The EU also has laws that make it illegal. It annulled a previous law with some of these provisions, the so-called Data Retention Directive.