Data retention data is more suitable for older data, but it lacks the content information and the nature of the traffic data is still very basic. Without a data retention regime it could happen that no evidence at all can be acquired. With data retention at least some basic traffic information is available.
Data preservation is a more extensive measure which allows the preservation of content and other traffic data which is not preserved through data retention.
The more time has elapsed from the committed crime, the less results can be expected from data preservation.