European UnionA government agency intercepts my phone calls for security reasons. What EU rules apply?
EU law strictly limits phone call interception by government agencies to what is necessary and proportionate for national security, subject to prior judicial authorisation and independent oversight.
What the Law Says
EU law protects the confidentiality of electronic communications, including phone calls, and places strict limits on state interception—even for security reasons.
The ePrivacy Directive (2002/58/EC, as amended) is the core EU law governing confidentiality of communications. It prohibits interception of communications without user consent—except where permitted by national law for national security, defence, public safety, or criminal investigations.
Any exception must comply with the EU Charter of Fundamental Rights, especially Articles 7 (respect for private life) and 8 (protection of personal data), and must meet the principles of legality, necessity, and proportionality.
Article 15(1) of the ePrivacy Directive explicitly allows Member States to restrict confidentiality 'only if such restriction constitutes a necessary, appropriate and proportionate measure within a democratic society'. Crucially, such measures must be subject to 'adequate safeguards', including prior judicial authorisation where possible and independent oversight.
Statutory TextMember States may adopt legislative measures to restrict the scope of the rights and obligations provided for in this Directive where such restriction constitutes a necessary, appropriate and proportionate measure within a democratic society...
— ePrivacy Directive 2002/58/EC, Art. 15(1) — Restrictions on confidentiality
Statutory TextEveryone has the right to respect for his or her private and family life, home and communications.
— Charter of Fundamental Rights of the EU, Art. 7 — Respect for private and family life
Statutory TextEveryone has the right to the protection of personal data concerning him or her.
— Charter of Fundamental Rights of the EU, Art. 8 — Protection of personal data
What Courts Have Said
The Court of Justice of the EU (CJEU) and the European Court of Human Rights (ECtHR) have repeatedly ruled that bulk or indiscriminate interception violates fundamental rights—even for national security.
Mass retention of traffic and location data by governments is illegal unless strictly limited to serious crime and subject to prior judicial review and safeguards.
Bulk interception regimes violate Article 8 ECHR unless they include robust independent oversight, clear targeting criteria, and prior authorisation for accessing content.
What to Do
Check whether your national law provides for judicial authorisation before interception—and whether it was obtained in your case.
Request information from the agency about the legal basis, duration, and purpose of the interception (under national freedom of information or data protection laws).
File a complaint with your national Data Protection Authority (DPA) and/or national ombudsman overseeing intelligence services.
If domestic remedies are exhausted, consider applying to the European Court of Human Rights (ECtHR) alleging violation of Article 8 ECHR.
Sources
Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.