Data retention law

Who used IP X, port Y, at time T?

It is the question every authority asks an operator. The Super Router keeps who held which public address and CGNAT port block, from when to when, and answers it in a second. Where the law asks for every connection, the DTVSOL Super Keeper keeps them, on your own premises.

See your country →How the lawful log works

A request, answered on the router

$ dtvsol lawful lookup 203.0.113.10 40123 \
      "2026-03-14 21:05:33Z" --case F-118

  found: 1
  Ana García  (svc_demo0042)
    from 2026-02-02 10:14:07 +00:00  until now
    public 203.0.113.10 ports 39936-40959   private 100.80.12.37
    MAC 00:11:22:33:44:55   ONT HWTC00000001   contract CONTR-01842

Level 1 — on the router

Per hold period, not per connection: the public IP, the CGNAT port block (start–end), the private IP, the MAC and the subscriber, from when to when.

Level 2 — on the Super Keeper

Level 1, and every connection: exact ports, destination, protocol, start and end. On a server in your own network.

Both levels: kept 6 to 120 months, as you set.

Tap your country

Countries with a row open it. For any other country, we check the law with you.

Our operators run here todayLaw checked, row below

Where our operators run today

Colombia

COOperators here today

Decreto 1704 de 2012, art. 4 (DUR 1078 de 2015, art. 2.2.2.6.4)

The law asks

Subscriber identity, billing address and connection type; delivered at once to the Fiscalía.

Minimum 60 months
Ports: not named by the law
Who asks The Fiscalía General de la Nación, through its judicial police; delivered at once.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 60

Peru

PEOperators here today

Decreto Legislativo 1182 (2015), Segunda Disposición Complementaria Final

The law asks

Data derived from telecommunications: 12 months online and real time, then 24 months more; delivered after judicial authorisation.

Minimum 36 months
Ports: not named by the law
Who asks Judicial authorisation; data up to 12 months old online, older data within 7 days.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 36

Bolivia

BOOperators here today

Ley 164 (2011); Reglamento DS 1391 (2012), arts. 169 and 174–176

The law asks

No specific period for traffic or IP data. Operators keep their physical and electronic records of activity at least 5 years (art. 169) and hand over what they hold on a court order.

Minimum 60 months
Ports: not named by the law
Who asks A judge, by court order.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 60

Mexico

MXOperators here today

Ley en Materia de Telecomunicaciones y Radiodifusión (2025), art. 183 fr. II; IFT Lineamientos de Colaboración (2015, 2025)

The law asks

Records of communications from numbered lines (phone, SMS): 12 months in real time, then 12 more, stored in Mexico. The law does not name IP addresses or ports; internet access logs fall outside its wording.

Minimum 24 months
Ports: not named by the law
Who asks Authorised security and justice authorities; 24 h (48 h for data older than 12 months).

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 24

Keeping the lawful log 24 months matches the law’s period for phone records.

Spain

ESOperators here today

Ley 25/2007, arts. 3 and 5

The law asks

Subscriber identity, assigned IP address, connection and disconnection times; never content; 7 days to answer a court order.

Minimum 12 months
Ports: not named by the law
Who asks Judicial police with prior court authorisation; 7 calendar days.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 12

Portugal

PTOperators here today

Lei 32/2008 as amended by Lei 18/2024, art. 6

The law asks

Civil identity, base data and source IP addresses for one year; traffic data only when a judge orders it.

Minimum 12 months
Ports: not named by the law
Who asks An investigating judge, on the Public Prosecutor’s request.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 12

Bulgaria

BGOperators here today

Закон за електронните съобщения, чл. 251б–251и (Electronic Communications Act)

The law asks

User identity behind each IP address, login and logout times; destroyed after 6 months; 72 h to answer.

Minimum 6 months
Ports: not named by the law
Who asks Listed state bodies with a district court order; 72 h.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 6

Set exactly 6: the law also asks for deletion.

Other countries we checked

The same rows for countries where we have read the law.

Brazil

Marco Civil da Internet, Lei 12.965/2014, arts. 13–14; Decreto 8.771/2016, art. 15-A (2026)

The law asks

Connection records with the source port, one year. The access provider must not keep destinations.

Minimum 12 months
Ports: named by the law
Who asks A court order; police, administrative authority or prosecutor may ask to preserve longer.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 12

Level 2 stays off: the law forbids the access provider to keep destinations.

India

DoT Unified Licence, clause 39.20 and Chapter IX 7.1–7.2 (amended 21.12.2021); IPDR/NAT parameters revised by DoT letter of 16.11.2021; Telecommunications Authorisation Rules 2026 (G.S.R. 513(E)), rules 45(2) and 76(1)(a)

The law asks

IPDR and subscriber log-in/log-out records for 2 years, NAT syslog of leased-line customers for 2 years, with the IPDR/NAT parameters DoT sets; kept in India.

Minimum 24 months
Ports: named by the law
Who asks The Department of Telecommunications and authorised agencies.

The Super Router keeps

2Level 2: every connection with exact ports, destination, protocol, start and end — and level 1.

The setting

dtvsol lawful retention 24
dtvsol-keeper retention 24

Level 2: Super Keeper, on your premises.

The law wants the records kept in the country: the Keeper is on your own premises.

Pakistan

Prevention of Electronic Crimes Act 2016, s.32; PTA district internet class licence (2025), clause 5.8.1

The law asks

Traffic data (origin, destination, route, time, duration) and session logs with IP addresses; handed over on a court warrant.

Minimum 12 months
Ports: not named by the law
Who asks Investigation agency or authorised officer with a court warrant.

The Super Router keeps

2Level 2: every connection with exact ports, destination, protocol, start and end — and level 1.

The setting

dtvsol lawful retention 12
dtvsol-keeper retention 12

Level 2: Super Keeper, on your premises.

Bangladesh

BTRC ISP Regulatory and Licensing Guidelines (15.12.2020)

The law asks

Daily user logs for 3 months, 6 months when the regulator or police ask. A 12-month IPDR rule is in draft.

Minimum 3 months
Ports: not named by the law
Who asks The regulator (BTRC) or law-enforcement agencies.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 6

The law asks for 3; the router’s minimum, 6 months, covers it.

Vietnam

Luật An ninh mạng số 116/2025/QH15; Nghị định 333/2026/NĐ-CP, Điều 22 (Law on Cybersecurity; Decree 333, art. 22)

The law asks

Source and destination IP and port, protocol, complete NAT mapping, session times and subscriber; 24 h to answer, 3 h when urgent.

Minimum 12 months
Ports: named by the law
Who asks The Ministry of Public Security’s cybersecurity force; 24 h, 3 h when urgent.

The Super Router keeps

2Level 2: every connection with exact ports, destination, protocol, start and end — and level 1.

The setting

dtvsol lawful retention 12
dtvsol-keeper retention 12

Level 2: Super Keeper, on your premises.

The law wants the records kept in the country: the Keeper is on your own premises.

Indonesia

PP 52/2000, art. 17; Permenkominfo 13/2019, art. 8(1)(q) and art. 20

The law asks

Detailed usage records for 3 months; subscriber name and ID number until 90 days after the contract ends.

Minimum 3 months
Ports: not named by the law
Who asks Attorney General, National Police or investigators, in writing; 5 calendar days for stored data.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 6

The law asks for 3; the router’s minimum, 6 months, covers it.

Philippines

Cybercrime Prevention Act, RA 10175, s.13, 14 and 17

The law asks

Traffic data and subscriber information for 6 months, one 6-month extension, then destroyed; 72 h to answer a court warrant.

Minimum 6 months
Ports: not named by the law
Who asks Law enforcement with a court warrant; 72 h.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 6

Set exactly 6: the law also asks for deletion.

Thailand

Computer-Related Crime Act B.E. 2550 (2007), s.26; MDES notification on traffic data retention B.E. 2564 (2021), clauses 9 and 12

The law asks

Login logs, user ID, assigned IP address and connection times; every user behind NAT must be identifiable; officials may extend to 2 years.

Minimum 3 months
NAT: named; ports: not named
Who asks Competent officials under the Act; immediately on request.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 6

The law asks for 3; the router’s minimum, 6 months, covers it.

Malaysia

Communications and Multimedia Act 1998, s.268A (2025); Cybercrimes Bill 2026

The law asks

No binding retention period yet; the regulator proposed 12 to 18 months (2025). Preservation notices: 90 days.

No fixed period
Ports: not named by the law
Who asks Police or regulator (MCMC) officers by written notice.

The Super Router keeps

1Level 1: who held each public IP and CGNAT port block, from when to when, with the private IP, MAC and subscriber.

The setting

dtvsol lawful retention 12

The law sets no period; 12 months is the router’s default.

Evidence that holds

On the router and on the Keeper alike.

Sealed records

Every record and every search is sealed: one changed or removed by hand is detected, and dtvsol lawful verify (dtvsol-keeper verify on the Keeper) proves the rest is untouched.

Every search logged

Who searched, for which case, why, and what was found.

Deleted after the retention

Kept for the months you set, 6 to 120, then deleted by themselves, once a day.

Never leaves your premises

The identities stay on your router and your Keeper. The daily backup leaves them out, and nothing is sent to us.

What this does not do

We never keep content: no page, message or file — only who held which address and port and, with level 2, which connection went where.
Live interception is not part of this.
Each country’s delivery formats (authority portals, file layouts) are checked per country, with you.
A subscriber behind its own second NAT is marked: its port cannot be told apart.

Information, not legal advice. Confirm with your regulator. Rows re-checked every six months; date on each row.

Your country is not here?

Tell us your country: we check the law with you and set the retention.

Talk to us →

Call us — enable JavaScript to see the number, or use the contact form.