Alessandro AleddaInsider Threat and Risk

INTRA/MD/MD007Retention of communications metadata

The retention of the transmission data of a message: its parties, times, size, and routing.

Pillar
MD  |  Monitoring and detection
Sources cited
3
Added
30 AUGUST 2026
Updated
30 AUGUST 2026
ControlJurisdictionSourceWhat it establishesPrerequisite or recommendation
MD007/ITMandatoryItalyProvvedimento n. 243Garante per la protezione dei dati personali · read 11 Aug 2026Provvedimento n. 165, ITAS MutuaGarante per la protezione dei dati personali · read 16 Aug 2026Provvedimento n. 364, guidance document on email metadata in the workplaceGarante per la protezione dei dati personali · read 11 Aug 2026That ninety days of metadata and browsing logs, kept without the procedural steps, draws a fine, the reasoning turning on the steps and not the purpose.Twenty-one days is the outer limit before the article 4 route is engaged, and the limit reaches the envelope only: parties, times, size, and routing.