Following the invalidation of the Data Retention Directive by the Court of Justice of the EU in April 2014, the e-Privacy Directive constitutes the EU legal basis for member states to oblige electronic service providers (ECS) to retain metadata (e.g. traffic and location data).
Our latest benchmark shows that of the 18 surveyed European countries, only Germany, the Netherlands and Romania do not have any data retention rules in force.

Nearly all the surveyed countries impose on providers of electronic communications services general and indiscriminate data retention obligations. Only Belgium, Denmark and the UK foresee targeted retention of metadata.
The European Commission is consulting on the possible reintroduction of an EU-wide framework for metadata retention obligations.
For more information and access to the full benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
18 September 26
EU Timeline: regulatory milestones for the remainder of 2026
This edition of Cullen International’s EU Timeline highlights key policy and regulatory developments foreseen at EU level until the end of 2026.
17 September 26
Electric power backup and other redundancy requirements for telecoms operators across Europe
Our latest European Benchmark explores electric power backup and other redundancy requirements for mobile network operators to ensure service continuity during power outages, natural disasters, and other events impacting the operation of telecoms networks.
16 September 26
Mobile public warning systems (PWS) in the Americas
Cullen International’s new benchmark shows that public warning systems (PWS) are operational or being implemented in most of the 12 surveyed Americas countries.