Following the invalidation of the Data Retention Directive by the Court of Justice of the EU in April 2014, the e-Privacy Directive constitutes the EU legal basis for member states to oblige electronic service providers (ECS) to retain metadata (e.g. traffic and location data).
Our latest benchmark shows that of the 18 surveyed European countries, only Germany, the Netherlands and Romania do not have any data retention rules in force.

Nearly all the surveyed countries impose on providers of electronic communications services general and indiscriminate data retention obligations. Only Belgium, Denmark and the UK foresee targeted retention of metadata.
The European Commission is consulting on the possible reintroduction of an EU-wide framework for metadata retention obligations.
For more information and access to the full benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
22 October 26
IoT regulation: new operational requirements reshape global connectivity
Cullen International's Quarterly Regulatory Update on IoT and M2M Services (Q3 2026) highlights how national regulators around the globe are shaping the future of IoT and M2M services.
21 October 26
Americas countries require satellite service providers to obtain a spectrum licence
Cullen International’s latest benchmark compares satellite regulation across the Americas, including service and spectrum licensing, registration requirements, spectrum allocations and fees, interference rules, migration between frequency bands and recent regulatory developments.
21 October 26
Around the world, many regulators examined communications apps through distinct lenses, but their interventions did not always lead to any enforcement
Cullen International's latest Global Trends benchmark for communications apps regulation shows how telecoms, consumer protection, data protection and competition regulators intervene in the number-independent communications apps sector. The benchmark addresses regulation apps such as WhatsApp, WeChat and iMessage across 13 jurisdictions around the world.