Dutch Court Sets Aside National Data Retention Law

from the provisionally-enforceable dept

Back in January, we wrote about a legal challenge to the Netherlands' data retention law by a group of civil rights organizations. This was because the Dutch government had decided to ignore the important ruling by Europe's highest court, the Court of Justice of the EU (CJEU), that blanket data retention was "invalid." Now, a court in The Hague has ruled the government was wrong to do so:

Dutch providers are no longer required to retain internet and phone traffic data. The telecommunications data retention law, that was fought in court by various privacy groups and small ISPs, is invalid.

That was ruled (.pdf, in Dutch) by the court of The Hague on Wednesday. The data retention law violated the Charter of Fundamental Rights of the European Union, specifically regarding the right to protection of private life and protection of personal data.
As that report from Nu.nl, translated by Matthijs R. Koot on his blog, makes clear, the court's judgment affects all kinds of telecoms -- both Internet and phone traffic data -- and all communication providers. This is the judge's reasoning:
The judge finds that the collected data are too easily accessible for crimes that are not serious. The plaintiffs stated that, technically, theft of a bicycle could lead to access to data, although the government stated this does not happen.

"Fact of the matter is that the possibility exists and that no safeguards exist to limit access to the data to what is strictly necessary to fight (only) serious crime", according to the judge.

The court also finds it to be incorrect that no prior court approval is needed to access the data.
The judge's ruling is only "provisonally enforeable", and the Dutch government may appeal against it. But even if it does, it has a larger problem with its policy in this area. Although it claims a new data retention bill will be compatible with the CJEU ruling, the Netherlands' Data Protection Authority has already said that it is still too intrusive for a number of reasons. Clearly, the European debate over what is a reasonable and proportionate level of data retention -- if any -- has a long way to go yet, both in the Netherlands and elsewhere.

Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+

Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: data retention, eu, netherlands


Reader Comments

Subscribe: RSS

View by: Time | Thread


  1. identicon
    Anonymous Coward, 12 Mar 2015 @ 2:07am

    link to this | view in thread ]

  2. identicon
    Anonymous Coward, 12 Mar 2015 @ 2:18am

    i'll bet you that the UK government just carries on using it, because it ignored the EU ruling, just like the Netherlands did. on top of that, all that any government/national spy agency needs to do is SAY it is complying, while carrying on doing as it wants. it can do that until there is a serious check made and then figure out what to do! the downside i suppose is when it comes to trying to prosecute someone/something and it has to hand over where and how it got the evidence being used

    link to this | view in thread ]

  3. identicon
    Anonymous Coward, 12 Mar 2015 @ 3:15am

    This shit law was brought on us by the UK. I am still waiting for them to leave the EU so others would stop associating that opressive police state with Europe.

    link to this | view in thread ]

  4. icon
    Ninja (profile), 12 Mar 2015 @ 3:59am

    I can see why saving the data for a determined interval would be useful for law enforcement and maybe there could be some mechanism to implement such retention. However there are plenty of issues with such thing: Govt abuse (we know any Government WILL abuse anything if there's an opening), data leak (via hacking such as what happened in Australia), profiling etc. Better go without.

    link to this | view in thread ]

  5. identicon
    Anonymous Coward, 12 Mar 2015 @ 10:47am

    Goodluck to the dutch

    link to this | view in thread ]

  6. If all data would be stored it would just be a matter of time before it was hacked or used from the wrong purposes i think.

    link to this | view in thread ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.