BRUSSELS – The Business Software Alliance (BSA) calls for a proportionate and balanced approach to EU data retention. A future framework, BSA stresses in its response to the EU's consultation on data retention, should be limited to basic subscriber and traffic data already processed by electronic communication service providers – for investigating serious crimes only – with harmonized definitions. It should not create excessive regulatory burdens for service providers.

BSA emphasized that safeguards such as judicial oversight, protection of encryption, and transparency obligations — including regular reporting by Member States — are essential to ensure public trust and respect for fundamental rights.

“An EU-wide framework can provide clarity for businesses if proportionate and well-balanced measures are chosen,” said Irma Gudžiūnaitė, Director - Policy, EMEA at BSA. “But it must be focused on investigating the most serious crimes and not create excessive regulatory burdens, while respecting fundamental rights.”

The full policy filing can be found here.