The data, including credit card details, phone numbers and home addresses, could be stored for up to five and a half years in Australia and 15 years in the U.S. There are also provisions for onward transfer of the data to third agencies and countries.