[scott_w]

Unfortunately this won’t tell you if the ISP is storing extra data in compliance with the Snooper’s Charter because legal compliance can override the GDPR. Basically, the law saying “you’re not allowed to tell anyone you hold this data” overrides an SAR and a legal case to force compliance would likely fail on these grounds.

[hkt]

Does the charter specifically forbid companies from reporting what they store? I'm not familiar with it in detail. I'd be surprised..

[bennyp101]

Basically, If you are required to store the data under an order, then you are not legally allowed to disclose the fact you have received an order, or what you are storing.

Same as getting a request from the NCA asking for details on an individual, can't disclose that you received one.

[hkt]

Ah. They're the same as the old RIPA requests then. In another life I worked for a company which processed them from time to time. It is a dreadful shame that stuff has survived.

[bennyp101]

Yea, only from what I can see, worse. Rather than just "tell me who had this IP on this date" it will be "tell me everything they visited and looked at during this period"