Second Additional Protocol to the Cybercrime Convention on enhanced co-operation and disclosure of electronic evidence (CETS No. 224) 

Official text and translations

  Treaty Office: English Second Additional Protocol

  Treaty Office: French Second Additional Protocol

  Treaty Office: Official and non-official languages

Council of Europe Publications

 PDF Booklets (Convention, Protocols and Guidance notes ) EN / FR / ES / PT / ARA

 Special edition of the Second Additional Protocol  

While cybercrime is proliferating and the complexity of obtaining electronic evidence that may be stored in foreign, multiple, shifting or unknown jurisdictions is increasing, the powers of law enforcement are limited by territorial boundaries. As a result, only a very small share of cybercrime that is reported to criminal justice authorities is leading to prosecutions or court decisions.

The Protocol responds to this challenge and provides tools for enhanced co-operation and disclosure of electronic evidence - such as direct cooperation with service providers and registrars, effective means to obtain subscriber information and traffic data, immediate co-operation in emergencies or joint investigations - that are subject to a system of human rights and rule of law, including data protection safeguards.

What is the Second additional Protocol?


 

  • Watch the video in FR or  ES

Tools of the Second Additional Protocol


  • Direct requests to registrars in other jurisdictions to obtain domain name registration information
  • Direct co-operation with service providers in other jurisdictions to obtain subscriber information
  • More effective means to obtain subscriber information and traffic data through government-to-government co-operation
  • Expeditious co-operation in emergency situations
  • Joint investigation teams and joint investigations
  • Video conferencing
  • A strong system of human rights and rule of law safeguards, including for the protection of personal data
lATEST NEWS

Back CyberSPEX project: EUROPOL Cybercrime conference on international co-operation

CyberSPEX project: EUROPOL Cybercrime conference on international co-operation

On 23-24 September 2026, the CyberSPEX project contributed to the EUROPOL Cybercrime Conference, supporting a dedicated session on “From legal frameworks to capacity building: which perspectives for law enforcement on international co-operation”. The contribution highlighted the relevance of the Convention on Cybercrime (Budapest Convention), its Second Additional Protocol and the importance of making full use of the provisions provided.

This session aimed at examining the recent developments and perspectives on international co-operation and training, including the role of the Cybercrime Programme Office of the Council of Europe (C-PROC) in Bucharest. C-PROC supports capacity building worldwide to strengthen international co-operation on cybercrime and electronic evidence based on the framework of the Convention on Cybercrime.  

As more Parties move towards the ratification of the Second Additional Protocol, new training materials, courses and exercises are being developed to support its implementation. These resources are benefiting the countries in the implementations of the provisions of the Protocol and for identifying the ways of applying them in practice.

The Second Additional Protocol provides new tools for enhanced co-operation with strong safeguards. This  event also offered an opportunity to consider how capacity building can help practitioners understand and use the Protocol’s co-operation mechanisms and build international trust.

 

CyberSPEX project webpage

Cybercrime Programme Office (C-PROC)

Second Additional Protocol, on enhanced co-operation and disclosure of electronic evidence

Convention on Cybercrime (Budapest Convention)

The Hague, Netherlands 23-24 September 2026
  • Diminuer la taille du texte
  • Augmenter la taille du texte
  • Imprimer la page
In brief

52

signatories in total*


4

countries have ratified the Protocol (out of the 52 signatories)*

* See the full list on the Treaty Office webpage

timeline

15 April 2026

Costa Rica became the fourth state to ratify the Second Additional Protocol to the Convention on Cybercrime


5 February 2026

Hungary became the third state to ratify the Second Additional Protocol to the Convention on Cybercrime - Cybercrime


14 November 2025

Bosnia and Herzegovina became the 52nd State to sign the Second Additional Protocol to Convention on Cybercrime - Cybercrime


9 July 2025

Norway becomes the 51st State to sign the Second Additional Protocol


5 June 2025

Fiji signs the Second Additional Protocol (becoming the 50th State)


 27 March 2025

Latvia becomes the 49th State to sign the Second Additional Protocol


12 December 2024

Peru becomes the 48th State to sign the Second Additional Protocol


24 September 2024

Paraguay becomes the 47th State to sign the Second Additional Protocol


20 June 2024

 Czechia and Sierra Leone become the 45th and 46th States to sign the Second Additional Protocol


17 June 2024

 Georgia becomes the 44th State to sign the Second Additional Protocol


16 November 2023

 Armenia becomes the 43th State to sign the Second Additional Protocol


28 June 2023

 Hungary, Cabo Verde and Ghana become 40th, 41rst and 42nd states to sign the Second Additional Protocol


22 June 2023

 Malta becomes the 39th State to sign the Second Additional Protocol


20 June 2023

 Canada becomes the 38th State to sign the Second Additional Protocol


31 May 2023

 Mauritius becomes the 37th State to sign the Second Additional Protocol


27 February 2023

Albania becomes the 36th State to sign the Second Additional Protocol


16 February 2023

Argentina becomes the 35th State to sign the Second Additional Protocol


30 January 2023

The Dominican Republic becomes the 34th State to sign the Second Additional Protocol


 27 January 2023

France and Germany become the 32nd and 33rd signatories


 20 January 2023

Greece becomes the 31rst signatory


 30 November 2022
 6 Parties sign the Second additional Protocol [Croatia, Moldova, Slovenia, Sri Lanka, Ukraine and the United Kingdom]


 13 June 2022
Costa Rica becomes 24th signatory


20 May 2022
Andorra becomes 23rd signatory


12 May 2022
 22 Parties sign the Second additional Protocol at the opening for signature conference [Austria, Belgium, Bulgaria, Chile, Colombia, Estonia, Finland, Iceland, Italy, Japan, Lithuania, Luxembourg, Montenegro, Morocco, Netherlands, North Macedonia, Portugal, Romania, Serbia, Spain, Sweden and the United States of America]


 17 November 2021
 The Second additional Protocol is adopted by the Committee of Ministers

 
#cyber2AP

Opening for signature, 12 May 2022

Watch the videos of the event, scroll through the photo gallery and read all of our resources from panel members on the event page