EU: According to a directive passed 2006, a minimum of six months and at most 24 months. But that directive was ruled invalid and anulled in 2014. https://en.wikipedia.org/wiki/Data_Retention_Directive