Legislative Framework - The Privacy and Electronic Communications Directive

8 important questions on Legislative Framework - The Privacy and Electronic Communications Directive

What did the ePrivacy Directive from 2002 do?

It replaced and widened the then existing telecommunications laws to cover all electronic communications.

When was the ePrivacy Directive widened and what was it's aim?

2009, encourage industry competition, consumer choice and protection, including stronger rights to privacy.

What is the applicability of the ePrivacy Directive?

Processing of personal data over public networks in the EU. If the service is not publicly available, the Directive does not apply.
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

What are the key provisions of the ePrivacy Directive?

  1. providers are required to take appropriate technical and organizational measures - safety
  2. member states are required to ensure confidentiality of communications and traffic - there are exceptions
  3. most forms of digital marketing require prior (opt-in) consent
  4. processing of traffic and billing data is subject to certain restrictions
  5. location data may be processed only if made anonymous or with consent
  6. subscribers must be informed before being included in any directory

When was the ePrivacy Directive amended?

2009


What are the most pertinent changes in the 2009 amendment of the ePrivacy Directive?

  • mandatory notification for personal data breaches by electronic service providers -DPA and individuals (if poses high risk)
  • clarifications on scope
  • right of actions against unsolicited communications
  • provisions affecting 'COOKIES'

Explain what the ePrivacy Directive in Article 5(3) tells about the use of 'cookies'.


Storing of information (or gaining of access to information already stored) in the terminal equipment of the subscriber or user is only allowed on the condition that the user has given consent, having been provided with clear and comprehensive information.

Exceptions:
  • for the sole purpose of carrying the transmission
  • strictly necessary for the provision of an information society service explicitly requested by the subscriber or user

What did the European Data Protection Board (EDPB) adopt in 2019?


An opinion on the interplay between the ePrivacy Directive and the GDPR. It addresses:
  • competence, tasks and powers of DPA's
  • consistency mechanism in situations where both the GDPR and the ePrivacy Directive apply

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo