CDT Europe has provided feedback to the European Commission regarding its Call for Evidence on data retention by service providers in criminal investigations. The organization highlighted that any security measures should fully respect the Charter of Fundamental Rights, relevant case law from the Court of Justice of the EU (CJEU), and adhere to necessity and proportionality principles. The submission referenced CJEU decisions stating that indiscriminate retention of traffic and location data constitutes a “particularly serious” breach of privacy and data protection rights. Instead, it called for a narrowly targeted system with judicial oversight, allowing only the preservation of specific data pertinent to serious crimes. The submission concluded by urging lawmakers to ensure any future legislation includes clear limitations, robust safeguards, and effective oversight mechanisms so fundamental rights are protected.