Second Additional Protocol to the Cybercrime Convention on enhanced co-operation and disclosure of electronic evidence (CETS No. 224) 

Official text and translations

  Treaty Office: English Second Additional Protocol

  Treaty Office: French Second Additional Protocol

  Treaty Office: Official and non-official languages

Council of Europe Publications

 PDF Booklets (Convention, Protocols and Guidance notes ) EN / FR / ES / PT / ARA

 Special edition of the Second Additional Protocol  

While cybercrime is proliferating and the complexity of obtaining electronic evidence that may be stored in foreign, multiple, shifting or unknown jurisdictions is increasing, the powers of law enforcement are limited by territorial boundaries. As a result, only a very small share of cybercrime that is reported to criminal justice authorities is leading to prosecutions or court decisions.

The Protocol responds to this challenge and provides tools for enhanced co-operation and disclosure of electronic evidence - such as direct cooperation with service providers and registrars, effective means to obtain subscriber information and traffic data, immediate co-operation in emergencies or joint investigations - that are subject to a system of human rights and rule of law, including data protection safeguards.

What is the Second additional Protocol?


 

  • Watch the video in FR or  ES

Tools of the Second Additional Protocol


  • Direct requests to registrars in other jurisdictions to obtain domain name registration information
  • Direct co-operation with service providers in other jurisdictions to obtain subscriber information
  • More effective means to obtain subscriber information and traffic data through government-to-government co-operation
  • Expeditious co-operation in emergency situations
  • Joint investigation teams and joint investigations
  • Video conferencing
  • A strong system of human rights and rule of law safeguards, including for the protection of personal data
lATEST NEWS

CyberSPEX project : Digital Evidence and Judicial Cooperation Training for Italian prosecutors

30 September – 2 October 2026 Milan, Italy

From 30 September to 2 October 2026, 150 prosecutors of the districts of Milan, Turin, Genoa, Bologna, Brescia, Trento and Venice have attended the training on “Digital Evidence and Judicial Cooperation: The EU E-evidence Package and the Second Additional Protocol to the Budapest Convention” ...

Read More

CyberSPEX project: EJCN masterclass on the Second Additional Protocol

25 September 2026

On 25 September 2026 the CyberSPEX project contributed to the European Judicial Cybercrime Network (EJCN) masterclasses, by sharing insights on the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) and by introducing the newly designed 2AP Model Training...

Read More

CyberSPEX and ULTRAXL projects: Workshop on the admissibility of electronic evidence

24-25 September 2026 The Hague, Netherlands

The CyberSPEX project, a joint initiative of the European Union and the Council of Europe, in co-operation with the UltraXL project, organised a workshop on the admissibility of electronic evidence in criminal proceedings in The Hague on 24–25 September 2026. The workshop brought together 25...

Read More

CyberSPEX project: EUROPOL Cybercrime conference on international co-operation

23-24 September 2026 The Hague, Netherlands

On 23-24 September 2026, the CyberSPEX project contributed to the EUROPOL Cybercrime Conference, supporting a dedicated session on “From legal frameworks to capacity building: which perspectives for law enforcement on international co-operation”. The contribution highlighted the relevance of the...

Read More

CyberSPEX: Training on the Second Additional Protocol for the General Prosecutor’s Office and other relevant authorities in Hungary

15-16 September 2026 Budapest, Hungary

On 15-16 September 2026, following Hungary’s ratification of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) in February this year, the CyberSPEX project, a joint initiative of the European Commission and the Council of Europe, organised a dedicated...

Read More

CyberSPEX: Third consultation with civil society stakeholders and service providers on the implementation of the Second Protocol to the Convention on Cybercrime

2 June 2026 Strasbourg, France

Following meetings held in December 2024 and November 2025, the Secretariat of the Cybercrime Convention Committee (T-CY), with the support of the CyberSPEX project, organised on 2 June 2026 the third consultation with civil society stakeholders and service providers on the implementation of the...

Read More

CyberSPEX: Fourth Steering Committee meeting

1 June 2026 Strasbourg, France

On 1 June 2026, the CyberSPEX joint project of the European Union and the Council of Europe organised its fourth Steering Committee meeting in Strasbourg, France, gathering representatives of the EU member states authorities and partners from EU agencies (EUROPOL, EUROJUST, SIRIUS project). The...

Read More

CyberSPEX and T-CY: Upcoming consultation with civil society stakeholders

2 June 2026 Strasbourg, France

The Cybercrime Convention Committee (T-CY) with the support of the CyberSPEX project, a joint project of the European Union and the Council of Europe, will host the third consultation with civil society stakeholders and service providers to strengthen public-private collaboration on cybercrime...

Read More

CyberSPEX: Workshop on facilitating co-operation under the Second Additional Protocol through the 24/7 Network established under the Budapest Convention in EU Member States

26 May 2026 Bucharest, Romania

The implementation of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) was furthered through a workshop organised by the CyberSPEX project on 26 May 2026 in Bucharest, Romania. The event gathered EU m/s representatives from Ministries of Justice, law...

Read More

In brief

52

signatories in total*


4

countries have ratified the Protocol (out of the 52 signatories)*

* See the full list on the Treaty Office webpage

timeline

15 April 2026

Costa Rica became the fourth state to ratify the Second Additional Protocol to the Convention on Cybercrime


5 February 2026

Hungary became the third state to ratify the Second Additional Protocol to the Convention on Cybercrime - Cybercrime


14 November 2025

Bosnia and Herzegovina became the 52nd State to sign the Second Additional Protocol to Convention on Cybercrime - Cybercrime


9 July 2025

Norway becomes the 51st State to sign the Second Additional Protocol


5 June 2025

Fiji signs the Second Additional Protocol (becoming the 50th State)


 27 March 2025

Latvia becomes the 49th State to sign the Second Additional Protocol


12 December 2024

Peru becomes the 48th State to sign the Second Additional Protocol


24 September 2024

Paraguay becomes the 47th State to sign the Second Additional Protocol


20 June 2024

 Czechia and Sierra Leone become the 45th and 46th States to sign the Second Additional Protocol


17 June 2024

 Georgia becomes the 44th State to sign the Second Additional Protocol


16 November 2023

 Armenia becomes the 43th State to sign the Second Additional Protocol


28 June 2023

 Hungary, Cabo Verde and Ghana become 40th, 41rst and 42nd states to sign the Second Additional Protocol


22 June 2023

 Malta becomes the 39th State to sign the Second Additional Protocol


20 June 2023

 Canada becomes the 38th State to sign the Second Additional Protocol


31 May 2023

 Mauritius becomes the 37th State to sign the Second Additional Protocol


27 February 2023

Albania becomes the 36th State to sign the Second Additional Protocol


16 February 2023

Argentina becomes the 35th State to sign the Second Additional Protocol


30 January 2023

The Dominican Republic becomes the 34th State to sign the Second Additional Protocol


 27 January 2023

France and Germany become the 32nd and 33rd signatories


 20 January 2023

Greece becomes the 31rst signatory


 30 November 2022
 6 Parties sign the Second additional Protocol [Croatia, Moldova, Slovenia, Sri Lanka, Ukraine and the United Kingdom]


 13 June 2022
Costa Rica becomes 24th signatory


20 May 2022
Andorra becomes 23rd signatory


12 May 2022
 22 Parties sign the Second additional Protocol at the opening for signature conference [Austria, Belgium, Bulgaria, Chile, Colombia, Estonia, Finland, Iceland, Italy, Japan, Lithuania, Luxembourg, Montenegro, Morocco, Netherlands, North Macedonia, Portugal, Romania, Serbia, Spain, Sweden and the United States of America]


 17 November 2021
 The Second additional Protocol is adopted by the Committee of Ministers

 
#cyber2AP

Opening for signature, 12 May 2022

Watch the videos of the event, scroll through the photo gallery and read all of our resources from panel members on the event page