', Forensic Science International: Digital Investigation, 46, 301602. https://doi.org/10.1016/j.fsidi.2023.301602
Turanjanin, V. (2025) 'EncroChat, Sky ECC and Regulation (EU) 2023/1543: towards a new standards of digital evidence (I)', Revija za kriminologiju i krivično pravo [Journal of Criminology and Criminal Law], 63(3), 7-30. https://doi.org/10.47152/rkkp.63.3.1.
Uredba o uređenju mera zaštite informaciono-komunikacionih sistema od posebnog značaja [Decree on the Detailed Regulation of Protection Measures for ICT Systems of Special Importance] (2016) Službeni glasnik RS, br. 94/2016.
Zakon o informacionoj bezbednosti [Law on Information Security] (2025) Službeni glasnik RS, br. 91/2025.
Zakonik o krivičnom postupku [Criminal Procedure Code] (2011) Službeni glasnik RS, br. 72/11, 101/11, 121/12, 32/13, 45/13, 55/14, 35/19, 27/21 i 62/21.