Portugal’s commission for data protection (CNPD) has sounded the alert: a draft law designed to promote the ‘interoperationality of electronic tolls systems in the European Union’ seeks to retain details of drivers with tolls in arrears for eight years. The CNPD believes this is all wrong: drivers’ data should be erased at the point where they settle their debts, particularly if they pay on time – and within a “reasonable period” otherwise. Eight years is “excessive”, says the commission, which is now pushing the government to “re think” its text which is transposing a European directive into Portuguese law.