A number of IT chiefs at large firms said last week they fear their organisations could be classed as communication service providers (CSPs) and be forced to store data traffic for several years.

Under the Regulation of Investigatory Powers Act and anti-terrorism laws, police can request data from CSPs, such as telecoms carriers and ISPs, and can even seize servers.

But the definition could include other firms with their own comms networks.

"In my next risk assessment, I shall warn my board of the danger of having our servers confiscated," said Ian Batten, IT manager of a large firm. "[It could] be crippling to our business."

The government has proposed a voluntary code for CSPs, but laws may follow consultation ending on 3 June.

Have your say: reply to IT Week