Re: Metadata vs URLs
Storing the url is a step beyond the the requirements in the EU Directive struck down by the CJEU, and there is no other country in the EU having legislated that service providers must retain the urls of visited websites.
I predict that any extension of the definition of metadata beyond what was already found wanting by the CJEU will be struck down as a violation of human rights either by the CJEU under the charter or the ECTHR under the European Convention of Human Rights.
Also Austria's constitutional court has nullified its implementation of the EU Data Retention Directive, and the EU commissioner for justice has indicated that there will be no new attempt to enact a new mandatory data retention regime.
So where does it leave the UK? If no other country is willing to follow, the the only likely effect of the new law is driving business overseas.
The UK government has no power to punish an Austrian or Swedish company for refusing to log its users.
Even a mutual legal assistance request to another state is ineffective, if its law does not require the equivalent retention of metadata.
The following countries in the EU have no data retention laws:
- Germany (struck down by the constitutional court).
- Austria (struck down by the constitutional court).
- Norway (suspended).
Sweden, Netherlands and Iceland have not yet suspended the enforcement of their data retention laws, but these only require retention of the limited categories of trafick data enumerated in the directive, and the period is only six months.