Scrapped EU data retention proposal may be making a return in new form

The European Commission could be about to present a new proposal on data retention later this year. Information from multiple sources within the EU’s institutions indicates that the issue is once again on the agenda, despite the previous data retention directive being struck down by the European Court of Justice just over a decade ago.

The original directive was introduced after the terrorist attacks in Madrid in 2004 and London in 2005. The regulations required telecom operators and internet providers to store information about citizens’ electronic communications for a certain period. However, the content of calls or messages was not saved.

In 2014, the European Court of Justice ruled that the directive violated fundamental rights and annulled it. Since then, several member states and EU institutions have sought new ways to enable the retention of communications data.

The issue has been repeatedly discussed in the Council of Ministers, while law enforcement authorities have argued that access to such information is important in the fight against organized crime and terrorism.

According to information circulating within the EU and highlighted by journalist and social commentator Henrik Alexandersson here, the Commission may now be working on a new legislative proposal expected to be presented this autumn. No details have yet been made public, but the debate concerns, among other things, how authorities can gain access to digital information without conflicting with previous judgments from the European Court of Justice.

More far-reaching

Privacy advocates warn that new rules risk being more comprehensive than the previous directive. They point out that today’s digital communication largely takes place via messaging apps, social media, and cloud services, which could mean that significantly more information would be covered by future legislation.

The issue is therefore expected to be the subject of an intense political debate this autumn, where law enforcement and national security will be weighed against the protection of citizens’ personal privacy. However, no formal legislative proposal from the European Commission has yet been presented.