{"id":2573,"date":"2023-05-19T08:26:57","date_gmt":"2023-05-19T08:26:57","guid":{"rendered":"https:\/\/www.hts-italy.com\/?p=2573"},"modified":"2023-06-30T14:58:25","modified_gmt":"2023-06-30T14:58:25","slug":"provision-on-the-security-of-telephone-and-telematic-traffic-data-and-log-management","status":"publish","type":"post","link":"https:\/\/www.hts-italy.com\/en\/articles\/provision-on-the-security-of-telephone-and-telematic-traffic-data-and-log-management\/","title":{"rendered":"Provision on the Security of Telephone and Telematic Traffic Data and Log Management"},"content":{"rendered":"\n

The Provision on the “Security of Telephone and Telematic Traffic Data”<\/a> issued on January 27, 2008, is a measure by the Italian Data Protection Authority (Garante Privacy). Its objective is to establish measures and precautions for electronic communication service providers to adopt in the storage of telephone and telematic traffic data. Why is this necessary? The processing of such data presents specific risks to the rights, fundamental freedoms, and dignity of the data subject that the Garante aims to protect.<\/p>\n\n\n\n

The provision on the Security of Telephone and Telematic Traffic Data – January 17, 2008<\/h2>\n\n\n\n

The provision is divided into several sections:<\/p>\n\n\n\n

    \n
  1. Preliminary considerations<\/li>\n\n\n\n
  2. Framework<\/li>\n\n\n\n
  3. Providers required to retain traffic data<\/li>\n\n\n\n
  4. Types of traffic data to be retained<\/li>\n\n\n\n
  5. Objectives pursued<\/li>\n\n\n\n
  6. Data acquisition methods<\/li>\n\n\n\n
  7. Prescribed measures and precautions<\/li>\n\n\n\n
  8. Application of certain measures to data processed for other purposes<\/li>\n<\/ol>\n\n\n\n

    In this article, we will focus only on specific points related to log management.<\/p>\n\n\n\n

    2 Framework<\/h2>\n\n\n\n

    Current regulations require electronic communication service providers to retain telephone and telematic traffic data for 24 and 6 months, respectively. This retention period can be extended by an additional 24 and 6 months, respectively, in cases of investigation and prosecution of offenses under Article 407, paragraph 2, letter a) of the Italian Code of Criminal Procedure (c.p.p.), and offenses against computer or telematic systems. The minimum necessary time for data retention is established from the outset.<\/p>\n\n\n\n

    3 Providers required to retain traffic data<\/h2>\n\n\n\n

    Entities required to retain traffic data include providers of electronic communication services on public communication networks. Certain categories are excluded from this requirement, such as:<\/p>\n\n\n\n