Paper 2022/1242

Data Protection Law and Multi-Party Computation: Applications to Information Exchange between Law Enforcement Agencies

Amos Treiber, TU Darmstadt
Dirk Müllmann, Goethe University Frankfurt
Thomas Schneider, TU Darmstadt
Indra Spiecker genannt Döhmann, Goethe University Frankfurt

Pushes for increased power of Law Enforcement (LE) for data retention and centralized storage result in legal challenges with data protection law and courts - and possible violations of the right to privacy. This is motivated by a desire for better cooperation and exchange between LE Agencies (LEAs), which is difficult due to data protection regulations, was identified as a main factor of major public security failures, and is a frequent criticism of LE. Secure Multi-Party Computation (MPC) is often seen as a technological means to solve privacy conflicts where actors want to exchange and analyze data that needs to be protected due to data protection laws. In this interdisciplinary work, we investigate the problem of private information exchange between LEAs from both a legal and technical angle. We give a legal analysis of secret-sharing based MPC techniques in general and, as a particular application scenario, consider the case of matching LE databases for lawful information exchange between LEAs. We propose a system for lawful information exchange between LEAs using MPC and private set intersection and show its feasibility by giving a legal analysis for data protection and a technical analysis for workload complexity. Towards practicality, we present insights from qualitative feedback gathered within exchanges with a major European LEA.

Available format(s)
Publication info
Published elsewhere. WPES'22
data protection lawsecure computationlaw enforcement
Contact author(s)
treiber @ encrypto cs tu-darmstadt de
muellmann @ jur uni-frankfurt de
schneider @ encrypto cs tu-darmstadt de
spiecker @ jur uni-frankfurt de
2022-09-19: approved
2022-09-19: received
See all versions
Short URL
Creative Commons Attribution-NonCommercial


      author = {Amos Treiber and Dirk Müllmann and Thomas Schneider and Indra Spiecker genannt Döhmann},
      title = {Data Protection Law and Multi-Party Computation: Applications to Information Exchange between Law Enforcement Agencies},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1242},
      year = {2022},
      doi = {10.1145/3559613.3563192},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.