The court ruling against the EU data retention directive also cited the further violation of privacy from allowing the data to be stored outside the reach of EU personal data protection law.