The EU Commission is making another attempt to regulate data retention across the EU. The goal is to store metadata such as location, connection times, and communication partners for a specific period of time – even without concrete suspicion. Supporters see this as a tool for more effective law enforcement. However, data protection advocates argue that it poses a disproportionate intrusion into the privacy of millions of people.
Whether surfing, making phone calls, or chatting – digital traces are constantly being created. These are precisely the traces that should be systematically stored in the future, if the EU Commission has its way. Officially, the goal is to improve the availability of evidence for investigative authorities. But the principle of indiscriminate data storage is highly controversial. Data protection and civil rights activists have been warning for years about a system that places everyone under general suspicion. The debate is not new, but it is now becoming more intense again – with concrete plans from Brussels.
What the EU is planning
The EU wants to end national unilateral action on data retention. Currently, member states have very different regulations. According to the Commission, this leads to data often being deleted before it is requested by law enforcement authorities. Therefore, the EU is planning a uniform legal framework for the temporary retention of so-called non-content data – metadata such as location information, duration of communication, and telephone numbers involved. According to Commission President Ursula von der Leyen, such data is crucial for law enforcement in a digital society. The Commission sees this as a prerequisite for a safer EU – both online and offline.
The Commission's argument
The central argument is that investigations should be conducted more effectively. Especially in cross-border crime, it is a hindrance if individual countries delete data too early or store it in an incompatible manner. Therefore, in addition to voluntary standards, the EU is proposing binding legal regulations that would apply to all member states.
Data protection advocates sound the alarm
While security authorities talk about greater efficiency, data protection advocates point to fundamental rights. Metadata may not contain any content, but it reveals a lot – such as who was where and when, with whom one regularly communicates, when one sleeps, works, or travels. The European Court of Justice has already ruled several times that blanket data retention violates EU law. Nevertheless, the Commission is once again pushing in precisely this direction.
- The central criticism: there's no reason for it. Millions of people would be under surveillance without ever having attracted attention. Instead of targeted investigations, the threat is an anonymous but omnipresent form of mass surveillance. Many are asking: How safe is a society really if it gives up fundamental freedoms for the sake of it?
What could happen next
This is not yet a law, but rather a so-called exploratory paper. The EU Commission intends to use it to examine what a legally viable concept might look like and how the member states feel about it. The next step would be a concrete legislative proposal – dependent on whether a majority in the EU can support it.
Data retention: An old dispute with new risks
The EU is bringing the issue of data retention back to the table. The goal: uniform rules for greater security. But the price for this would be high. The systematic collection of metadata puts the privacy of all citizens at the center of state control. Precisely because previous attempts have failed legally, it is important to take a closer look. The criticism is justified – because in a free society, the protection of personal data should not be given up lightly. (Image: Shutterstock / Gorodenkoff)
- From 20 June: EU label becomes mandatory for all mobile devices
- Apple brings Tap to Pay to 18 new European countries
- Apple under pressure: EU cracks down on fee model