» ISP News » 
Sponsored Links

UPDATE4 Open Rights Group Call on UK ISPs to Clarify Data Retention Policy

Friday, Apr 11th, 2014 (9:29 am) - Score 3,250

The Open Rights Group (ORG) has written a new open letter that calls upon BT, Sky Broadband, TalkTalk and Virgin Media to clarify their positions on the storing of personal customer data / access logs, which follows a decision by the European Court of Justice to rule that the EU’s Data Retention Directive was now “invalid“.

In its ruling earlier this week the ECJ concluded (here) that keeping a basic customer access / IP address log of all website, email and phone call activity for up to 2 years was not proportionate and that the EU’s related directive breaches a “fundamental right to respect for private life and the fundamental right to the protection of personal data” (Charter of Fundamental Rights of the EU).


The United Kingdom’s similar Regulation of Investigatory Powers Act 2000 (RIPA) pre-dates the EU law but it is still influenced by that legislation and thus any change to European law can result in amendments to related rules over this side of the English channel.

So far at least one ISP in Sweden has decided to delete all of its logs, despite the local national law still technically being active, and now a question mark has been raised over whether other providers should follow suit.

ORG’s Open Letter – Data Retention Directive

I am writing to you to seek clarification of your approach to retention and use of your customers data, as a result of the European Court of Justice’s ruling that the Data Retention Directive is invalid and does not apply as European law.

This directive was implemented into UK law by the Data Retention (EC Directive) Regulations 2009. Since the European Court of Justice declared the directive outside the competence of the EU treaties, the UK was never required to implement it. Therefore these regulations no longer have a valid basis in UK law. It is our understanding that ISPs therefore should not be retaining user data unless there is some other legal basis for doing so.

We understand that you should only retain personal data such as IP logs and email communications data for legitimate business reasons or specific legal requirements.

In the interests of your customers, please can you:

(1) Confirm that you are not continuing to abide by the now defunct Data Retention Directive and regulations;

(2) Publish a description of the data you will be continuing to collect for business purposes (and how the data assists you) and what time period you will be holding the data for

Thank you,

Jim Killock
Executive Direcgtor
Open Rights Group

It should be stressed that, even without any law, all ISPs would still need to keep basic access logs in order to understand and adapt to how customers are using their service (e.g. billing for data usage or putting more capacity in to balance for iPlayer consumption). As a result the issue is arguably more to do with how long an ISP should retain such logs and in the UK the somewhat voluntary rule is currently 12 months, not the EU’s maximum of 24; the latter of which drew strong criticism from the ECJ.

In any case the issue of state vs EU law is a complicated minefield and probably one that big ISPs in the United Kingdom will be keen to avoid, at least until such time as any amendments are made. The indications received by ISPreview.co.uk are that at present there will be no rash changes on the ISP side of things, although eyes are being kept firmly on developments in Europe.


If we’re lucky we might even have an official comment or two to post later today, assuming the start of Easter Holiday’s doesn’t drag everybody away.

UPDATE 1:34pm

As expected none of the ISPs have yet been able to give us a firm quote, although Sky Broadband did suggest that they would monitor how the UK Government responded before considering any further steps. We’ll update again if any quotes arrive.

UPDATE 1:45pm


A spokesperson for Virgin Media told ISPreview.co.uk that, “We are seeking clarification on what this means for us under UK law“. The EU will similarly need to conduct an impact assessment on the potential consequences of the ruling before knowing how to amend the law, which could take several months. Meanwhile, as above, the UK law remains in place and individual member states will need to conduct their own assessments to see if changes are needed.

UPDATE 12th April 2014

The UK Internet Service Providers Association (ISPA) has thrown its cap into the ring with a statement from Nicholas Lansman that echoes most of what we’ve written above: “The CJEU ruling has the potential for major changes to the data-retention regime, however we believe that for the time being that obligations remain in place.”

In the meantime the Government of Sweden has decided not to take any action against the ISP that unilaterally decided to delete all of its logs following the ECJ’s ruling. Apparently Sweden, which has its own local law for data retention that reflects the EU’s, felt as though challenging the ISPs decision would cause too many problems, until the legislation can be amended.

UPDATE 13th April 2014

A spokesperson for AAISP added: “AAISP has never been required to retain data under the Data Retention Directive and so never has. If we were asked to now, we would challenge such a request in light of the recent judgment.”

Share with Twitter
Share with Linkedin
Share with Facebook
Share with Reddit
Share with Pinterest
By Mark Jackson
Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook and .
Search ISP News
Search ISP Listings
Search ISP Reviews

Comments are closed

Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
Gift: None
NOW £24.00
Gift: None
Virgin Media UK ISP Logo
Virgin Media £26.00
Gift: None
Vodafone UK ISP Logo
Vodafone £26.50 - 27.00
Gift: None
Zen Internet UK ISP Logo
Zen Internet £28.00 - 35.00
Gift: None
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
Gift: None
BeFibre UK ISP Logo
BeFibre £19.00
Gift: None
Community Fibre UK ISP Logo
Gift: None
YouFibre UK ISP Logo
YouFibre £22.99
Gift: None
Hey! Broadband UK ISP Logo
Gift: None
Large Availability | View All
The Top 15 Category Tags
  1. FTTP (5719)
  2. BT (3567)
  3. Politics (2602)
  4. Openreach (2342)
  5. Business (2322)
  6. Building Digital UK (2277)
  7. FTTC (2061)
  8. Mobile Broadband (2039)
  9. Statistics (1830)
  10. 4G (1724)
  11. Virgin Media (1674)
  12. Ofcom Regulation (1494)
  13. Fibre Optic (1426)
  14. Wireless Internet (1417)
  15. FTTH (1383)

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules , Contact