Yavor Poptoshev v The Director of Public Prosecutions & Ors [2025] IESC 47 (24 November 2025)

Executive summary

The Supreme Court of Ireland heard Yavor Poptoshev’s appeal challenging the constitutionality of provisions that criminalise refusing to provide passwords for lawfully seized digital devices during a search under the Criminal Justice (Theft and Fraud Offences) Act 2001. The judgment sets out the statutory scheme, the search-warrant process used in a Garda Economic Crime Bureau investigation, and the appellant’s arguments based on self-incrimination and privacy, but the source text provided does not include the Court’s final disposition or detailed holding beyond that framework.

Key points

• Applicant: Yavor Poptoshev; respondents: Director of Public Prosecutions, An Garda Síochána, Ireland, and the Attorney General.
• Devices seized under a District Court search warrant included two smartphones and a computer/laptop; Gardaí sought passcodes under s 48(5)(b)(i) of the 2001 Act.
• Refusal to provide passwords led to charges under s 49(1)(c) and arrest power under s 49(2); the offence carries up to 6 months’ imprisonment.
• Core challenge: compelled disclosure of passwords allegedly infringes the constitutional privilege against self-incrimination and privacy rights under the Constitution and ECHR.
• The judgment notes the statutory model is aimed at serious offences and reflects legislative concern that investigations can be frustrated without access to digital devices.
• The source text references The People (DPP) v Quirke as authority for searching digital as well as physical space, but does not provide a sanctions/export-control nexus.

Why it matters

This decision is relevant to enforcement because it addresses the state’s power to compel access to encrypted or password-protected devices in serious-crime investigations, a tool that can also matter in sanctions, export-control, and financial-crime inquiries. It signals how Irish courts may frame the balance between digital search powers and constitutional rights when evidence is stored on personal devices.

Implications

For compliance and litigation strategy, the key issue is that refusal to disclose passwords can trigger a separate criminal offence even where the underlying devices are lawfully seized under warrant. Parties facing digital searches should expect the state to rely on statutory compulsion provisions and on the proposition that access to digital content is part of a lawful search, making prompt advice on privilege, scope, and any lawful excuse essential.