The Department of Social Protection could be in breach of European law for retaining the historical data of 3.2m holders of the public service card (PSC) in an attempt to stop future welfare fraud.