In 2006 the EU issued its Data Retention Directive. According to the Directive, EU Member States had to store electronic telecommunications data for at least six months and at most 24 months for investigating, detecting and prosecuting serious crime. In 2016, with an EU legal framework on data retention still lacking, the CJEU further clarified what safeguards are required for data retention to be lawful.This paper looks at amendments to national data retention laws in 2016 after the Digital Rights Ireland judgment.