MLAT

A Mutual Legal Assistance Treaty is a bilateral or multilateral treaty under which the law-enforcement and judicial authorities of one state may formally request the assistance of another in obtaining evidence, executing search warrants, or compelling testimony located in the other’s jurisdiction. For an offshore-hosting operator, MLAT requests are the principal procedural channel through which a foreign state can reach hosted data by lawful means — and the channel through which the operator’s home jurisdiction, not the requesting state, decides what to deliver.

The procedural shape is similar across instruments. A requesting state lodges a request with the central authority of the requested state, setting out the facts of the underlying investigation, the legal basis for the request, the specific assistance sought, and any limitations. The requested state’s central authority reviews the request against its own domestic law and any treaty-level constraints — dual criminality (the conduct must be criminal in both jurisdictions), specialty (the evidence may be used only for the stated purpose), public-order exceptions, and protections for the rights of the individual whose data is sought. Only if the request clears those filters does the requested state execute it under its own procedural law.

The practical consequence is that an MLAT request is not a self-executing demand on the operator. It is a request to the operator’s home government, which the home government’s prosecutors and courts evaluate against the home jurisdiction’s law. Where the underlying conduct would not be criminal in the operator’s home jurisdiction, where the request fails specialty, or where the home jurisdiction’s public-order doctrine intervenes (Article 19 ICCPR speech-protection concerns are a recurrent example), the request is declined.

MLAT timelines are notoriously slow — months at the fast end, years at the typical. Authorities frustrated with the cadence have pursued alternative channels: voluntary disclosure requests to operators, national security letters where domestic jurisdiction allows, and direct-access agreements between certain states. The MLAT remains the lawful default; the alternatives are what an operator most often refuses.