The Commission is planning a new data-retention law that would force online services to retain user metadata: who you are, your location, who you interact with, when, what device, etc.

https://www.europarl.europa.eu/RegData/etudes/BRIE/2026/789334/EPRS_BRI(2026)789334_EN.pdf