Dutch carriers abused data retention law for marketing purposes

While the law was widely violated, the companies were not punished

Some Dutch telecommunications and Internet providers have exploited European Union laws mandating the retention of communications data to fight crime, using the retained data for unauthorized marketing purposes, according to a report by the Dutch Ministry of Economic Affairs' Radiocommunications Agency.

The report, made public on Monday by Dutch digital rights organization Bits of Freedom following a freedom of information request, was completed in April 2012, but carriers and ISPs were not prosecuted for the breaches reported.

Bits of Freedom and other digital rights groups called on the European Commission to prevent further abuse of the European Data Retention Directive, which requires ISPs and telecommunications operators across the E.U. to retain connection data for a period between six months and two years, mainly for the purposes of investigating, detecting and prosecuting serious crime and terrorism.

The Netherlands introduced its data retention law in September 2009, requiring telecommunications operators to store data for one year and Internet providers to retain information for six months.

While the companies can legally use the retained data for billing, market research, sales activities and value added services, 40 of the 229 companies that responded to a mandatory survey said they used the information "solely for purposes other than the legally permitted processing goals," according to the report. Still others said they used the data for both legally permitted and non-permitted purposes.

The agency suspects that the companies use the data for instance for illegal marketing purposes, said Mariël van Dam, the agency's spokeswoman on Monday. She couldn't immediately comment on other possible uses.

In order to use traffic and location data for purposes other than billing, the service provider has to obtain the customer's explicit consent, and customers should be able to withdraw this consent at any time, according to the report. Only 147 of the 229 providers asked for consent, presumably largely through their terms and conditions, the agency said.

The law was mainly violated by medium-size and small operators, while major service providers complied with the law, the report said.

The Radiocommunications Agency decided at the time not to punish the violators because the research was done relatively shortly after the law was introduced, said Van Dam. "We said that we should give the companies a chance to comply with the law."

The agency is now conducting a follow-up study and expects to have new results in early 2014, after which the agency plans to start enforcing the law, she said. Violators can be fined up to a maximum of €250,000 (about US$339,000), she said, declining to comment on the preliminary results of the research.

Bits of Freedom spokesman Ot van Dalen said that the organization had warned of the potential for abuse of retained data by telecom and internet providers. The stored data is a goldmine for companies, and could also be abused by secret services, he said, calling for the abolition of the data retention law.

However, he said, because the data retention law is mandated at a European level, the Dutch couldn't abolish the law if they wanted to. He called on the Dutch government to reduce the mandated retention period to six months, the minimum possible under E.U. law. He also called on the Dutch government to commit to ending mandatory data retention at the European level.

It is time for the European Commission to take action, said Joe McNamee, executive director of European digital rights group EDRi in an email.

"It is nothing less than disgraceful that the European Commission has repeatedly taken Member States to court for failing to implement the Directive but has not lifted a finger to take action when the Directive was implemented in ways that undermined the fundamental rights of European Citizens," he said.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Show Comments

Latest Videos

Conversations over a cuppa with CMO: Tyron Hayes

​The current global COVID-19 pandemic is resulting in unprecedented disruption to every aspect of our lives as marketing and brand professionals, from the ways we work, to how our organisations operate, and the way in which we acquire and engage customers. So we’ve drawn on our wonderful CMO50 alumni community to explore different aspects of the crisis facing all of us right now.

More Videos

Why these voice assistants are so popular nowadays? Maybe I should get one too? I am really curious.

Jill Kim

Aussie brands jump on voice-interaction bandwagon following Amazon Alexa's local launch

Read more

Your page is very helpful. Thank you for sharing with us

Eriona Ajvazi

10 brands making a positive difference to a world in crisis

Read more

Extremely insightful and well written. Thanks for the great article!

Nicole Brodie Nahum

Why COVID-19 makes it more important than ever to move at the speed of the consumer

Read more

Blockchain is one of the fastest growing technology in today's digital era. Industries like banking and finance are already using blockch...

Aniket Singh

Can blockchain deliver on its big advertising promises?

Read more

Great article Emma. So many gems in there. Awesome to have you in the team!

One Small Step Collective

Why COVID-19 makes it more important than ever to move at the speed of the consumer

Read more

Blog Posts

The gear change required for business during COVID-19

The current world pandemic, COVID-19, and its tragic effects has created different and challenging situations for nearly every business. Every business sector is affected differently, depending on the nature of what your place in the world, creating the most unique situation most of us have ever and will ever experience during our professional lives.

Katja Forbes

Managing director of Designit, Australia and New Zealand

How can organisations debias their decisions?

​People whose personal details and experiences signal they come from racially diverse backgrounds are less likely than anglo or Caucasian candidates to make it through the first cut in recruitment processes. Even if the organisation says it values diversity.

Dr Karen Morley

Author, commentator

Is your marketing team adapting quickly enough to the COVID-19 crisis?

The impact of coronavirus is far reaching with the true impact on the economy and businesses is unknown. While there are a few categories and brands experiencing growth, for the most part the crisis is wreaking havoc for large and small operators across many sectors including entertainment, tourism, retail, fitness, services and the list goes on.

Teresa Sperti

Founder, Arktic Fox

Sign in