Published July 18, 2022 | Version v1
Book chapter Open

Data retention obligations in the context of CJEU case law

Creators

Description

The aim of the article is to present the position of the CJEU on the conditions provided for data retention provisions, and to confront them with the regulations adopted in the national legal systems. The first part discusses the case law of the CJEU regarding data retention, the admissibility of retention as such, data categories covered by retention, duration, which authorities can require access to the retained data, judicial review, and the exceptions to the main principles. In the next part, the solutions adopted in the legal orders of Member States are briefly analysed, with particular focus on Poland, in the context of the above mentioned conditions. Finally, the article addresses the issue of the procedural status of service providers and their rights in criminal proceedings.

Files

6 Marcia Data retention.pdf

Files (293.8 kB)

Name Size Download all
md5:94df291a49e3ed05e5c1d0518476ad1c
293.8 kB Preview Download

Additional details

References

  • German Code of Criminal Procedure, in the version published on April 7, 1987, BGBl. I, 1074, 1319 with subsequent amendments
  • Act on the Police (1990), Dz.U. (2021), items 1882, 2333, 2447, 2448
  • Polish Code of Criminal Procedure (1997), Dz.U. (1997), No 89, item 555 with subsequent amendments
  • Council of Europe Convention on Cybercrime, Budapest, 23 November 2001, ETS 185
  • Telecommunications Act (2004), Dz.U. (2021), item 576
  • Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC [2006] OJ L 105/54
  • Treaty on European Union, consolidated version [2016] OJ C 202/1
  • Charter of Fundamental Rights of the European Union [2016] OJ C 202/389
  • Case C518/07 European Commission v Federal Republic of Germany, EU:C:2010:125
  • Joined Cases C‑293/12 and C‑594/12 Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources and Others and Kärntner Landesregierung and Others, EU:C:2014:238
  • Joined Cases C-203/15 and C-698/15 Tele2 Sverige AB v Post- och telestyrelsen and Secretary of State for the Home Department v Tom Watson and Others, EU:C:2016:970
  • Case C-623/17 Privacy International v Secretary of State for Foreign and Commonwealth Affairs and Others, EU:C:2020:790
  • Joined Cases C-511/18, C-512/18 and C-520/18 La Quadrature du Net and Others v Premier ministre and Others, EU:C:2020:791
  • Case C-746/18 Criminal proceedings against H. K., EU:C:2021:152
  • Decision of 22 March 2011, Pl. ÚS 24/10 <https://www.usoud.cz/en/decisions/2011-03- 22-pl-us-24-10-data-retention-in-telecommunications-services> accessed 9 January 2022
  • Decision of 22 December 2011, Pl. ÚS 24/11 <https://www.usoud.cz/en/decisions/2011- 12-20-pl-us-24-11-telecommunication-services> accessed 9 January 2022
  • K 23/11, 30 July 2014 [2014] (7) Orzecznictwo Trybunału Konstytucyjnego, Series A, item 80
  • Opinion of the CJEU 1/15 'Draft agreement between Canada and the European Union – Transfer of Passenger Name Record data from the European Union to Canada', EU:C:2017:592
  • Opinion of the European Economic and Social Committee on 'Proposal for a Regulation of the European Parliament and of the Council on European Production and Preservation Orders for electronic evidence in criminal matters' [2018] OJ C 367/88
  • Commission, 'Proposal for a Regulation of the European Parliament and of the Council on European Production and Preservation Orders for electronic evidence in criminal matters', Strasbourg, 17 April 2018, COM(2018) 225 final
  • Commission, 'Proposal for a Directive of the European Parliament and of the Council laying down harmonised rules on the appointment of legal representatives for the purpose of gathering evidence in criminal proceedings', Strasbourg, 17 April 2018, COM(2018) 226 final
  • Case C746/18 Criminal proceedings against H. K., EU:C:2020:18, Opinion of AG Pitruzzella
  • Anderl A, Klammer A, 'Data Retention in Austria' in M Zubik, J Podkowik, R Rybski (eds), European Constitutional Courts towards Data Retention Laws (Springer 2021)
  • Benedizione L, Paris E, 'Preliminary Reference and Dialogue Between Courts as Tools for Reflection on the EU System of Multilevel Protection of Rights: The Case of the Data Retention Directive' (2015) 16 German Law Journal <https://doi. org/10.1017/S2071832200021325>
  • D Miąsik, N Półtorak, A Wróbel (eds), Traktat o funkcjonowaniu Unii Europejskiej. Komentarz (art. 1-89), Vol. I (Wolters Kluwer 2012)
  • Juszczak A, Sason E, 'Recalibrating Data Retention in the EU. The Jurisprudence of the Court of Justice of the EU on Data Retention – Is this the End or is this the Beginning?' [2021] (4) EUCRIM
  • Kashumov A, 'Data Retention in Bulgaria' in M Zubik, J Podkowik, R Rybski (eds) European Constitutional Courts towards Data Retention Laws (Springer 2021)
  • Maras M-H, 'From targeted to mass surveillance: is the EU Data Retention Directive a necessary measure or an unjustified threat to privacy?' in B J Goold and D Neyland (eds), New Directions in Surveillance and Privacy (Routledge 2009)
  • Mitrou L, 'The impact of communications data retention on fundamental rights and democracy – the case of the EU Data Retention Directive' in K D Haggerty and M Samatas (eds), Surveillance and Democracy (Routledge – Cavendish 2010)
  • Murphy C, 'Romanian Constitutional Court, Decision No. 1258 of 8 October 2009' (2010) 47 Common Market Law Review
  • Rojszczak M, 'The uncertain future of data retention laws in the EU: Is a legislative reset possible?' (2021) 41 Computer Law & Security Review <https://doi.org/10.1016/j. clsr.2021.105572>
  • Rovelli S, 'Case Prokuratuur: Proportionality and the Independence of Authorities in Data Retention' (2021) 6 European Papers
  • Simonato M, 'Defence rights and the use of information technology in criminal procedure', (2014) 85 Revue Internationale de Droit Penal <https://www.cairn.info/ revue-internationale-de-droit-penal-2014-1-page-261.html> accessed 9 January 2022
  • Taylor M, 'The EU Data Retention Directive' (2006) 22 Computer Law & Security Review
  • Tomkiewicz M, 'Sądowa kontrola pozyskiwania danych telekomunikacyjnych, internetowych i pocztowych' [2018] (4) Państwo i Prawo
  • Tosza S, 'All evidence is equal, but electronic evidence is more equal than any other: the relationship between the European Investigation Order and the European Production Order' (2020) 11 New Journal of European Criminal Law <https:// doi.org/10.1177/2032284420919802>
  • Vainio N, Miettinen S, 'Telecommunications data retention after Digital Rights Ireland: legislative and judicial reactions in the Member States' (2015) 23 International Journal of Law and Information Technology <https://doi.org/10.1093/ijlit/eav010>
  • Wahl T, 'CJEU: Data Retention Allowed in Exceptional Cases' [2020] (3) EUCRIM
  • Wilson S, 'Compelling Passwords from Third Parties: Why the Fourth and Fifth Amendments Do Not Adequately Protect Individuals When Third Parties Are Forced to Hand Over Passwords' (2015) 30 Berkeley Technology Law Journal <http://www.jstor.org/stable/43917626> accessed 9 January 2022
  • Bundesverwaltungsgericht, Press Release No 66/2019, 'EuGH soll Vereinbarkeit der deutschen Regelung zur Vorratsdatenspeicherung mit dem Unionsrecht klären', <https://www.bverwg.de/pm/2019/66> accessed 9 January 2022
  • Eurojust, 'Data retention regimes in Europe in light of the CJEU ruling of 21 December 2016 in Joined Cases C-203/15 and C-698/15 – Report, 2017' <https://www. statewatch.org/media/documents/news/2017/nov/eu-eurojust-data-retention-MSreport- 10098-17.pdf> accessed 9 January 2022
  • European Commission, Directorate-General for Migration and Home Affairs, Dupont C, Cilli V, Omersa E and others, 'Study on the retention of electronic communications non-content data for law enforcement purposes: final report' (2020) Publications Office <https://data.europa.eu/doi/10.2837/384802>
  • European Digital Rights, 'Data retention? Advocate General says Asked and answered!' <https://edri.org/our-work/data-retention-advocate-general-says-asked-andanswered> accessed 9 January 2022
  • European Digital Rights, 'Digitalcourage fights back against data retention in Germany' <https://edri.org/our-work/digitalcourage-fights-back-against-data-retention-ingermany> accessed 9 January 2022
  • European Digital Rights, 'Eurojust: No progress to comply with CJEU data retention judgments' <https://edri.org/our-work/eurojust-no-progress-to-comply-with-cjeudata- retention-judgements> accessed 9 January 2022
  • Tutanota, 'Germany: Data retention to be abolished once and for all' <https:// tutanota.com/blog/posts/data-retention-germany/> accessed 9 January 2022