Swedish Regulator Orders Last "Hold-Out" ISP To Retain Customer Data
An anonymous reader writes Despite the death of the EU Data Retention Directive in April, and despite the country having taken six years to even begin to obey the ruling, the Swedish government, via its telecoms regulator, has forced ISPs to continue retaining customer data for law enforcement purposes. Now the last ISP retrenching on the issue has been told that it must comply with the edict or face a fine of five million krona ($680,000).
While providers all over Europe have rejoiced in not being obliged any longer to provide infrastructure to retain six months of data per customer, Sweden and the United Kingdom alone have insisted on retaining the ruling — particularly surprising in the case of Sweden, since it took six years to begin adhering to the Data Retention Directive after it was made law in 2006. Britain's Data Retention and Investigatory Powers bill, rushed through in July, actually widens the scope of the original EU order.
While providers all over Europe have rejoiced in not being obliged any longer to provide infrastructure to retain six months of data per customer, Sweden and the United Kingdom alone have insisted on retaining the ruling — particularly surprising in the case of Sweden, since it took six years to begin adhering to the Data Retention Directive after it was made law in 2006. Britain's Data Retention and Investigatory Powers bill, rushed through in July, actually widens the scope of the original EU order.
The Netherlands also has yet to reply to the court ruling which found data retention violates the ECHR
Funny combination.
Biggest ass-lickers of the United States.
(I'm from Sweden and UK of course is little US.)
Using a VPN to block spying is becoming just as necessary as using AdBlock to block advertising these days.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
Sweden has an agreement with the US to provide these logs in full. Totally against Swedish law and against every privacy law in the EU. No sane company should have any data what so ever in Swedish servers or companies.
HTTP/1.1 400
This most-likely means that they will require the ISP to keep historical customer - ip-address data.
The overridden directive does not require any snooping for IP-traffic to be implemented into law.
We'll retain the data!
Will you be paying for that?
No?
Well fuck you.
The ISPs should charge an extra amount explicitly on their bills to account for the cost of storage and administering all data requests under it. The data should of course be stored off line - a write only tape store would appear to be the obvious solution. Locating the store in another country with strict regulations about privacy would force any requests for information to go to the courts of THAT country... Here's hoping!
only ISPs so Bahnhof will probably start a daughter company that provides free VPN to all Bahnhof customers. Voila, full logs to the goverment and their customers still have full privacy. Everybody is happy! :-)
Why shouldn't ISP's appeal to EU Court of Justice or European Court of Human Rights?
CJEU stated that the directive "interferes in a particularly serious manner with the fundamental rights to respect for private life and to the protection of personal data".
One could understand that any similar local laws or practices should be void/illegal in the EU, and in violation of European Convention on Human Rights.