Source: OJ L 277, 27/10/2022, p. 1–102

Current language: EN

Article 18 Notification of suspicions of criminal offences


Summary What does Article 18 of the DSA regulation say?

This article sits within the broader framework governing hosting services and addresses a specific law enforcement obligation.

It requires hosting service providers to act when they become aware of information suggesting a criminal offence involving a threat to life or safety.

The article also clarifies what to do when the relevant Member State cannot be determined, providing a fallback route via the provider's home authority or Europol.

Important points:

  • Hosting service providers must promptly report suspicions of criminal offences involving threats to life or safety to the relevant law enforcement or judicial authorities.
  • Where the relevant Member State cannot be identified with reasonable certainty, providers must notify the authorities of their own Member State or Europol, or both.
  • The "Member State concerned" is defined broadly — it can be where the offence took place or is likely to take place, where the suspected offender is located, or where the victim resides.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. Where a provider of hosting services becomes aware of any information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of a person or persons has taken place, is taking place or is likely to take place, it shall promptly inform the law enforcement or judicial authorities of the Member State or Member States concerned of its suspicion and provide all relevant information available.

    1. Where the provider of hosting services cannot identify with reasonable certainty the Member State concerned, it shall inform the law enforcement authorities of the Member State in which it is established or where its legal representative resides or is established or inform Europol, or both.

    2. For the purpose of this Article, the Member State concerned shall be the Member State in which the offence is suspected to have taken place, to be taking place or to be likely to take place, or the Member State where the suspected offender resides or is located, or the Member State where the victim of the suspected offence resides or is located.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod