So how do you know it is effective or cost efficient for that matter.
The implementation of the Data Retention Directive in Sweden pushed the cost onto the ISPs. According to their industry group, the estimates for NRE as well as operational costs as stated by the government was at least a factor 10x to low. We are talking 100MSEK range instead of 10MSEK range. This also worked as a barrier to the market since the initial costs of establishing retention makes it costly to start a new ISP.
I have not seen any analysis on the cost and work done by the govenment to enforce as well as use the data collected. But alternatives such as directed surveillance (not wholesale) should be considerd and not just flatly ignored.
Finally, if NSA when pressed for details can not really come up with more than possibly one case where wholesale surveillance was instrumental, I'm not sure the EU DRD and its implementations are that much more efficient.
The implementation of the Data Retention Directive in Sweden pushed the cost onto the ISPs. According to their industry group, the estimates for NRE as well as operational costs as stated by the government was at least a factor 10x to low. We are talking 100MSEK range instead of 10MSEK range. This also worked as a barrier to the market since the initial costs of establishing retention makes it costly to start a new ISP.
I have not seen any analysis on the cost and work done by the govenment to enforce as well as use the data collected. But alternatives such as directed surveillance (not wholesale) should be considerd and not just flatly ignored.
Finally, if NSA when pressed for details can not really come up with more than possibly one case where wholesale surveillance was instrumental, I'm not sure the EU DRD and its implementations are that much more efficient.
But thats me guessing.