Untargeted, bulk, indiscriminate data retention is unlawful and creates risks to adequacy determination post Brexit
In this blog, I look at the main findings of the Court of Justice of the European Union (CJEU) which confirmed, yesterday, that EU law precludes national legislation that requires a general, bulk and indiscriminate retention of traffic data and location data. The judgement (in the UK context) relates to the Data Retention and Investigatory Powers Act 2014 (DRIPA) which according to the judgement “exceeds the limit of what is, strictly necessary and cannot be considered to be justified, within a




