By focusing solely on
regulation of the conditions under which the retained data can be accessed or used, the AG
ignores the more fundamental question whether the mandatory blanket retention of the
traffic - and location data of all EU citizens is lawful to begin with.