Post #3981227

2026-07-21 08:25 UTC

Towards new EU data retention rules EPRS | European Parliamentary Research Service - Silvia González Vidal and Hendrik Mildebrath Published: 7 July 2026 "Despite judicial and now-defunct legislative efforts to harmonise data retention practices across the EU, national data retention regimes remain fragmented, with some countries adopting their own rules and others none at all. Law enforcement authorities report operational difficulties, while service providers face significant compliance burdens and costs. Although the Court's case law has clarified the general principles governing data retention, important practical details remain unresolved. In response, the European Commission is assessing the need for a new harmonised EU framework, with a proposal potentially forthcoming. However, stakeholders are divided over its scope and safeguards." https://www.europarl.europa.eu/thinktank/en/document/EPRS_BRI(2026)789333

Replies (1)

@aristot73@infosec.exchange 2026-07-21 08:26

Renewed debate on a future EU data retention framework EPRS | European Parliamentary Research Service - Hendrik Mildebrath and Silvia González Vidal Published: 7 July 2026 "Although the Court of Justice of the European Union (CJEU) continued developing EU data retention standards after invalidating the former EU Data Retention Directive in 2014, national interpretations diverge and efforts towards alignment have stalled. Law enforcement and judicial authorities report operational challenges arising from this fragmentation, sometimes precluding timely access to communications-related data necessary for identifying suspects and victims, reconstructing criminal activity, and generating investigative leads. In response to these issues and to calls from the Council, the European Commission is assessing the need for a new EU framework. Any legislative action would require a series of politically and legally sensitive design choices. Controversy may arise in relation to the legitimacy and appropriate scope of renewed EU legislative intervention; the operationalisation of the CJEU's system of graduated objectives and safeguards; the adequacy of retention periods; the design of access conditions and safeguards; and, possibly, the need to regulate automated processing of retained datasets. This briefing builds on the overviews provided in the EPRS briefings 'Towards new EU data retention rules' and 'Mapping CJEU limits on data retention framework'." https://www.europarl.europa.eu/thinktank/en/document/EPRS_BRI(2026)789334

Open ##3981250