The point of departure for this chapter is the decision of the European Court of Justice in the Digital Rights Ireland case, which annulled the European Data Retention Directive, in part because the use of retained data was not made subject to independent oversight. Next, it examines judgments from the national courts of the Netherlands and the UK, also focusing on the independent oversight issue, declaring invalid the data retention laws of those two countries. From the Digital Rights Ireland case and others, seven standards for oversight of intelligence services can be drawn: the oversight should be complete; it should encompass all stages of the intelligence cycle; it should be independent; it should take place prior to the imposition of a measure; it should be able to declare a measure unlawful and to provide redress; it should incorporate the adversary principle; and it should have sufficient resources.