Certified Information Privacy Professional – Europe (CIPP/E) — Question 202

Data retention in the EU was underpinned by a legal framework established by the Data Retention Directive (2006/24/EC). Why is the Directive no longer part of EU law?

Answer options

• A. The Directive was superseded by the EU Directive on Privacy and Electronic Communications.
• B. The Directive was superseded by the General Data Protection Regulation.
• C. The Directive was annulled by the Court of Justice of the European Union.
• D. The Directive was annulled by the European Court of Human Rights.

Correct answer: C

Explanation

The correct answer is C because the Court of Justice of the European Union ruled that the Data Retention Directive was invalid due to its incompatibility with fundamental rights. Options A and B are incorrect as they suggest a replacement rather than annulment, while option D misattributes the annulment to the wrong court.