The European Commission is consulting on future EU Data Retention legislation to harmonize rules for storing metadata used in serious crime investigations.

BSA recommends limiting obligations to basic subscriber and traffic data already processed by electronic communications service providers, excluding cloud, social media, and other digital services.

Retention should apply only to serious crimes, with strict safeguards, harmonized definitions, judicial oversight, and minimal regulatory burden on providers.