Overview of national data retention policies

Aus Freiheit statt Angst!
Zur Navigation springen Zur Suche springen

Overview of national data retention policies

Please update this table by entering information on data retention in your country:

Data retention transposition schedule

Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

(EU directive)

 -
 6-24 months
 directive, 15 March 2006

Directive's requirements:

  1. the calling telephone number;
  2. the name and address of the subscriber or registered user;
  3. the number(s) dialled (the telephone number(s) called), and, in cases involving supplementary services such as call forwarding or call transfer, the number or numbers to which the call is routed;
  4. the name(s) and address(es) of the destination subscriber(s) or registered user(s);
  5. the date and time of the start and end of the communication;
  6. the telephone service used;
  7. the calling and called telephone numbers;

Directive's requirements:

  1. the calling telephone number;
  2. the name and address of the subscriber or registered user;
  3. the number(s) dialled (the telephone number(s) called), and, in cases involving supplementary services such as call forwarding or call transfer, the number or numbers to which the call is routed;
  4. the name(s) and address(es) of the destination subscriber(s) or registered user(s);
  5. the date and time of the start and end of the communication;
  6. the telephone service used;
  7. the calling and called telephone numbers;
  8. the International Mobile Subscriber Identity (IMSI) of the calling party;
  9. the International Mobile Equipment Identity (IMEI) of the calling party;
  10. the IMSI of the called party;
  11. the IMEI of the called party;
  12. in the case of pre-paid anonymous services, the date and time of the initial activation of the service and the location label (Cell ID) from which the service was activated;
  13. the location label (Cell ID) at the start of the communication;
  14. data identifying the geographic location of cells by reference to their location labels (Cell ID) during the period for which communications data are retained.

Directive's requirements:

  1. the user ID(s) allocated;
  2. the user ID and telephone number allocated to any communication entering the public telephone network;
  3. the name and address of the subscriber or registered user to whom an Internet Protocol (IP) address, user ID or telephone number was allocated at the time of the communication;
  4. the name(s) and address(es) of the subscriber(s) or registered user(s) and user ID of the intended recipient of the communication;
  5. the date and time of the log-in and log-off of the Internet e-mail service or Internet telephony service, based on a certain time zone;
  6. the Internet service used;
  7. the calling telephone number for dial-up access;
  8. the digital subscriber line (DSL) or other end point of the originator of the communication;

Directive's requirements:

  1. the user ID(s) allocated;
  2. the user ID and telephone number allocated to any communication entering the public telephone network;
  3. the name and address of the subscriber or registered user to whom an Internet Protocol (IP) address, user ID or telephone number was allocated at the time of the communication;
  4. the date and time of the log-in and log-off of the Internet access service, based on a certain time zone, together with the IP address, whether dynamic or static, allocated by the Internet access service provider to a communication, and the user ID of the subscriber or registered user;
  5. the calling telephone number for dial-up access;
  6. the digital subscriber line (DSL) or other end point of the originator of the communication;

Directive's requirements:

  1. the user ID(s) allocated;
  2. the user ID and telephone number allocated to any communication entering the public telephone network;
  3. the name and address of the subscriber or registered user to whom an Internet Protocol (IP) address, user ID or telephone number was allocated at the time of the communication;
  4. the user ID or telephone number of the intended recipient(s) of an Internet telephony call;
  5. the name(s) and address(es) of the subscriber(s) or registered user(s) and user ID of the intended recipient of the communication;
  6. the date and time of the log-in and log-off of the Internet e-mail service or Internet telephony service, based on a certain time zone;
  7. the Internet service used;
  8. the calling telephone number for dial-up access;
  9. the digital subscriber line (DSL) or other end point of the originator of the communication;
 -
 providers of publicly available electronic communications services or of a public communications network
 competent national authorities in specific cases for the purpose of the investigation, detection and prosecution of serious crime, as defined by each Member State in its national law
 yes, action brought by Administrative Court of Wiesbaden (Germany)
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Austria

 not yet, draft law available











Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Belgium

 no
Reported:
  1. Loi du 21 mars 1991 portant réforme de certaines entreprises publiques économiques. Loi; Moniteur Belge , date pub: 27/03/1991 ; ref.: (MNE(2007)58028)
  2. Arrêté royal du 9 janvier 2003 portant exécution des articles 46bis, § 2, alinéa 1er, 88bis, § 2, alinéas 1er et 3, et 90quater, § 2, alinéa 3, du code d'instruction criminelle ainsi que de l'article 109ter, E, § 2, de la loi du 21 mars 1991 portant réforme de certaines entreprises publiques économiques. Arrêté royal; Moniteur Belge , date pub: 10/02/2003 ; ref.: (MNE(2007)58029)










Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Bulgaria

 yes
  12 months
 Reported:
  1. Electronic Communications Act, promulgated in State Gazette No.41 as of May 22, 2007, amended State Gazette No.27 as of April 9,2010;;
  2. Regulation # 40 on the categories of data and the procedure under which they would be retained and disclosed by companies providing publicly available electronic communication networks and/or services for the needs of national security and crime investigation, promulgated in State Gazette No. 9 as of January 29, 2008, amended State Gazette No.108 as of December 19, 2008;





Providers of public communications networks and/or publicly available electronic communications services The head officer of the:

1. Specialized departments, the local units and the independent territorial directorates within the State Agency for National Security; 2. Directorate General “Criminal Police”, Directorate General “Fight against organized crime” and its local units, Directorate General “Security”, Directorate General “Border Police”, directorate “Internal security”, Sofia Directorate of Internal affairs, the regional directorates within the MoI; 3. The Military Information Service and the “Military Police” within the Ministry of Defence; 4. National Intelligence Service The data is retained for the purposes of detection and investigation of serious crimes and crimes under Art. 319a - 319e of the Penal Code (cybercrimes), and for the location of missing or wanted persons. Access id granted only after a court warrant.

yes, Supreme Administrative Court Challenge brought by Access to Information Programme
 Access to Information Programme (AIP)
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Cyprus

 yes 6 months

Reported:

Ο Περί Διατήρησης Τηλεπικοινωνιακών Δεδομένων με Σκοπό τη Διεύρηνση Σοβαρών Ποινικών Αδικημάτων Νόμος του 2007. Νόμος , no.: Ν. 183(Ι)/2007; Cyprus Gazette , no.: 4154 , date pub: 31/12/2007 , page: 01466-01483 ; date into force/en vigueur: 31/12/2007 ; ref.: (MNE(2008)50638)








Supreme Court ruled 1 Feb 2011 that retained data can only be accessed "in cases of convicted and unconvicted prisoners and business correspondence and communication of bankrupts during the bankruptcy administration" (Art. 17 of Constitution)
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Czech Republic

 yes   12 months
 Act on Electronic Communications No. 127/2005 Coll. as amended by law 247/2008 Coll.

1. pre-paid phone card identificator

2. public phone box identification (number and geographic position data)

1. IP adresses of terminals from which were sent SMS (service od sending SMS from web form, quite widespread service in the Czech Rep.)

2. every link between MSISDN and IMEI used together in the network

3. ID of mobile phone credit coupon and its link to mobile phone number (at anonymous SIMs)

4. "additional information" not more specified.

1. amount of data transferred

2. use of secured communication

3. identificator of user´s device


1. status of event (e.g.fail/success, usual/unusual termination of connection)

2. amount of uploaded/downloaded data

3. "identificators of interest" (except IP adress is named as example port number)

4. method and status requests for service

5. URI identificators and its parametres requirements


1. transport protocol

2. amount of data transferred


Providers of public communication network or of publicly accessible services of electronic communications

Police, public prosecutors and courts in penal proceedings.

Provisions in Police Act enable to forward the data to Interpol, SIS and Europol or foreign policies in case of "serious danger".

Similar vague backdoor for transfer of rrtained data to intelligence services are in current and also in proposed new Police Act.


Yes, submitted in March 2010, Constitutional Court file no. Pl. ÚS 24/10, more info Iuridicum Remedium (IuRe)
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Denmark

 yes
 12 months

Reported:

  1. Bekendtgørelse om udbydere af elektroniske kommunikationsnets og elektroniske kommunikationstjenesters registrering og opbevaring af oplysninger om teletrafik. Bekendtgørelse , no.: 988; Lovtidende A , date pub: 13/10/2006 ; date into force/en vigueur: 15/09/2007 ; ref.: (MNE(2007)56962)
  2. Bekendtgørelse om udbydere af elektroniske kommunikationsnets og elektroniske kommunikationstjenesters registrering og opbevaring af oplysninger om teletrafik. Bekendtgørelse , no.: 988; Lovtidende A , date pub: 13/10/2006 ; date into force/en vigueur: 15/09/2007 ; ref.: (MNE(2007)56966)
  3. Bekendtgørelse om udbydere af elektroniske kommunikationsnets og elektroniske kommunikationstjenesters registrering og opbevaring af oplysninger om teletrafik (logningsbekendtgørelsen). Bekendtgørelse , no.: 988; Lovtidende A , date pub: 13/10/2006 ; date into force/en vigueur: 15/09/2007 ; ref.: (MNE(2007)56970)










Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Estonia

 yes 12 months

Reported:

ELEKTROONILISE SIDE SEADUSE JA RAHVATERVISE SEADUSE MUUTMISE SEADUS. seaduse parandus , no.: RTI, 07.12.2007, 63, 397 ; Elektrooniline Riigi Teataja , no.: RTI, 07.12.2007, 63, 397 ; ref.: (MNE(2007)58607)











Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Finland

 yes 12 months Reported:
  1. Viestintäviraston määräys tunnistamistietojen tallennusvelvollisuudesta / Kommunikationsverkets föreskrift om skyldighet att lagra identifieringsuppgifter
  2. Laki sähköisen viestinnän tietosuojalain muuttamisesta / Lag om ändring av lagen om dataskydd vid elektronisk kommunikation









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

France

 yes 12 months

Reported:

Décret no 2006-358 du 24 mars 2006 relatif à la conservation des données des communications électroniques. Décret , no.: 2006-358; Journal Officiel de la République Française (JORF) , date pub: 26/03/2006 ; date into force/en vigueur: 27/03/2006 ; ref.: (MNE(2007)56763)









No. A challenge was rejected by the Constitutional Court (decision of 07/08/2007). However, the Court decided providers must be reimbursed (decision of 07/08/2007).
Member State EU directive transposed? Data Retention Period Legal instruments and date of entry into force Data to be retained beyond the directive's requirements: fixed line telephony Data to be retained beyond the directive's requirements: mobile telephony Data to be retained beyond the directive's requirements: E-Mail Data to be retained beyond the directive's requirements: Internet access Data to be retained beyond the directive's requirements: Internet telephony Data to be retained beyond the directive's requirements: other Who is compelled to retain data? Who is authorised to access retained data and for what purposes? Legal challenges pending? Competent NGO

Germany

no (declared unconstitutional on 2 March 2010)

-

-

-

-

-

-

-

Any person providing or assisting in providing telecommunications services and in so doing allocating subscription IDs or providing telecommunications connections for IDs allocated by other parties (applies to telephony and DSL lines, including prepaid services, but not e-mail services) is to collect, prior to activation, and store the name and address of the allocation holder, the date of birth and in the case of fixed lines, additionally the address for the line, even if such data are not required for operational purposes (§ 111 TKG). The subscriber directories are electronically accessible by all German law enforcement and intelligence agencies (§ 112 TKG).

Working Group on Data Retention (AK Vorrat)

Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 		Legal challenges pending?
 Competent NGO

Greece

 not yet










Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Hungary

 yes 12 months Reported: 15 acts







yes, Constitutional Court challenge brought by theHungarian Civil Liberties Union (HCLU)
 Hungarian Civil Liberties Union (HCLU)
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Ireland

Yes.

25 months phone records, 13 months Internet records (may be kept for up to 25 months). Communications (Retention of Data) Act 2011. Unsuccessful calls to be retained Unsuccessful calls to be retained
  • with consent of a person to whom data relates
  • in accordance with a court order
  • authorised by the Data Protection Commissioner
  • Garda not below rank of Chief Superintendent
  • Officer not below rank of colonel of Permanent Defence Force
  • Officer of Revenue Commissioners not below rank of principal officer

yes, High Courtchallenge brought by DRI (latest updates)

Digital Rights Ireland

See background on Irish law here.

Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Italy

 yes
 Telephony: six months (24 in case of judicial proceedings), Internet: 12 months

Reported:

Attuazione della direttiva 2006/24/CE riguardante la conservazione dei dati generati o trattati nell'ambito della fornitura di servizi di comunicazione elettronica accessibili al pubblico o di reti pubbliche di comunicazione e che modifica la direttiva 2002/58/CE.









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Latvia

 yes 18 months

Reported:

  1. Kārtība, kādā pirmstiesas izmeklēšanas iestādes, operatīvās darbības subjekti, valsts drošības iestādes, prokuratūra un tiesa pieprasa un elektronisko sakaru komersants nodod saglabājamos datus, kā arī kārtība, kādā apkopo statistisko informāciju par saglabājamo datu pieprasījumiem un to izsniegšanu. Ministru Kabineta noteikumi , no.: 820; Latvijas Vēstnesis , no.: 197 , date pub: 07/12/2007 ; date into force/en vigueur: 08/12/2007 ; ref.: (MNE(2008)50003)
  2. Grozījumi Elektronisko sakaru likumā. Likums; Latvijas Vēstnesis , no.: 83 , date pub: 24/05/2007 ; date into force/en vigueur: 07/06/2007 ; ref.: (MNE(2007)54265)










Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Lithuania

 yes
 6 months

Reported:

  1. Lietuvos Respublikos asmens duomenų teisinės apsaugos įstatymo pakeitimo įstatymas Nr. X-1444
  2. Lietuvos Respublikos elektroninių ryšių įstatymas Nr. IX-2135









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Luxemburg

 not transposed 0

Reported:

  1. Loi du 30 mai 2005 – relative aux dispositions spécifiques de protection de la personne à l’égard du traitement des données à caractère personnel dans le secteur des communications électroniques et – portant modification des articles 88-2 et 88-4 du Code d’instruction criminelle. Loi; Mémorial Luxembourgeois A , no.: 73 , date pub: 07/06/2005 , page: 01168-01173 ; ref.: (MNE(2008)52016)
  2. Loi du 27 juillet 2007 portant modification – de la loi du 2 août 2002 relative à la protection des personnes à l’égard du traitement des données à caractère personnel; – des articles 4 paragraphe (3) lettre d); 5 paragraphe (1) lettre a); 9 paragraphe (1) lettre a) et 12 de la loi du 30 mai 2005 concernant la protection de la vie privée dans le secteur des communications électroniques et – de l’article 23 paragraphe (2) points 1. et 2. de la loi du 8 juin 2004 sur la liberté d’expression dans les médias. Loi; Mémorial Luxembourgeois A , no.: 131 , date pub: 08/08/2007 , page: 02330-02338 ; ref.: (MNE(2008)52017)
  3. Texte coordonné de la loi du 2 août 2002 relative à la protection des personnes à l’égard du traitement des données à caractère personnel modifiée par la loi du 31 juillet 2006, la loi du 22 décembre 2006, la loi du 27 juillet 2007. Loi; Mémorial Luxembourgeois A , no.: 131 , date pub: 08/08/2007 , page: 02339-02361 ; ref.: (MNE(2008)52019)










Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Malta

 yes
 12 months, Internet 6 months

Reported:

  1. L.N. 198 of 2008 Data Protection Act (Cap. 440) Processing of Personal Data(Electronic Communications Sector) (Amendment) Regulations, 2008
  2. L.N. 199 of 2008 Electronic Communications (Regulation) Act (CAP. 399)Electronic Communications (Personal Data and Protection of Privacy) (Amendment) Regulations, 2008









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Netherlands

 Yes.
 12 months. Wet bewaarplicht telecommunicatiegegevens, passed Senate on 7 July 2009. Plus law to be proposed by government that will reduce period for Internet to 6 months.
No.








Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Poland

 yes
 24 months for all sorts of data required by the Directive
 1. The Telecommunication Law Amendment of 24 April 2009 (Journal Od Laws of 2009, No.85 item 716).
2.The Regulation of the Minister of Infrastructure of 28 December 2009 on a detailed specification of data and types of operators of public telecommunications networks or providers of publicly available telecommunications services obliged for its retention and storage, Journal of Laws of 2009, No 226 item 1828, went into force on 1 January 2010.


data identifying beam and working range of antenna of BTS






Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Portugal

 yes
 12 months

Reported:

Assembleia da República-Transpõe para a ordem jurídica interna a Directiva n.º 2006/24/CE, do Parlamento Europeu e do Conselho, de 15 de Março, relativa à conservação de dados gerados ou tratados no contexto da oferta de serviços de comunicações electrónicas publicamente disponíveis ou de redes públicas de comunicações









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Romania

yes, but declared unconstitutional

6 months

Reported:

Lege privind reținerea datelor generate sau prelucrate de furnizorii de serv icii de comunicații electronice destinate publicului sau de rețele publice de comunicații, precum și pentru modificarea Legii nr. 506/2004 privind prelucrarea datelor cu caracter personal și protecția vieții private în sectorul comunicațiilor electronice

declared unconstitutional







Electronic communication providers (same definition as in the telecom laws)

Prosecutors, with Judicial authorisation.

Competent National Security Instututions (?!?)

Only for serious crimes = defined as crimes agains t the State, organized crimes and terrorism crimes


APTI

Comisariatul pentru Societatea Civila

Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Slovakia

 yes 6 months for Internet services, 12 months for another types of communication

Reported: many









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Slovenia

 yes 24 months

Reported:

Zakon o spremembah in dopolnitvah Zakona o elektronskih komunikacijah. Zakon; Uradni list RS , no.: 129/2006 , date pub: 12/12/2006 , page: 14113-14128 ; date into force/en vigueur: 27/12/2006 ; ref.: (MNE(2007)50469)











Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Spain

 yes
 12 months; This timeline could be reduced or extended to a minimum of 6 months and a maximum of 24 months, on request of the compentent authorities

Reported:

LEY 25/2007, de 18 de octubre, de conservación de datos relativos a las comunicaciones electrónicas y a las redes públicas de comunicaciones. Ley , no.: 25/2007; Boletín Oficial del Estado ( B.O.E ) , no.: 251/2007 , date pub: 19/10/2007 , page: 42517-42523 ; date into force/en vigueur: 08/11/2007 ; ref.: (MNE(2007)57464)

None
 None
 None
 None
 None
 None
 same as the Directive: telecomunications providers; los operadores que presten servicios de comunicaciones electrónicas disponibles al público o exploten redes públicas de comunicaciones (art.2)
 All Police/Security forces when acting under an order of the Attorney General or Courts of Justice

Miembros de las Fuerzas y Cuerpos de Seguridad del Estado, cuando desempeñen funciones de Policia Judicial (art.6.2.a)

Funcionarios de la Dirección Adjunta de Vigilancia Aduanera, en el desarrollo de sus competencias como policía judicial (art.6.2.b)

El personal del Centro Nacional de Inteligencia en el curso de investigaciones de seguridad sobre personas o entidades (art.6.2.c)

 None (as yet)
 Access Info Europe (http://www.access-info.org/en/civil-liberties)
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Sweden

 Not yet










New Renaissance
Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

United Kingdom

 partial
 12 months

Reported:

The Data Retention (EC Directive) Regulations 2007. Statutory instrument (SI) , no.: Statutory Instrument 20; Her Majesty's Stationery Office (HMSO) , no.: ISBN 978 0 11 078328 4 ; date into force/en vigueur: 01/10/2007 ; ref.: (MNE(2007)57200)











Non-EU- State
 		Data retention implemented ?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO


Iceland

 yes











Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Liechtenstein

 yes 6 months Telekommunikationsgesetz (2006)









Member State
 		EU directive transposed?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Norway

 not yet

Case Status in the Parliament

The leading government party Arbeiderpartiet wants the policy implemented and has proposed to the parliament at 2010-12-17.











Non-EU-State
 		Data retention implemented ?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO

Switzerland












Non-EU-State
 		Data retention implemented ?
 Data Retention Period
 Legal instruments and date of entry into force
 Data to be retained beyond the directive's requirements: fixed line telephony
 Data to be retained beyond the directive's requirements: mobile telephony
 Data to be retained beyond the directive's requirements: E-Mail
 Data to be retained beyond the directive's requirements: Internet access
 Data to be retained beyond the directive's requirements: Internet telephony
 Data to be retained beyond the directive's requirements: other
 Who is compelled to retain data?
 Who is authorised to access retained data and for what purposes?
 Legal challenges pending?
 Competent NGO
Switzerland yes, as of 2002 6 months




Buyers of prepaid mobile phone cards must be identified and registered by ID document (name, address, date of birth) operators of fixed line and mobile telephony, public ip-based telecommunications services
no

Please update this table by entering information on data retention in your country:

See also

Abgerufen von „http://wiki.vorratsdatenspeicherung.de/index.php?title=Overview_of_national_data_retention_policies&oldid=109259“