In Digital Rights Ireland and Seitlinger and Others [2014] C-293/12 and C-594/12, the Court of Justice of the European Union (CJEU) has ruled that the Data Retention Directive 2006/24/EC (the Directive) is invalid. This decision is expected to have wide-reaching implications for privacy laws across the European Union.