The EDPS express some critical remarks on the European Data Retention Directive, underlining that the Directive “does not meet the requirements imposed by the fundamental rights to privacy and data protection”.
Three different aspects are the most critical:
- the necessity for data retention as provided in the Directive has not been sufficiently demonstrated;
- data retention could have been regulated in a less privacy-intrusive way;
- the Directive leaves too much scope for Member States to decide on the purposes for which the data might be used, and also for establishing who can access the data and under which conditions.
The opinion is available here