Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) 72: Article 72: IT service providers retain traffic and identification data for three years and keep it confidential

What does 72 require?

IT service providers must keep, for three years from the date of the service, the traffic data of all their users, the data that identify them and the other technical data of communications. On notice to the competent judicial authority, the judicial police may ask them to preserve additional technical data about a specific event and specific persons for up to thirty days, handed over only on a judicial decision. A provider cannot rely on a technical failure for not keeping the data and must take the technical measures set by decision of the Minister of Telecommunications. The data are under professional secrecy, which cannot be invoked against the competent court within the needs of investigations and trials. The duty does not cover content expressing a person's ideas, such as correspondence or stored or transmitted content. A Council of Ministers decree sets the mechanism for keeping and deleting the data.