Data retention: the life, death and afterlife of a directive