10 years v. Directive 2002/58/EC

Recent EDRi-gram newsletter brought to attention that Danish phone company kept call records for more than 10 years. Retention period of such length is clearly violating the Danish law that transposes the e-privacy directive 2002/58/EC. It also shows that the difference between the legal obligations imposed on companies and the actions of the companies can still be vastly different regardless of the country of origin.

More can be found here.