European Communities (Electronic Communications Networks and Services) (Data Protection and Privacy) Regulations 2003

Statutory Instrument No.535/2003

I, Dermot Ahern, Minister for Communications, Marine and Natural Resources, in exercise of the powers referred on me by Section 3 of the European Communities Act, 1972 (No. 27 of 1972) for the purposes of giving effect to Directive No. 2002/58/EC1 of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and protection of privacy in the electronic communications sector, hereby make the following Regulations:

Citation and commencement

1. (1) These Regulations may be cited as the European Communities (Electronic Communications Networks and Services) (Data Protection and Privacy Regulations 2003.

(2) These Regulations shall come into operation on 6 November 2003.

Interpretation

2. (1) In these Regulations (except where the context otherwise requires)

“Access Regulations” mean the European Communities (Electronic Communications Networks and Services)(Access) Regulations 2003 ( S.I. No. 305 of 2003 );

“Act of 1983” means the Postal and Telecommunication Services Act, 1983 (No. 24 of 1983);

“Act of 2002” means the Communications Regulation Act 2002 (No. 20 of 2002);

“Acts” mean the Data Protection Acts 1988 and 2003;

“Authorisation Regulations” mean the European Communities (Electronic Communications Networks and Services) (Authorisation) Regulations 2003 ( S.I. No. 306 of 2003 );

“automatic calling machine” means an automatic calling machine or system which, when activated, operates to make calls without human intervention;

“blocking” in relation to data, means so marking the data that it is not possible to process it for purposes in relation to which it is marked;

“call” means a connection established by means of a publicly available telephone service allowing two-way communication in real time;

“Commissioner” means the Data Protection Commissioner;

“communication” means any information exchanged or conveyed between a finite number of parties by means of a publicly available electronic communications service, but does not include any information conveyed as part of a broadcasting service to the public over the electronic communications network except to the extent that the information can be related to the identifiable subscriber or user receiving the information;

“consent” by a user or subscriber means a data subject's consent in accordance with the Acts and these Regulations;

“data” means automated data and manual data;

“data controller” means a person who either alone or with others controls the contents and use of personal data;

“Data Protection Directive” means the Directive 95/46/EC2 of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;

“Data Protection Regulations” mean the European Communities (Data Protection and Privacy in Telecommunications) Regulations 2002 (SI 192 of 2002);

“directory” means a directory of subscribers in printed or electronic form —

(a) that is available to members of the public, or,

(b) information from which is available to members of the public by way of a directory enquiry service;

“Directive” means Directive 2002/58/EC3 of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector;

“EEA Agreement” means the Agreement on the European Economic Area signed at Oporto on 2 May 1992 as adjusted by the Protocol signed at Brussels on 17 March 1993;

“electronic mail” means any text, voice, sound or image message including an SMS message sent over a public communications network, which can be stored in the network or in the recipient's terminal equipment until it is collected by the recipient;

“enactment” means a statute or an instrument made under or power conferred by statute;

“European Economic Area” has the meaning assigned to it by the EEA Agreement;

“Framework Regulations” mean the European Communities (Electronic Communications Networks and Services) (Framework) Regulations 2003 ( S.I. No. 307 of 2003 );

“interconnection” means the physical and logical linking of public communications networks used by the same or a different undertaking in order to allow the users of one undertaking to communicate with users of the same or another undertaking, or to access services provided by another undertaking. Services may be provided by the parties involved or other parties who have access to the network. Interconnection is a specific type of access implemented between the public network operators;

“location data” means any data processed in an electronic communications network, indicating the geographic position of the terminal equipment of a user of a publicly available electronic communications service;

“National Directory Database” means the record of all subscribers of publicly available telephone services in the State, including those with fixed, personal and mobile numbers, who have not refused to be included in that record, kept in accordance with Regulation 4(3) of the Universal Service Regulations and these Regulations;

“operator” means a person designated by the Regulator under Regulation 7(1 of the Universal Service Regulations to provide a universal service (within the meaning of those Regulations) in respect of the directory services referred to in Regulation 4 of those Regulations;

“personal data” means data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, the possession of the data controller;

“processing”, of or in relation to information or data, means performing any operation or set of operations on the information or data, whether or not by automatic means, including-

(a) obtaining, recording or keeping the information or data,

(b) collecting organising, storing, altering or adapting the information or data,

(c) retrieving, consulting or using the information or data,

(d) disclosing the information or data by transmitting, disseminating or otherwise making it available, or,

(e) aligning, combining, blocking, erasing or destroying the information or data,

and, cognate words shall be construed accordingly;

“Regulator” means the Commission for Communications Regulation;

“subscriber” means any natural person or legal entity who or which is party to a contract with the provider of publicly available electronic communications services for the supply of such services;

“traffic data” means any data processed for the purpose of the conveyance of a communication on an electronic communications network or for the billing thereof;

“undertaking” means a person engaged or intending to engage in the provision of electronic communications networks or services or associated facilities;

“Universal Service Regulations” mean the European Communities (Electronic Communications Networks and Services) (Universal Service and Users' Rights) Regulations 2003 ( S.I. No. 308 of 2003 );

“unsolicited call” means a call that is not requested by the called party;

“unsolicited communication” means a communication that is not requested by the contacted party;

“user” means any natural person using a publicly available electronic communications service, for private or business purposes, without necessarily having subscribed to this service;

“value added service” means any service which requires the processing of traffic data or location data other than traffic data beyond what is necessary for the transmission of a communication or the billing thereof.

(2) A word or expression that is used in these Regulations and is also used in the Directive has, unless the context otherwise requires the same meaning that it has in the Directive in these Regulations.

(3) A word or expression that is used in these Regulations and is also used in the Data Protection Directive, the Acts and the Framework Regulations has unless the context otherwise requires the same meaning that it has in the Data Protection Directive, the Acts and the Framework Regulations in these Regulations.

(4) In these Regulations unless the contrary intention appears:

(a) a reference to a Regulation is a reference to a Regulation in these Regulations, and,

(b) a reference to a paragraph or sub-paragraph is a reference to a paragraph or sub-paragraph of the provision in which the reference occurs.

(5) In these Regulations a reference to any enactment is to be construed as a reference to the enactment as amended by any subsequent enactment including these Regulations.

(6) (a) A reference in any enactment to Directive 97/66/EC4 of the European Parliament and of the Council of 15 December 1997 concerning the processing of personal data and the protection of privacy in the telecommunications sector is to be construed as a reference to Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and protection of privacy in the electronic communications sector.

(b) A reference in any enactment to the European Communities (Data Protection and Privacy in Telecommunications) Regulation 2002 ( S.I. No. 192 of 2002 ) is to be construed as a reference to these Regulations.

Services to which these Regulations apply

3. (1) These Regulations apply to the processing of personal data in connection with the provision of publicly available electronic communication services in public communications networks in the State and where relevant the European Community.

(2) Regulations 8, 10 and 11 apply to subscriber lines connected to digital exchanges, and where technically possible and if they do not require a disproportionate economic effort, to subscriber lines connected to analogue exchanges.

(3) For the purposes of paragraph (2), the Regulator may issue a notice...

To continue reading

Request your trial

VLEX uses login cookies to provide you with a better browsing experience. If you click on 'Accept' or continue browsing this site we consider that you accept our cookie policy. ACCEPT