The Data Retention (EC Directive) Regulations 2009 require service providers to retain details of user internet access, email and internet telephony for 6-12 months. ISPs must also be able to respond to access requests by law enforcement and other designated authorities.