In the joint cases of Tele2 Sverige AB v. Post-och telestyrelsen and Secretary of State for the Home Department v. Tom Watson, Peter Brice, and Geoffrey Lewis (the Decision), the Court of Justice of the European Union (CJEU) held that member states are precluded from adopting legislation that allows a general and indiscriminate retention of all traffic and location data. While targeted retention of data is allowed for the specific objective of fighting serious crime, retention must be proportionate and access to the data must be limited to what is strictly necessary. To ensure that this is achieved, adequate safeguards must be set in place and access to the data must be subject to prior review by a court or independent administrative body.