Following the invalidation of the Data Retention Directive by the Court of Justice of the EU in April 2014, the e-Privacy Directive constitutes the EU legal basis for member states to oblige electronic service providers (ECS) to retain metadata (e.g. traffic and location data).
Our latest benchmark shows that of the 18 surveyed European countries, only Germany, the Netherlands and Romania do not have any data retention rules in force.

Nearly all the surveyed countries impose on providers of electronic communications services general and indiscriminate data retention obligations. Only Belgium, Denmark and the UK foresee targeted retention of metadata.
The European Commission is consulting on the possible reintroduction of an EU-wide framework for metadata retention obligations.
For more information and access to the full benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
05 June 26
Alternative delivery operators mostly remain outside postal regulation
Our new European benchmark provides information on whether alternative delivery operators are considered as postal service providers.
01 June 26
Privacy in the digital age
Our latest benchmark compares data protection laws across 14 jurisdictions. It covers recent legal updates, lawful bases for processing personal data, and extraterritorial applicability. It also examines privacy rules for location, biometric, and children’s data, as well as enforcement practices involving these data types and big tech groups.
01 June 26
Fewer European countries offer local loop unbundling over copper