This article provides a brief explanation of the key provisions of the Data Retention Directive 2006/24/EC (the "Directive") and examines the proposed transposition of the Directive into UK law by way of the draft Data Retention (EC Directive) Regulations 2007. The draft Regulations are expected to replace the existing Voluntary Code of Practice for the Retention of Communications Data under Part 11 of the Anti-Terrorism, Crime and Security Act 2001.