The national security service can retain private data, on the pretext of combatting suspected cyber threats.