The ISPs can, and in the UK there is one of our lovely 'voluntary agreements' that has the ISP retaining information about web sites visited, but only for 4 days. Police need to move quickly, as they did in the riots last summer.

http://en.wikipedia.org/wiki/Telecommunications_data_retenti...