Comment by londons_explore | Hacker News Reader

Top New Best Ask Show Jobs

Comment by londons_explore | Hacker News Reader

Parent Full thread

londons_explore·

I would pay extra for an ISP who only kept those logs say 1 hour.

1 hour should be plenty to identify who is currently running some network attack, and arguably an ISP doesn't have a legit reason for keeping private data longer than necessary to be an ISP under the GDPR .

That would require you to have a choice of ISPs...

I wonder if there are any government requirements here for people operating ISPs. Does anyone have any insight into the time range that is required to keep these logs (if there is one)?

In France it's one year.

Yes there is, at least in EU, not sure for how long do they have to keep the logs.

EU: According to a directive passed 2006, a minimum of six months and at most 24 months. But that directive was ruled invalid and anulled in 2014. https://en.wikipedia.org/wiki/Data_Retention_Directive

Reply on news.ycombinator.com