And that's true in many other Europeans countries as well. And at least here in Portugal those permits only allow you to store those records for a specific purpose (security), for a limited time period (30 days) and can't be shared with third-parties.