Where the Number Actually Comes From
Every UK mobile operator is required by law to store communications data: who called whom, when, from which cell tower, and which numbers each handset contacted. The statutory retention period is 12 months under the Telecommunications (Security) Act regime and the subsequent Data Retention regulations. After 12 months, that data is deleted automatically unless a police request or a preservation notice has already frozen it.
The number people quote from memory is usually wrong in a way that matters. They remember “police keep everything for six years”, which confuses two different systems. The six-year figure comes from the Police National Computer and intelligence records held by individual forces, not from traffic data held by phone companies. If you need the tower dump showing which handsets were near a location on a specific night, the 12-month clock on the operator’s side is the one that kills your request, and it starts on the day of the call, not the day you ask.
Text message content is different again. Most UK operators retain the content of SMS for only a few days, sometimes less. The fact that a message was sent can be recovered for up to a year. The words inside it usually cannot. This catches people out constantly: they assume a text is like an email, recoverable in full, and by the time a solicitor explains the difference the content window has closed.
The Legal Route
A private individual cannot ask an operator for someone else’s call records. There is no form for it and the operator would be committing a criminal offence by handing it over. The only routes are through an investigation or through litigation.
In a criminal case, police apply to the operator under the Investigatory Powers Act using a targeted authorisation. If you are a suspect, your own defence solicitor can force disclosure of the data the police obtained through the CPIA disclosure regime, and in practice this is where most defence tower data comes from: not a fresh request, but the material the prosecution already pulled and would rather not highlight.
In civil proceedings it is harder but possible. A disclosure order under CPR 31.19 or, for pre-action disclosure, CPR 31.16 can be directed at a third party such as an operator, but you need to show the documents are relevant to an issue that is genuinely in dispute. Judges do not grant these to satisfy curiosity. If your claim is about who was driving, or where someone was on a given evening, and call-site records would settle it, that is the kind of nexus the court wants to see before it compels a telecoms company.
The practical sequence for a civil applicant looks like this. Issue the claim or demonstrate a serious intention to litigate. Identify the specific data: number, date range, and whether you need subscriber details, call event records, or cell-site location. Frame the draft order narrowly, because operators push back on fishing requests and courts agree with them. Serve the application, expect the operator’s legal team to demand costs for compliance, and budget for that. A narrow order against one number for one week is cheap. A broad order across a quarter of call data is not.
What You Can Do Yourself, Right Now
Your own records are yours to keep, and most people throw them away. Download itemised billing from your account portal for every month in the window that matters, before the operator’s own online billing archive expires, which for most UK networks is 6 to 12 months of history. Export your handset’s call log and message metadata. Take screenshots of anything time-sensitive with the clock visible. If a dispute is brewing, write to your operator now and ask them to preserve the relevant records pending proceedings. A preservation letter has no formal legal force against a third party in a civil matter, but operators do flag accounts where preservation has been requested, and it costs nothing.
If you are the subject of a police investigation and you believe your own call data helps you, tell your solicitor immediately and in writing. Defence-initiated retention requests do happen, and the earlier the operator receives one the more likely the data survives the 12-month purge.
Timing Failures That Cost Cases
Three patterns recur. First, the client who waits for charge before asking about records, by which point the incident is 14 months past and the exculpatory tower data is gone. Second, the civil claimant whose solicitor sends a preservation letter to the wrong entity, the network brand rather than the licence holder, and burns six weeks. Third, the person who assumes deleted means deleted: deleted from the operator means deleted for practical purposes after retention expiry, but a handset’s own logs, cloud backups and synced devices often carry the same metadata for far longer, and those are within your control.
The honest summary is this. For someone else’s records you need a court or a police investigation, you need to move within 12 months of the events, and you need to ask narrowly. For your own records you need to act before the billing portal and the handset forget, and that window is shorter than people expect. For the content of texts, assume a few days and you will rarely be disappointed.