Telcos should only retain metadata to fight serious crime, EU judge says

The legal opinion threatens the UK's Investigatory Powers Bill, say digital rights campaigners

Governments may order telcos to retain customer data, but only to fight serious crime, a top European Union judge has advised.

Lobby groups European Digital Rights (EDRi) and Privacy International welcomed the recommendation, saying it adds to a growing body of legal opinion opposing mass data retention. It could even, said Privacy International, derail the U.K.'s Investigatory Powers Bill, introduced in March by Theresa May, then home secretary and now prime minister.

Advocate General Henrik Saugmandsgaard Øe advised that a general obligation to retain data may be compatible with EU law, but cautioned that laws imposing such obligations should respect personal privacy and impose strict controls on access to the retained data, its security, and the period it is kept. Furthermore, such obligations can only be justified when strictly necessary in the fight against serious crime.

Øe gave his opinion Tuesday on two cases before the Court of Justice of the EU challenging data retention laws in Sweden and the U.K. Such opinions are only advisory but are often followed by the full court, which is now beginning its deliberations on the cases.

The CJEU was called on to rule on legal questions referred by national courts in Sweden and the U.K. regarding the retention of telecommunications metadata: information about who contacted whom, when, how, and for how long. Such information can be useful in investigating crimes, but its mass retention without good reason is considered by some a breach of privacy rights.

That was the view of the CJEU when, in 2014, it struck down the 2006 EU Data Retention Directive in a case involving Digital Rights Ireland.

However, since then, EU member states have continued to introduce or enforce data retention legislation in conflict with the CJEU's ruling, according to EDRi.

"It is time for EU member states to start respecting the law. It is time for the European Commission to do its job to ensure that the law is respected," EDRi executive director Joe McNamee said via email. "Data retention is an extreme measure which can only be implemented if the criteria repeatedly laid down by the court are respected."

Privacy International general counsel Caroline Wilson Palow hopes the CJEU will follow the advocate general's opinion, which she sees as a serious blow to the U.K.'s Investigatory Powers Bill, she said via email.

The mass surveillance powers the bill would introduce go far beyond the tackling serious crime that the advocate general sees as acceptable.

"They would give a range of public bodies, not just the police and intelligence agencies, the power to access the personal data of innocent people, often without any form of warrant," she wrote.

The fate of the Investigatory Powers Bill depends on a number of factors. The upper house of the U.K.'s parliament, the House of Lords, still has a final say in its content.

Beyond that, even if the CJEU declares its surveillance powers illegal under EU law, there remains the question of whether the U.K. will remain part of the EU for long enough for it to matter. In the wake of the June 23 "Brexit" referendum vote, Prime Minister May plans to lead the U.K. out of the EU and, perhaps, beyond the reach of the CJEU's rulings.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Peter Sayer

IDG News Service
Show Comments

Father’s Day Gift Guide

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?