For how long are ISPs allowed to store user browsing activity?
<p>If a guy living in an oppressive country such as Saudi Arabia visited an atheist site, for instance. 5 years later, would you tell him that there's a high possibility the ISP deleted the evidence of that from their servers or would you tell him to travel abroad and stay away? Just hypothetically.</p>

<p>In Saudi Arabia, the ISP (<a href="https://en.wikipedia.org/wiki/Communications_and_Information_Technology_Commission_(Saudi_Arabia)" rel="nofollow noreferrer">CITC</a>) blocks access to prohibited sites. If some website is deemed <em>haram</em>, you can't get to it. CITC is not omniscient, so it is possible that a site which could be forbidden, and eventually is forbidden, is not at some point forbidden.</p>

<p>There are <a href="https://www.lw.com/presentations/Data-Protection-in-the-Kingdom-of-Saudi-Arabia" rel="nofollow noreferrer">various laws</a> against hacking and requirements to safeguard information, and the <a href="http://www.citc.gov.sa/en/RulesandSystems/CITCSystem/Documents/LA%20_001_E_%20Telecom%20Act%20English.pdf" rel="nofollow noreferrer">Telecommunications Act</a> in Chapter 10 enumerates various forbidden acts (providing unlicensed internet access etc), and prohibits (18) </p>

<blockquote>
  <p>Other than in the course of duty, intentional disclosure of any
  information or contents of any message, which has been intercepted in
  the course of its transmission</p>
</blockquote>

<p>I will not attempt to interpret that: I believe that it means that it is illegal to intercept a message except if officially required to. An IP address is not a message (anyhow, the law is written in Arabic so we'd have to go to the actual text). In other words, there is nothing that would prohibit the ISP from handing over "who touched this site" information to the mutawwi`. There is also, from what I can tell, no law requiring them to <em>retain</em> such information. CITC makes a lot of information available online <a href="http://www.citc.gov.sa/en/Pages/default.aspx" rel="nofollow noreferrer">here</a>. Article 7 of <a href="http://www.citc.gov.sa/en/RulesandSystems/CITCSystem/Documents/LA_004_%20E_%20Anti-Cyber%20Crime%20Law.pdf" rel="nofollow noreferrer">The Anti-Cyber Crime Law</a> may make such access to a website illegal. In other words, there's no way to be certain, save for getting sworn testimony by government officials.</p>

<p>Answers for other regimes would no doubt be different in details.</p>

criminal-law internet constitutional-law