The mandatory data retention regime is a legislative framework which requires carriers, carriage service providers and internet service providers to retain a defined set of telecommunications data for two years, ensuring that such data remains available for law enforcement and national security investigations.

This report contains five chapters:

• the introduction, which outlines the provisions under review;
• operation, effectiveness and oversight;
• access to telecommunications data under the Telecommunications Act 1997;
• a comparison to relevant international regimes; and
• committee comment.