Your phone confiscated: privacy, access and digital data

A telephone case contains at least four decisions

When a phone is seized, you are often immediately asked when the device will be returned. That question is understandable, but involves several issues. Why is the device allowed to be held? Which data may be examined? How is confidential information taken into account? And can the device be returned after certain data has been secured? The answer to one question does not automatically answer the other. Ownership of the phone and use of an account can also belong to different people.

Our editorial approach is to juxtapose an object map and a research map. The object card concerns brand, identification, owner, seizure date and practical necessity. The research map covers the authority, purpose, period examined and types of data. That distinction prevents an urgent request to get a work phone back from being mistaken for permission to search all work communications. It also makes clear which objection belongs to which decision.

The criminal seizure of the device has its own purpose

The criminal law rules on seizure are contained in the Code of Criminal Procedure. criminal seizure can, for example, serve to investigate the truth or for a possible later decision about the object. The precise basis and stage of the case are important. Ask for the notice or other attachment document received and check which object is included. Make a note of whether accessories, memory cards, or multiple devices are included. A general reminder that the police took something is less useful than an identifiable description. (Code of Criminal Procedure)

A request for restitution then asks why the criminal seizure is still necessary according to the responsible authority. That investigation may have a different outcome than the question of whether the suspect needs the phone for work. The work interest must be made concrete: is it about the device itself, a specific file or access to a business service? Discuss whether a legally and practically permissible solution can be requested. The criminal seizure and return guide covers the general routes and the complaint. (criminal seizure and return)

What changed the smartphone framework of 2025

On March 18, 2025, the Supreme Court adjusted its case law on research into electronic data carriers in ECLI:NL:HR:2025:409. The reason was the European case CG/Landeck. The official explanation of the Supreme Court distinguishes a limited privacy infringement from more far-reaching investigation. It is therefore not only about the technical question of whether a device can be read, but also about the expected insight into someone's personal life. (ECLI:NL:HR:2025:409 · official explanation from the Supreme Court)

In the event of research that results in more than a limited infringement, prior assessment by the examining magistrate is in principle required under this framework; Emergency situations require your own assessment. The scope, purpose and design of the research matter. An explanation from 2017 that only states that permission from the public prosecutor is sufficient for extensive investigations should therefore not automatically be used as a fully up-to-date framework. Ask the lawyer which authority, authorization and legal regulations apply to the specific investigation.

Limited viewing and reconstructing a personal life

A limited observation of a device differs from an investigation that reveals communications, locations, photos and other sensitive data in context. The privacy invasion is not determined solely by the number of minutes an investigator looks at the screen. A small amount of information can be very sensitive. Conversely, a narrowly defined study may have a different scope than a blanket copy of everything that is technically available.

A useful defense question is therefore which data categories were expected in advance and how the research was limited. Don't just ask if there was permission, but for what. What period and purpose were mentioned? Was there a record of the actual performance? Was data from others or data found outside the target? These are questions for review by the lawyer; it is not an invitation to subsequently derive incomplete technical conclusions from a seizure form.

The device is not the same as all accounts

A phone contains locally stored data, but can also refer to messages and files stored elsewhere. A SIM card, business management, cloud storage and connected devices complicate the actual situation. The legal basis for access to data must be appropriate to the act applied. The mere fact that an account is visible on a phone does not automatically make every investigative action on that account the same as investigating locally found files.

Before the meeting, make a description of used accounts and their function, without putting passwords in a general overview. Note whether an employer is an owner or manager and whether multiple people use the same account. Do not change or remove anything to influence the investigation. Report a specific security problem, such as threatened unauthorized use of a business account, to the lawyer and the responsible administrator. Discuss which necessary measures are compatible with the ongoing investigation and what communication is required about this.

Lawyer contact and details of others

A telephone can contain conversations with a lawyer and other confidential data. The right of non-disclosure requires your own assessment. The presence of one lawyer call does not make the entire phone untouchable. Conversely, material that is covered by protected professional secrecy should not end up in an ordinary investigation without appropriate safeguards. The Supreme Court has discussed further rules regarding digital material entitled to confidentiality. The precise context of that statement must be taken into account when applying it. (Supreme Court has discussed further rules on digital material entitled to confidentiality)

Let the attorney know what protected communications can be found and how they can be identified. Do not unnecessarily share its contents with others to prove confidentiality. Data from housemates, clients or colleagues can also raise privacy interests, although they are not automatically entitled to confidentiality. A targeted description helps to discuss appropriate protection or filtering. A general statement that everything is private provides less guidance than naming concrete categories, periods and accounts involved.

A data copy will not solve the criminal seizure by itself

Sometimes it is thought that the phone should be returned once a copy has been made. That is not a general rule that follows from the mere presence of a copy. There may be discussion about further investigative actions or another basis for seizure. The defense can ask why the original device is still needed and what interest is served by the continued criminal seizure. A technically possible copy and a legally sufficiently completed investigation are different assessments.

Describe your own interest in return as specifically as possible. Can a business function be used temporarily on a replacement device? Is a local file needed for which no other source exists? Are authentication tools inaccessible? Do not assume that the police or Public Prosecution Service may or must transfer data without assessment. A limited request for a specific file may require a different consideration than a full restoration of all account access. Ask the lawyer what solution can be responsibly proposed.

Fictional example: property, work and private life are intertwined

Consider a fictional consultant who also logs into business systems with a private telephone. After criminal seizure, her employer requests immediate access to all messages because a client project continues. She mainly needs her banking app and contact with a practitioner. One general letter asking for everything to be returned hides three different interests. Furthermore, the employer is not automatically authorized to give permission on her behalf for the investigation of private communications.

A better inventory lists the owner of the device, the business management service used, and the concrete files needed for the project. The attorney will separately discuss the scope of the investigation, possible protected communications, and a request for restitution or access. An administrator examines within his own powers what business continuity is possible without changing evidence. The example shows why practical necessity should not be confused with unlimited consent or with an automatic right to a complete data copy.

Assess an authorization error and the consequences separately

If the defense suspects a defect in the data investigation, that defect must be made concrete. What action took place, what rule applied and what permission may have been lacking? A reference to the word privacy is not yet a fully developed defense. The available official reports, authorizations and investigation reports are important for this. The time at which the research took place may also be relevant for the assessment of the applicable framework.

An illegality does not automatically mean that all evidence is excluded or that the criminal case ends. The legal consequences require a separate assessment of the rule, the importance and the circumstances of the omission. Let the lawyer determine how an objection is raised. Different procedures and times may apply to a request to have the device returned and to a defense regarding the use of data. It is useful not to let those goals disappear in one unfocused complaint.

An inventory without passwords and without changes

The inventory below is an editorial aid. Keep it in a safe place and share it with the lawyer through an agreed channel. Do not enter codes or recovery data that are not necessary for this consultation. Describe missing information as missing and do not confuse your own estimate with a number on a seizure certificate. The aim is that the object, account and research act remain separately discussed.

• Device: make, model, identification number if known, owner and usage function.
• criminal seizure: date, document received, registration number and contact authority.
• Research: known basis, purpose, period, authorization and available reporting.
• Confidentiality: identifiable categories of attorney communications or other protected data.
• Accounts: private or business, administrator and shared use, without recording passwords.
• Practical necessity: exactly which device or file is needed, why and which alternative is missing?
• Follow-up: What targeted request is being considered and who controls its receipt and decision?