"We strongly oppose the adoption of new EU rules forcing electronic communications service providers to massively retain their users’ traffic and location data beyond what is necessary for service and billing purposes..We believe that this obligation:
- constitutes mass surveillance, which unacceptably undermines the rights to privacy and data protection and thus, endangers the exercise of other fundamental rights enabled by them such as freedom of expression and information, freedom of assembly and association, the right to a fair trial, to health care, to social protection and social assistance, etc.;
- has been found contrary to the EU Charter of Fundamental Rights by the Court of Justice of the European Union (CJEU)
- creates inadmissible data security risks, considering that the vast amounts of personal data retained for law enforcement are vulnerable to cyberattacks (which happen on a regular basis with disastrous consequences for people affected)"
https://edri.org/our-work/joint-civil-society-response-to-the-commissions-call-for-evidence-impact-assessment-on-data-retention-by-service-providers-for-criminal-proceedings/