The regulations came into effect on 1 October 2007 despite civil rights opposition and will mean that certain communication providers will be obliged to maintain data in the fight against terrorism.
Law enforcement agencies can access data to fight crime generally and will cover ISP’s and VOIP providers and communication resellers.
The period retention in the UK is 12 months from the date of the communication and providers must put in place safeguards to prevent destruction, loss, alteration or unlawful or unauthorised access.
For some this will mean significant extra regulatory burdens and costs. The regulations have been criticised for its lack of clarity on the right to seek reimbursement of expenses in complying with the law-though this is at the discretion of the government-and what public bodies may seek to access the data.
