France's Council of State ruled national security concerns justify the retention of data for law enforcement investigations. The council examined how the ePrivacy Directive and EU General Data Protection Regulation match up with "French rules on the retention of connection data" following appeals made by several nongovernmental organizations. The council ordered the French government to continuously reassess all national security threats to justify retaining data and submit data use to an independent authority for clearance.