How to Respond to an EPPO or OLAF Investigation in Belgium: Step‑by‑step Guide

Knowing how to respond to an EPPO investigation in Belgium, or to an administrative probe by the European Anti‑Fraud Office (OLAF), can determine whether a company emerges with its reputation and finances intact or faces protracted criminal proceedings and regulatory sanctions. Belgium, as a participating Member State and home to major EU institutions, sits at the centre of a growing enforcement push that industry observers expect to intensify through 2026 and beyond. This guide provides a sequential, practical playbook covering immediate actions, required documents, realistic timelines and indicative costs so that in‑house counsel, compliance officers and company directors can act decisively from the moment notification arrives.

It reflects the procedural framework established by Regulation (EU) 2017/1939 (the EPPO Regulation), the EPPO Internal Rules of Procedure (IRP), the OLAF Regulation and Belgian implementing legislation, while flagging the practical changes that characterise the 2026 enforcement landscape.

Overview of the EPPO and OLAF Investigation Process in Belgium

Two distinct but sometimes overlapping bodies drive EU‑level investigations into offences affecting the Union’s financial interests. Understanding which body is acting, and how they interact with Belgian national authorities, is the critical first step for any responding company.

The European Public Prosecutor’s Office (EPPO) is an independent EU body with the power to investigate, prosecute and bring to judgment crimes against the EU budget. It operates through European Delegated Prosecutors (EDPs) embedded in each participating Member State. In Belgium, EDPs have the same investigative and prosecutorial powers as national public prosecutors, but they act under the direction of the EPPO’s central office in Luxembourg and the oversight of a Permanent Chamber. The EPPO’s material competence is defined by Article 22 of the EPPO Regulation, which refers to offences derived from the PIF Directive (Directive (EU) 2017/1371), principally fraud, corruption, money laundering and misappropriation affecting EU revenue or expenditure.

The opening of an EPPO investigation is a formal, two‑stage act. First, information or a report reaches the EPPO (from national authorities, OLAF, EU institutions, or private parties via the ‘Report a Crime’ web form). Second, an EDP verifies the information and formally initiates the investigation, which is then registered and supervised by the competent Permanent Chamber. This two‑stage structure, described in the EPPO IRP and detailed in ERA training materials, means that companies may be aware of preliminary enquiries before a formal investigation opens.

The European Anti‑Fraud Office (OLAF) conducts administrative, not criminal, investigations into fraud, corruption and serious misconduct affecting EU finances. OLAF is part of the European Commission but operates with full investigational independence. Where OLAF’s findings indicate that criminal prosecution is warranted, it refers the case to national judicial authorities or, since the EPPO became operational, directly to the EPPO. Persons affected by an OLAF investigation may address complaints directly to OLAF or to the Supervisory Committee of OLAF, which monitors compliance with procedural guarantees.

A company, its directors or staff may become a “person concerned” under either body. In Belgium, a Belgian investigative judge (juge d’instruction) will be involved when coercive investigative measures, searches, seizures, wiretaps, are required in the course of an EPPO‑led investigation. Belgian EDPs retain the ability to direct and influence the work of the investigative judge while remaining accountable to the EPPO’s Permanent Chamber. This dual‑reporting architecture is a distinctive feature of the Belgian implementation of the EPPO framework.

Eligibility and Prerequisites: When Do EPPO and OLAF Have Competence?

When EPPO has competence (statutory triggers)

The EPPO may open an investigation in Belgium whenever there are reasonable grounds to believe that an offence within its competence, as listed in Article 22 of the EPPO Regulation, is being or has been committed. In practice, this covers fraud affecting EU expenditure or revenue (including customs duties and VAT in cross‑border schemes exceeding €10 million in damage), corruption involving EU officials or officials of Member States where EU funds are at stake, and money laundering of proceeds derived from those offences. Belgium transposed the PIF Directive into national criminal law, meaning the offences mirror those in the Belgian Criminal Code but are prosecuted by the EPPO rather than the national parquet fédéral when the EPPO exercises its competence.

When OLAF acts (administrative remit and referral to national prosecutors)

OLAF investigates where there is a suspicion of fraud, corruption or serious administrative misconduct that affects the EU’s financial interests but where the matter has not (yet) been taken up by the EPPO or where it concerns internal EU‑institution misconduct. OLAF can conduct on‑the‑spot checks and inspections in Member States and request access to information held by national authorities. It cannot, however, exercise criminal‑law coercive powers. When OLAF concludes that criminal action is appropriate, it transmits its final report and recommendations to the competent national authority or to the EPPO. Companies should therefore treat an OLAF investigation as a potential precursor to EPPO criminal proceedings.

Immediate legal prerequisites for firms

Regardless of whether the investigating body is the EPPO or OLAF, the rights of companies under EPPO and OLAF proceedings include the right to legal representation at every stage, the right to consult counsel before producing or surrendering privileged material, and the right to challenge investigative measures before the competent Belgian courts. Before any substantive engagement, firms should: (i) issue an immediate internal document‑preservation notice; (ii) identify all potentially privileged material and segregate it; and (iii) designate a single external‑facing contact person, ideally experienced Belgian criminal or white‑collar crime counsel, to manage all communications with investigators.

How to Respond to an EPPO Investigation in Belgium: Step‑by‑Step Procedure

The following numbered steps set out the European Delegated Prosecutor procedure from the perspective of a company or individual notified of an EPPO or OLAF investigation in Belgium. Where parallel OLAF and EPPO processes may run concurrently, coordination points are noted.

Step 1, Immediate intake and triage (0–24 hours)

Upon receiving a formal notice, letter of investigation, or becoming aware of investigators’ arrival at company premises, the priority is containment and preservation. Key actions include:

1. Log the exact time and method of notification. Scan and preserve the original notice.
2. Alert the designated crisis‑response team: general counsel, CFO, compliance officer and the board chair.
3. Instruct IT to suspend all automated data‑deletion routines (email archiving, document lifecycle policies) immediately.
4. Engage external Belgian criminal counsel with EPPO/EDP experience within hours, not days.
5. Do not make any public statements. Instruct all staff to refrain from discussing the matter externally or on social media.

Step 2, Initial legal assessment and privilege review (24–72 hours)

Within the first 72 hours, external counsel should conduct a rapid legal assessment covering the likely scope of the investigation, the categories of data and documents at risk, and any immediate privilege concerns. Practical actions at this stage include:

1. Commission forensic imaging of key custodians’ devices, email accounts and shared drives. Preserve metadata integrity.
2. Identify all documents subject to Belgian legal professional privilege (secret professionnel) and segregate them physically and electronically.
3. Review existing data‑retention policies and map where relevant data resides (on‑premise servers, cloud, third‑party processors).
4. Prepare a preliminary privilege log framework so that any withholding can be documented from the outset.

Step 3, Production of documents and responding to written requests (7–14 days typical)

Where the EPPO or OLAF issues a written document request, the typical initial production window is 7 to 14 days, although this can be negotiated depending on the volume and complexity of the data. Best practice during this phase:

1. Negotiate the scope of production with the EDP or OLAF case handler, seek agreement on targeted search terms, date ranges and custodian lists rather than broad, undifferentiated demands.
2. Stage productions: deliver responsive, non‑privileged documents first; follow with more complex categories (e.g., financial records requiring reconciliation).
3. Redact only where there is a clear legal basis (privilege, data protection, unrelated third‑party confidential information). Document every redaction in the privilege log.
4. Produce documents in native format with metadata intact, unless otherwise agreed. Provide a production index.

Step 4, On‑site searches, seizures and inspections

In Belgium, the EPPO’s EDPs may request that a Belgian investigative judge authorise and supervise on‑site search and seizure operations. Belgian delegated prosecutors direct the work of the investigative judge and may give orders during the search. When investigators arrive:

1. Immediately contact external counsel to attend on‑site. Belgian law permits the presence of counsel during searches.
2. Ask for and verify the written judicial authorisation (search warrant). Note the scope, premises covered and any limitations.
3. Insist on a detailed inventory of all seized items, signed by both investigators and a company representative.
4. Identify and physically separate privileged rooms or files. If investigators insist on seizing potentially privileged material, place a formal objection on the record and note it in the inventory.
5. Ensure the company’s forensic vendor creates a mirror image of any digital media before surrender where possible, or negotiate access to copies.

Step 5, Interviews of staff and directors

The EDP or investigative judge may summon employees, officers or directors for interviews (known as auditions in Belgian procedure). Companies should:

1. Brief each interviewee with counsel beforehand. Ensure they understand their right to legal representation during the interview.
2. Prepare a factual chronology of relevant events so that interviewees can respond accurately.
3. Where an individual may face personal criminal exposure, ensure they have independent personal counsel distinct from the company’s lawyers.

Step 6, Parallel national and regulatory processes (FSMA, NBB, customs coordination)

An EPPO investigation in Belgium frequently runs alongside sector‑specific regulatory processes. Where the company is supervised by the FSMA (Financial Services and Markets Authority) or the National Bank of Belgium (NBB), or where customs authorities are involved in the underlying offence, specific coordination is required. Firms should map their regulatory notification obligations, many Belgian financial‑services regulations impose mandatory self‑reporting duties that are triggered independently of the EPPO process. Voluntary disclosures and leniency applications should be discussed with counsel before any submission is made. For further guidance, see our forthcoming article on managing parallel EPPO, OLAF and FSMA investigations in Belgium.

Step 7, Post‑investigation steps: charges, pleas and mitigation

At the conclusion of the investigative phase, the EDP, with Permanent Chamber approval, decides whether to bring charges before the competent Belgian criminal court, refer the case for alternative disposal, or dismiss it. If charges are brought, the case proceeds before the Belgian chambre du conseil or trial court following ordinary Belgian criminal procedure. Companies should use the post‑investigation window to prepare mitigation submissions, engage settlement or remediation discussions where appropriate, and ensure compliance programmes are demonstrably strengthened.

Required Documents and Information for an EPPO or OLAF Investigation in Belgium

Assembling the right documents quickly is essential to controlling the pace and cost of an EPPO investigation in Belgium. The checklist below covers the most commonly requested categories, with practical notes on format, privilege risks and responsible internal teams. Companies should treat this as a living checklist, tailor it to the specific subject matter of the investigation and update it as new requests arrive.

Companies should begin populating this checklist within the first 24 hours. For a downloadable, editable version of this documents checklist, see the forthcoming documents checklist for EPPO/OLAF investigations in Belgium.

Timeline and Key Deadlines for EPPO and OLAF Investigations

Belgian law does not prescribe a single statutory deadline for the duration of an EPPO or OLAF investigation. Timelines are driven by the complexity of the case, the volume of evidence and the degree of cross‑border coordination required. However, the following milestones, drawn from the EPPO IRP and practitioner experience, provide a realistic framework for planning resources and board reporting.

Companies subject to OLAF investigations should also note that they may lodge a complaint with the Supervisory Committee of OLAF if they believe the Office has not respected their procedural guarantees. The complaint must relate to specific actions or omissions by OLAF during the investigation. The timeline for filing is not subject to a strict statutory cut‑off, but complaints should be submitted promptly while facts are fresh and evidence is available.

For the full investigative phase, a realistic planning assumption is 3 to 12 months from formal opening to the EDP’s decision on whether to charge, although complex multi‑jurisdictional matters may extend well beyond this range. Board and audit‑committee reporting should be structured around the milestones in the table above, with quarterly status updates at a minimum.

Costs, Fees and Tax Considerations

Responding to an EPPO investigation in Belgium involves several categories of cost. The table below provides indicative ranges based on Belgian market practice. Actual costs will vary depending on case complexity, data volumes and whether on‑site searches or parallel regulatory processes are involved.

Cost‑control measures include prioritising custodians and search terms during document review, staging productions to spread expenditure, and using technology‑assisted review instead of manual document‑by‑document review. Costs incurred in defending against EPPO or OLAF proceedings may be deductible as business expenses under Belgian tax rules, subject to the general requirement that the expenditure is incurred for the purpose of maintaining or acquiring taxable income. Seek specialist tax advice on deductibility before the year‑end close.

What Changes in 2026: The Evolving EPPO Enforcement Landscape in Belgium

Industry observers expect 2026 to mark a step‑change in EPPO enforcement activity across participating Member States, including Belgium. Early indications suggest several practical changes that directly affect how companies should respond to an EPPO investigation in Belgium:

• Earlier involvement of Belgian investigative judges. The likely practical effect of increased coordination between EDPs and the Belgian judiciary is that coercive measures, searches, seizures and freezing orders, are sought and executed more rapidly than in the EPPO’s initial operational years. Companies should ensure their crisis‑response protocols can be activated within hours, not days.
• Greater FSMA and customs coordination. Where investigations concern regulated financial‑services firms or customs‑duty fraud, the EPPO is engaging more actively with the FSMA, the National Bank of Belgium and Belgian customs authorities. Firms should prepare a regulator‑notification checklist mapping their obligations under each supervisory framework, and activate it in parallel with the EPPO response plan.
• Increased OLAF referrals to the EPPO. As OLAF’s cooperation framework with the EPPO matures, a growing proportion of OLAF administrative findings are being transmitted to the EPPO for criminal follow‑up. Companies under OLAF investigation should anticipate that the matter may transition to criminal proceedings and preserve evidence, including cross‑border evidence held in other EEA jurisdictions, accordingly.
• More frequent joint inspections. The trend towards multi‑agency joint inspections means that a company may face simultaneous on‑site presence by EPPO EDPs, Belgian police, customs officers and sector regulators. Response‑team protocols should designate separate contact persons for each authority to avoid confusion and inadvertent disclosure.

Common Pitfalls and How to Avoid Them

• Producing privileged material without a privilege log. Once privileged documents are surrendered, the privilege may be waived irretrievably. Conduct a privilege review before every production and maintain a detailed privilege log from day one.
• Failing to preserve metadata. Investigators increasingly rely on metadata (creation dates, edit history, sender/recipient fields) as evidence. Commission forensic imaging immediately upon notification, do not rely on ordinary IT backups.
• Over‑communicating to the press or on social media. Premature public statements can prejudice the defence, trigger regulatory scrutiny and damage commercial relationships. Engage a specialist PR advisor and route all external communications through them.
• Ignoring parallel regulatory notification obligations. Belgian financial‑services and AML regulations may require prompt notification to the FSMA or NBB independently of the EPPO process. Map these obligations on day one and comply within the prescribed windows to avoid compounding exposure.
• Engaging counsel without specific EPPO/EDP experience. The EPPO’s hybrid EU–national procedural framework is fundamentally different from a purely domestic Belgian criminal investigation. Retain counsel with demonstrated experience in EPPO matters, Belgian investigative‑judge procedure and cross‑border evidence coordination, consult the Belgium lawyer directory to identify specialists.

Conclusion

Responding effectively to an EPPO or OLAF investigation in Belgium demands speed, discipline and specialist expertise. The steps to respond to an EU financial‑fraud probe outlined in this guide, from the first 24‑hour triage through document production, on‑site searches and post‑investigation mitigation, provide a structured framework that compliance teams and counsel can activate immediately. As the 2026 enforcement push accelerates, the margin for improvisation narrows: companies that invest in preparation, privilege‑management protocols and experienced counsel are materially better positioned to protect their interests and achieve the best achievable outcome.

Sources

1. EPPO, FAQ / Official Site
2. EPPO, Internal Rules of Procedure (IRP)
3. ERA Training, Explanatory Note: Opening of the Investigation
4. EUCRIM, Role of the Belgian Investigative Judge in EPPO Cases
5. European Papers, The Belgian Juge d’Instruction and the EPPO Regulation
6. OLAF, Complaints and Requests
7. Supervisory Committee of OLAF, Submit a Complaint
8. European Commission Press Corner, OLAF Clarifications