From Metadata to Mass Surveillance? European Data Retention Revisited

This new report, “Data Retention Revisited,” published by the EDRi, critically revisits the question of data retention and concludes that the ongoing aspirations to reintroduce a data retention obligation in the EU remain in violation of EU law as long as the strict necessity of data retention is unproved and no genuinely targeted retention obligation is considered.

en flag
nl flag
et flag
fi flag
fr flag
de flag
pt flag
ru flag
es flag

Content Assessment: From Metadata to Mass Surveillance? European Data Retention Revisited

Information - 95%
Insight - 95%
Relevance - 95%
Objectivity - 90%
Authority - 95%

94%

Excellent

A short percentage-based assessment of the qualitative benefit of the recent post highlighting the new booklet from EDRi titled Digital Rights Revisited.

Editor’s Note: Shared with permission* from European Digital Rights (EDRi), an association of civil and human rights organizations from across Europe, the new booklet titled Data Retention Revisited explores the history of data retention in Europe, the legal framework, and the impact of data retention practices on fundamental rights. The booklet includes commentary on the intrusiveness of metadata and explores how necessity and proportionately fit into data retention practices, as well as its effectiveness, showcasing problems such as false positives and “technological solutionism.” The excellent booklet was written by researchers from the Information Law and Policy Lab in the Netherlands.

Data Retention Revisited 

Authored by Melinda Rucz and Sam Kloosterboer

Executive Summary

Following the judgments of the Court of Justice of the European Union in Digital Rights Ireland and Tele2/Watson, it appeared that the sun had set on blanket data retention in Europe. However, the data retention saga continues with renewed attempts to reinstate an EU legislative framework for blanket retention of telecommunications data. Data retention practices are highly privacy-intrusive as they reveal vast personal, even sensitive, information about the persons whose data is retained. Retention of telecommunications data discourages the contacting of single-purpose numbers and undermines the protection of journalistic sources. An inherently high risk of security breaches only amplifies these harmful effects of data retention, with numerous cyberattacks, data leaks, data abuses, and misuses documented.

In light of the far-reaching negative implications of data retention for fundamental rights, the Court of Justice of the European Union has required data retention practices to be strictly necessary. Nevertheless, the necessity of data retention for law enforcement purposes is most often simply assumed, while evidence is lacking about the marginal benefits of data retention compared to less intrusive alternatives. Moreover, data errors, incorrect interpretations, and false positives raise serious questions about the effectiveness of blanket data retention. The blind belief in the effectiveness of data-driven solutions manifests a worrying trend towards technological solutionism. While calls to reintroduce data retention often voice the need for harmonization and legal certainty, enforcing the Court’s judgments must be the default solution to ensure a harmonized approach to data retention in Europe. This report critically revisits the question of data retention and concludes that the ongoing aspirations to reintroduce a data retention obligation in the EU remain in violation of EU law as long as the strict necessity of data retention is unproved and no genuinely targeted retention obligation is considered.


Complete Copy of the Booklet as Shared Under Creative Commons License via EDRi (PDF)

Data-Retention-Revisited-Booklet-EDRi

Read the original introductory post from the EDRi


Additional Reading

Source: ComplexDiscovery

Redistributed with Permission Under the Creative Commons Attribution-ShareAlike 4.0 License

Have a Request?

If you have information or offering requests that you would like to ask us about, please let us know and we will make our response to you a priority.

ComplexDiscovery is an online publication that highlights data and legal discovery insight and intelligence ranging from original research to aggregated news for use by business, information technology, and legal professionals. The highly targeted publication seeks to increase the collective understanding of readers regarding data and legal discovery information and issues and to provide an objective resource for considering trends, technologies, and services related to electronically stored information.

ComplexDiscovery OÜ is a technology marketing firm providing strategic planning and tactical execution expertise in support of data and legal discovery organizations. Registered as a private limited company in the European Union country of Estonia, one of the most digitally advanced countries in the world, ComplexDiscovery OÜ operates virtually worldwide to deliver marketing consulting and services.

A (Brand) New Approach? Considering the Framework and Structure of eDiscovery Offerings

Today’s eDiscovery providers may benefit from the lessons learned in the creation of the Sgt. Pepper’s Lonely Hearts Club Band album by creating a concept for branding and packaging their offerings within that brand in a connected, theme-based way that represents the offerings’ promise and capability in a way that is easy to understand and remember.



Check Out the New Approach Now!

Interested in Contributing?

ComplexDiscovery combines original industry research with curated expert articles to create an informational resource that helps legal, business, and information technology professionals better understand the business and practice of data discovery and legal discovery.

All contributions are invested to support the development and distribution of ComplexDiscovery content. Contributors can make as many article contributions as they like, but will not be asked to register and pay until their contribution reaches $5.

Resetting the Baseline? eDiscovery Market Size Adjustments for 2020

An unanticipated pandemeconomic-driven retraction in eDiscovery spending during 2020 has resulted...

New from NIST: Integrating Cybersecurity and Enterprise Risk Management (ERM)

NIST has released NISTIR 8286, Integrating Cybersecurity and Enterprise Risk Management...

A Cloudy Alliance? A Next-Generation Cloud for Europe

According to Thierry Breton, Commissioner for the Internal Market, "Europe needs...

Five Great Reads on eDiscovery for October 2020

From business confidence and captive ALSPs to digital republics and mass...

A Running List: Top 100+ eDiscovery Providers

Based on a compilation of research from analyst firms and industry...

The eDisclosure Systems Buyers Guide – 2020 Edition (Andrew Haslam)

Authored by industry expert Andrew Haslam, the eDisclosure Buyers Guide continues...

The Race to the Starting Line? Recent Secure Remote Review Announcements

Not all secure remote review offerings are equal as the apparent...

Enabling Remote eDiscovery? A Snapshot of DaaS

Desktop as a Service (DaaS) providers are becoming important contributors to...

Resetting the Baseline? eDiscovery Market Size Adjustments for 2020

An unanticipated pandemeconomic-driven retraction in eDiscovery spending during 2020 has resulted...

Home or Away? New eDiscovery Collection Market Sizing and Pricing Considerations

One of the key home (onsite) or away (remote) decisions that...

Revisions and Decisions? New Considerations for eDiscovery Secure Remote Reviews

One of the key revision and decision areas that business, legal,...

A Macro Look at Past and Projected eDiscovery Market Size from 2012 to 2024

From a macro look at past estimations of eDiscovery market size...

A Season of Change? Eighteen Observations on eDiscovery Business Confidence in the Fall of 2020

In the fall of 2020, 77.2% of eDiscovery Business Confidence Survey...

The Continuing Case of Budgetary Constraints in the Business of eDiscovery

In the fall of 2020, 49.4% of respondents viewed budgetary constraints...

Outstanding Accounts? eDiscovery Operational Metrics in the Fall of 2020

In the fall of 2020, eDiscovery Business Confidence Survey more...

Holding the Rudder? Fall 2020 eDiscovery Business Confidence Survey Results

This is the twentieth quarterly eDiscovery Business Confidence Survey conducted by...

DISCO Raises $60 Million

According to the media release, DISCO will use this investment to...

Rampiva and the RYABI Group Merge

According to today's announcement, the RYABI Group merger is Rampiva's first...

eDiscovery Mergers, Acquisitions, and Investments in Q3 2020

From HaystackID and NightOwl Global to Reveal Data and NexLP, the...

Mitratech Acquires Acuity ELM

According to Mike Williams, CEO of Mitratech, “We came to the...

Five Great Reads on eDiscovery for October 2020

From business confidence and captive ALSPs to digital republics and mass...

Five Great Reads on eDiscovery for September 2020

From cloud forensics and cyber defense to social media and surveys,...

Five Great Reads on eDiscovery for August 2020

From predictive coding and artificial intelligence to antitrust investigations and malware,...

Five Great Reads on eDiscovery for July 2020

From business confidence and operational metrics to data protection and privacy...