German Cabinet Approves Draft Law for Three-Month IP Address Retention

Cabinet Approves New Data Retention Framework

The German cabinet has officially approved a draft law that would require internet service providers (ISPs) to store the IP addresses of their customers for a period of three months. This legislative move is intended to provide law enforcement agencies with a tool to identify suspects in serious criminal investigations, particularly those involving online activities.

Balancing Security and Privacy

The proposal comes after years of legal debate in Germany and at the European Union level regarding the blanket retention of telecommunications data. Previous attempts to implement broader data retention laws faced significant challenges in both the Federal Constitutional Court of Germany and the Court of Justice of the European Union, which have historically ruled that indiscriminate storage of traffic and location data violates fundamental privacy rights.

To address these concerns, the current draft is designed to be more targeted. According to government officials, the storage of IP addresses is intended to be limited to what is strictly necessary to combat serious crime. The government emphasizes that this approach aims to comply with European legal standards while ensuring that authorities have the means to pursue perpetrators of severe offenses.

Next Steps in the Legislative Process

Following the cabinet's approval, the draft law will now move to the Bundestag, the German federal parliament, for further debate and legislative review. During this process, the bill is expected to undergo scrutiny from lawmakers, privacy advocates, and industry representatives. If passed, the law would establish a new regulatory framework for ISPs operating within the country, marking a significant development in the ongoing effort to balance digital privacy with the requirements of criminal justice.