Data retention policy in the EU concerns itself with the fact that EU Member States are able to store data from electronic telecommunications devices for at least 6 months and no longer than 24 months in issues relating to detecting, investigating, and prosecuting serious crimes. Regular day-to-day use is fully protected by the GDPR.