Examines the challenges to European law posed by third-country access to data held by private companies for purposes of law-enforcement investigations in criminal proceedings. The authors carried out a detailed survey of the main EU legal instruments and their standards, underlining their direct relevance for assessing the lawfulness and legitimacy of access to data.