OpenLobby.EU
Explore

Impact assessment on retention of data by service providers for criminal proceedings

Institutional affairs

Certain metadata processed by service providers are needed to effectively fight crime. Since no EU-wide legal framework exists requiring providers to retain metadata for a reasonable and limited period of time for criminal proceedings, data may no longer exist by the time authorities request them. The divergences between EU Member States’ laws governing the retention of data can hamper criminal proceedings and affect service providers operating across the EU. This initiative is to assess the impact of data retention rules at EU level.

Links

Public consultation

ID: 14680

Lobbying Activity

28 responses

Microsoft calls for harmonized EU data retention rules

Microsoft Corporation, 18 Jun 2025

Microsoft requests a harmonized EU framework limited to basic subscriber information and traffic data. They want minimal access conditions, transparency requirements, and carve-outs for small companies. The company opposes data localization requirements and government direct access to networks.
This would eliminate the need to comply with multiple national requirements across EU markets.
Law enforcement agencies lose flexibility to impose stronger national retention requirements and direct network access.

Telefónica Urges Harmonised Data Retention and Mandatory Cost Compensation

Telefonica, S.A., 18 Jun 2025

Telefónica requests harmonised rules for data types, retention periods, and mandatory cost compensation. They advocate for including messaging apps to ensure a fair level playing field.
This would eliminate financial burdens by shifting data storage costs to state funds.
Major non-EU messaging platforms would lose their exemption from metadata storage and disclosure requirements.

Deutsche Telekom urges strict limits and cost compensation

Deutsche Telekom, 18 Jun 2025

Deutsche Telekom requests that data storage be limited to specific categories according to court rulings. They demand mandatory financial compensation for service providers and shorter retention periods to manage costs.
Mandatory compensation and shorter storage periods would lower the company's significant regulatory costs.

European Digital Rights rejects EU mass surveillance data retention plans

European Digital Rights, 18 Jun 2025

EDRi opposes a new EU instrument forcing providers to massively retain user metadata. They recommend starting infringement procedures against Member States with illegal data retention laws. The organization rejects indiscriminate retention as there is no proven link to crime.
Preventing this proposal avoids a rule of law crisis and protects user privacy.
Law enforcement agencies would face stricter limits on accessing private communication metadata.

Connect Europe Urges EU Harmonization and Mandatory Cost Compensation

Connect Europe, 18 Jun 2025

The organization requests harmonized rules to provide legal certainty. They demand an EU mechanism to compensate operators for the financial costs of storing data.
Harmonization and compensation would reduce regulatory fragmentation and reimburse operators for rising storage costs.
Internet-based communication providers would lose their current regulatory exemption and face new compliance costs.

EBU and RSF demand journalist exemptions from EU data retention rules

EBU-UER (European Broadcasting Union), 17 Jun 2025

EBU and RSF urge that data retention rules must exclude journalists and media providers. They demand strong legal safeguards and court-ordered investigations with independent oversight.
This would safeguard source confidentiality and protect media professionals from intrusive state surveillance.
Law enforcement may struggle to gather evidence in cases involving media contacts.

Technology Ireland urges harmonised and proportionate EU data retention

Ibec, 18 Jun 2025

They propose a harmonised framework that distinguishes between traditional telecommunications and internet-based services. They advocate for a phased implementation starting with subscriber data and limited to serious crimes.
Harmonisation and a phased approach would reduce legal uncertainty and give companies time to adapt.
Law enforcement agencies might face intelligence gaps due to restricted data categories and delayed implementation.

GSMA urges mandatory compensation for data retention costs

GSMA Europe, 18 Jun 2025

GSMA requests harmonized rules and mandatory cost compensation for service providers. They also advocate for a level playing field including internet-based communications.
This would shift the financial burden of data storage from operators to governments.
Internet messaging apps would lose their exemption from costly and complex data storage requirements.

Journalists' Federation warns against dismantling media freedom in data laws

European Federation of Journalists, 17 Jun 2025

The federation demands that any future data retention laws explicitly exclude journalists and media workers. They argue that protecting sources is essential for media freedom and democratic accountability.
This protection ensures journalists can investigate sensitive topics without risk of exposing their sources.
Security agencies lose investigative tools when mandatory data retention exemptions are granted to journalists.

German Bar Association urges EU to reject blanket data retention

Deutscher Anwaltverein (German Bar Association), 18 Jun 2025

The German Bar Association opposes indiscriminate data storage and urges the Commission to adopt the 'Quick Freeze' approach for targeted retention. They demand that professional secrecy be explicitly protected through mandatory judicial authorization and specific legal provisions.
These protections would ensure that sensitive lawyer-client communications remain confidential and secure from surveillance.
Law enforcement agencies would face stricter limits when attempting to gather digital evidence for investigations.

Vodafone and German operators demand strict limits on EU data retention

Vodafone GmbH, 18 Jun 2025

The organization demands that any EU rules strictly follow court rulings by limiting storage to IP addresses for severe crimes. They request a mandatory cost compensation scheme and alignment with existing national laws.
This approach would provide financial reimbursement and minimize the costs of storing massive data volumes.
Law enforcement agencies lose broad access to metadata for investigating crimes that aren't deemed severe.

European lawyers demand strict client privacy in data rules

Council of Bars and Law Societies of Europe, 18 Jun 2025

The CCBE demands explicit protection for lawyer-client confidentiality and independent judicial oversight for data access. They advocate for minimal retention periods and specific safeguards against interference with fundamental rights.
Protecting these privileges ensures that lawyer-client communications remain confidential and legally secure.
Law enforcement agencies would face more stringent limits and procedural hurdles when accessing data.

Digital Currencies Governance Group warns against mass digital surveillance

Digital Currencies Governance Group Limited, 18 Jun 2025

The group calls for strictly targeted data retention limited to a maximum of 90 days for specific providers. They argue blanket requirements violate privacy rights and ignore previous European Court of Justice rulings.
Digital asset and AI firms would avoid the heavy costs and risks of unlimited data storage requirements.
Police and security agencies would have less historical data available for solving complex criminal cases.

Epicenter.works urges EU to scrap data retention plans

epicenter.works - Plattform Grundrechtspolitik, 17 Jun 2025

The group urges the Commission to abort plans for reintroducing data retention. They recommend targeted alternatives like quick freeze and infringement proceedings against member states.
Achieving this would fulfill the organization's core mission of protecting fundamental digital rights.
Police forces lose access to data frequently used for investigating petty crimes.

Consultation response

Verband der Anbieter von Telekommunikations- und Mehrwertdiensten, 18 Jun 2025

Angesichts der massiven Investitionen, die TK-Anbieter bereits auf Basis früherer Regelungen tätigen mussten, betont der VATM ausdrücklich, dass zukünftige Vorhaben sorgfältig vorbereitet, breit abgestimmt und finanziell abgefedert werden müssen. Schnellschüsse und einseitige Verpflichtungen…

Consultation response

Electronic Frontier Foundation, 18 Jun 2025

Please find attached the submission by the Electronic Frontier Foundation.

Consultation response

Proton AG, 18 Jun 2025

Proton welcomes the opportunity to provide feedback on the European Commission's call for evidence for the impact assessment on retention of data by service providers for criminal proceedings. Proton is a European company that builds a secure, privacy-first ecosystem of tools for secure…

Consultation response

MVNO Europe, 18 Jun 2025

Please find the feedback in the document attached.

Internet association eco warns against unlawful blanket data retention

eco - Verband der Internetwirtschaft, 18 Jun 2025

The association rejects blanket data retention as a violation of privacy rights. Existing evidence laws are sufficient. Any new rules would create unnecessary legal uncertainty.
Preventing new rules avoids heavy compliance costs and operational burdens for businesses.
Law enforcement may lose access to metadata required to investigate serious crimes.

Consultation response

Gewerkschaft der Polizei, 12 Jun 2025

We, as a European police union, advocate for a legislative initiative by the EU Commission to harmonize the rules on data retention in criminal proceedings for targeted data storage subject to judicial oversight and legal safeguards to enable effective law enforcement. As police officers…

Consultation response

Associazione Italiana Internet Provider, 10 Jun 2025

AIIP represents 63 ISPs, CSPs and IXPs and, as such, possesses direct experience with data retention obligations and operational processes. Italian national rules, as outlined in Art. 132 et seq. of D.lgs. No. 196/2003 (the Privacy Code), stipulate retention periods ranging from 30 days to 24…

Consultation response

Eesti Infotehnoloogia ja Telekommunikatsiooni Liit, 18 Jun 2025

Eesti Infotehnoloogia ja Telekommunikatsiooni Liit (ITL) esitab käesolevaga sisendi Euroopa Komisjoni kavandatava mõjuhinnangu jaoks, mis puudutab andmete säilitamist teenuseosutajate poolt kriminaalmenetluse tarbeks. Oleme Eesti IKT valdkonna koostöövõrgustik, kes kõneleb digiühiskonna…

Consultation response

European Federation of Police Unions, 13 Jun 2025

We, as a European police union, advocate for a legislative initiative by the EU Commission to harmonize the rules on data retention in criminal proceedings for targeted data storage subject to judicial oversight and legal safeguards to enable effective law enforcement. As police officers…

Consultation response

Transatel, 18 Jun 2025

Attached are Transatel's comments on the Call for Evidence regarding Retention of Data by Service Providers for Criminal Proceedings.

Consultation response

, 18 Jun 2025

File attached

Consultation response

Netnod AB, 13 Jun 2025

See attached PDF for full feedback. Netnod welcomes the opportunity to provide feedback on May 21 from EU-commission on Call for Evidence on Metadata Retention for Criminal Proceedings. Netnod hereby give the following commentary: - The call for evidence is based on the notion that it is beneficial…

Consultation response

STIFTELSEN FÖR INTERNETINFRASTRUKTUR, 9 Jun 2025

Internetstiftelsen vill härmed framföra följande synpunkter och särskilt lyfta behovet av att väga åtgärder mot allvarlig brottslighet mot skyddet för individens grundläggande rättigheter. Befogenheter att agera mot allvarlig brottslighet har stöd hos en stor del av befolkningen i Sverige (källa:…

Consultation response

Rechtsanwalt Dr. Anton Schaefer, 24 May 2025

In der Zusammenschau mit dem aktuellen Vorstoss einiger Regierungen der Unionsmitgliedstaaten, die Europäische Menschenrechtskonvention zu verwässern um den Regierungen der Nationalstaaten mehr Befugnisse zu geben, ist dieser erneute Vorstoss der Europäischen Kommission äusserst bedenklich. Dass…