The Privacy and Electronic Communications (EC Directive) Regulations 2003

1. Introductory Text

2. 1. Citation and commencement

3. 2. Interpretation

4. 3. Revocation of the Telecommunications (Data Protection and Privacy) Regulations 1999

5. 4. Relationship between these Regulations and the data protection legislation

6. 5. Security of public electronic communications services

7. 5A. Personal data breach

8. 5B. Personal data breach: audit

9. 5C. Personal data breach: enforcement

10. 6. Confidentiality of communications

11. 6A. Power to provide exceptions to regulation 6(1)

12. 7. Restrictions on the processing of certain traffic data

13. 8. Further provisions relating to the processing of traffic data under regulation 7

14. 9. Itemised billing and privacy

15. 10. Prevention of calling line identification – outgoing calls

16. 11. Prevention of calling or connected line identification – incoming calls

17. 12. Publication of information for the purposes of regulations 10 and 11

18. 13. Co-operation of communications providers for the purposes of regulations 10 and 11

19. 14. Restrictions on the processing of location data

20. 15. Tracing of malicious or nuisance calls

21. 16. Emergency calls

22. 16A. Emergency alerts

23. 17. Termination of automatic call forwarding

24. 18. Directories of subscribers

25. 19. Use of automated calling systems

26. 20. Use of facsimile machines for direct marketing purposes

27. 21. Calls for direct marketing purposes

28. 21A. Calls for direct marketing of claims management services

29. 21B. Calls for direct marketing in relation to pension schemes

30. 22. Use of electronic mail for direct marketing purposes

31. 23. Use of electronic mail for direct marketing purposes where the identity or address of the sender is concealed

32. 24. Information to be provided for the purposes of regulations 19 to 21A

33. 25. Register to be kept for the purposes of regulation 20

34. 26. Register to be kept for the purposes of regulation 21

35. 27. Modification of contracts

36. 28. National security

37. 29. Legal requirements, law enforcement etc.

38. 29A. (1) Where regulations 28 and 29 apply, communications providers must...

39. 30. Proceedings for compensation for failure to comply with requirements of the Regulations

40. 31. Enforcement – extension of Part V of the Data Protection Act 1998

41. 31A. Enforcement: third party information notices

42. 31B. Enforcement: appeals

43. 32. Request that the Commissioner exercise his enforcement functions

44. 33. Technical advice to the Commissioner

45. 34. Amendment to the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000

46. 35. Amendment to the Electronic Communications (Universal Service) Order 2003

47. 36. Transitional provisions

48. 37. Review of implementation

49. Signature

50. 1. SCHEDULE 1

       Modifications for the purposes of these Regulations to Part V and sections 55A to 55E of the Data Protection Act 1998 and Schedules 6 and 9 to that Act as extended by Regulation 31

       1. Modifications of the Data Protection Act 1998

          1. 1. In section 40— (a) in subsection (1), for the words...

          2. 2. In section 41(1) and (2), for the words “data protection...

          3. 2A. Sections 41A to 41C shall be omitted.

          4. 3. Section 42 shall be omitted.

          5. 4. In section 43— (a) for subsections (1) and (2) there...

          6. 5. Sections 44, 45 and 46 shall be omitted.

          7. 6. In section 47— (a) in subsection (1), “special information notice”...

          8. 7. In section 48— (a) in subsections (1) and (3), for...

          9. 8. In section 49 subsection (5) shall be omitted.

          10. 8A. Except where paragraph 8AA applies, in section 55A—

          11. 8AA. In section 55A, when applied to regulations 19 to 24...

          12. 8B. In section 55B, for the words “data controller” (in subsections...

          13. 8C. In section 55E, for the words “data controller” in subsection...

          14. 9. In paragraph 4(1) of Schedule 6, for the words “(2)...

          15. 10. In paragraph 1 of Schedule 9— (a) for subparagraph (1)(a)...

          16. 10A. In paragraph 2(1A) of Schedule 9 for “assessment notice” there...

          17. 11. In paragraph 9 of Schedule 9— (a) in subparagraph (1)(a)...

       2. Modifications of secondary legislation

          1. 12. Modification of the Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010

          2. 13. Modification of the Data Protection (Monetary Penalties) Order 2010

    2. SCHEDULE 2

       Transitional provisions

       1. Interpretation

          1. 1. In this Schedule “the 1999 Regulations” means the Telecommunications (Data...

       2. Directories

          1. 2. (1) Regulation 18 of these Regulations shall not apply in...

       3. Notifications

          1. 3. (1) A notification of consent given to a caller by...

       4. Registers kept under regulations 25 and 26

          1. 4. (1) A notification given by a subscriber pursuant to regulation...

       5. References in these Regulations to OFCOM

          1. 5. In relation to times before an order made under section...

51. Explanatory Note