EU's top court rules “general and indiscriminate retention” of electronic communications is illegal, possibly opening UK's Snoopers Charter to legal challenges
Indiscriminate collection of emails is illegal, court rules in response to challenge originally brought by David Davis
Context & Ripple Effects
This ruling lands mid-campaign rather than at its start: a UK court had already found GCHQ mass internet surveillance unlawful under human rights law in 2015, and weeks before this decision another UK court ruled GCHQ's bulk personal data collection from 1998 to 2015 illegal, though compliant after the government's avowal. What changes now is the target — the EU's top court strikes not at interception but at the retention regime itself, the legal foundation of the UK's Investigatory Powers Act.
First-order effects
- David Davis's original challenge is vindicated, handing privacy campaigners a template for attacking the Snoopers Charter's mandatory retention of every citizen's communications.
- Communications providers caught between UK retention mandates and an EU ruling declaring those mandates illegal face immediate legal uncertainty over their storage obligations.
Second-order effects
- The same argument migrates to the Data Retention and Investigatory Powers Act — and indeed the UK Court of Appeal went on to rule DRIPA's mass digital surveillance powers unlawful in 2018, confirming the challenge path this ruling opened.
- Government lawyers must restructure surveillance powers around targeted, individually authorized requests or keep losing in court, shifting compliance costs onto intelligence agencies and their oversight regimes.
Third-order effects
- European courts are converging on a rights-based ceiling for state data collection — reinforced when the [[a:966674|European Court of Human Rights ruled GCHQ's bulk interception violated the right to privacy]] — pushing national surveillance law toward necessity-and-proportionality tests regardless of domestic politics.
- For the UK heading out of the EU, the ruling sketches a diverging data-rights regime: EU-level constraints on retention persist while Westminster writes its own rules, raising friction for cross-border data flows and platform compliance design.
The trend: Europe's courts are systematically dismantling general and indiscriminate communications retention, forcing national surveillance frameworks toward targeted, judicially constrained collection.