Under the new Act, communications data  which includes the who, when and where of our telephone calls, emails and instant messages  can be subject to a retention order for up to 12 months for reasons that go far beyond what is strictly necessary for fighting serious crime.