Art. 18 DSA:
Notification of suspicions of criminal offences
1. Where a provider of hosting services becomes aware of any information giving rise to a suspicion that a serious criminal offence involving a threat to the life or safety of a person or persons has taken place, is taking place or is likely to take place, it shall promptly inform the law enforcement or judicial authorities of the Member State or Member States concerned of its suspicion and provide all relevant information available.
2. Where the provider of hosting services cannot identify with reasonable certainty the Member State concerned, it shall inform the law enforcement authorities of the Member State in which it is established or has its legal representative or inform Europol, or both.
For the purpose of this Article, the Member State concerned shall be the Member State where the offence is suspected to have taken place, to be taking place and likely to take place, or the Member State where the suspected offender resides or is located, or the Member State where the victim of the suspected offence resides or is located.