{"id":8457,"date":"2018-08-25T15:00:23","date_gmt":"2018-08-25T22:00:23","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=8457"},"modified":"2025-04-28T02:30:27","modified_gmt":"2025-04-28T09:30:27","slug":"beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/","title":{"rendered":"Beyond the GDPR: here comes the EU’s ePrivacy regulation \u2013 but not yet"},"content":{"rendered":"

The General Data Protection Regulation<\/a> (GDPR) is the most important \u2013 and controversial<\/a> \u2013 privacy law passed in recent years. Despite its origin in the EU, its reach is truly global, since it affects anyone storing the personal data of EU citizens, no matter where the organization is located. In part because of a flurry of annoying pop-ups asking visitors to sites to agree to new terms and conditions, most people know about the GDPR by now. But few have heard of its sibling, the EU\u2019s proposed ePrivacy Regulation, which in many respects will be even more far-reaching than the GDPR.<\/p>\n

Where the GDPR protects personal data when it is gathered and stored, the ePrivacy Regulation protects personal data when it is transmitted. Traditional telecoms companies are already subject to laws in this area; the ePrivacy Regulation aims to extend that to the new generation of online services that transmit personal data over the Internet. In particular, the proposed law seeks to regulate how metadata is gathered and used, and to limit how people are tracked online, for example using cookies.<\/p>\n

The European Commission published its draft ePrivacy Regulation text, designed to update the old 2002 regulations governing this area<\/a>, in January 2017<\/a>. As is customary with the EU legislative process, the European Parliament then set to work to produce its own version of the text, amending the European Commission\u2019s original proposal. The German site Netzpolitik, which has followed the legislation closely, summarized the six main points of the European Parliament\u2019s draft as follows (original in German<\/a>).<\/p>\n

No data processing without consent<\/i><\/p>\n

The rich metadata that online activity routinely generates may only be analyzed and exploited by Internet companies if they obtain explicit permission from users. This contrasts with the current situation, where metadata is collected and used for analyzing the interests of visitors, and targeting them with advertising. Naturally, the Internet companies that make their profits from this kind of metadata use are fighting hard against this provision. Instead, they want companies to be allowed to use this data as long as they have a \u201clegitimate interest\u201d in it, where \u201clegitimate\u201d is so vague as to allow more or less anything.<\/p>\n

Simple protection against online tracking<\/i><\/p>\n

Currently, everyone is tracked everywhere they go online unless they take often quite extreme measures to avoid this. Most people don\u2019t bother, which means that online tracking is routine. The European Parliament wants the ePrivacy Regulation to make it easy to opt out of tracking \u2013 for example, by using settings in a browser or smartphone operating system. In addition, so-called \u201ctracking walls\u201d, which block access to sites unless visitors agree to be tracked, would be forbidden.<\/p>\n

Privacy by default<\/i><\/p>\n

As with the GDPR, it must be easy for users to avoid being tracked when they use online services. This means that privacy must be the default, not something buried deep within confusing menus of options.<\/p>\n

Limits for physical world tracking<\/i><\/p>\n

The increasingly common practice of tracking people as they move around physical spaces \u2013 for example, shopping areas \u2013 using Wifi or Bluetooth signals, will be regulated. Offline tracking will only be permitted if users have given their explicit consent, or if data gathering is limited in time and space, and used for purely statistical purposes.<\/p>\n

A right to encryption<\/i><\/p>\n

The European Parliament\u2019s text requires service providers to protect users\u2019 communications with \u201cstate of the art\u201d technology, and explicitly mentions cryptographic methods, such as end-to-end encryption. It also includes the following strong statement against the use of crypto backdoors<\/a> by governments:<\/p>\n

member States shall not impose any obligations on electronic communications service providers or software manufacturers that would result in the weakening of the confidentiality and integrity of their networks and services or the terminal equipment, including the encryption methods used.<\/p><\/blockquote>\n

Greater transparency for government access to communications<\/i><\/p>\n

As you might expect, the draft text contains exceptions to the right to confidential communications, for reasons of law enforcement or national security. However, the ePrivacy Regulation would also introduce comprehensive reporting requirements for both communication providers and national governments, which would detail when and how data access to personal information was requested.<\/p>\n

Given the far-reaching and often quite radical nature of the ePrivacy Regulation\u2019s measures, it is hardly surprising that the lobbying against it has been intense, as a report from Corporate European Observatory explores<\/a>. Jan Philipp Albrecht, the German MEP largely responsible for steering the GDPR through the European Parliament, told The Privacy Advisor how opponents of the new law made some outlandish claims<\/a>:<\/p>\n

It\u2019s the death of the press, it\u2019s the death of all apps and free services online, it will be shutting down the internet, it is the end of the telcos, we will lose everything. This is really very radical lobbying with regard to the tone, and in my view it is completely over-exaggerated.<\/p><\/blockquote>\n

Despite that opposition, the European Parliament approved the amendments<\/a> to the original European Commission text in October 2017, by 318 votes to 280, with 20 abstentions. The lead MEP for the ePrivacy Regulation, Marju Lauristin, created a document with a side-by-side comparison of the two versions<\/a>, which shows how the European Parliament strengthened many measures.<\/p>\n

However, that does not mean that the ePrivacy battle is over. Because of the complex interaction of the various parts of the EU political machine, the presidency of the Council of the EU<\/a> \u2013 the third body alongside the European Parliament and European Commission \u2013 must now draw up its own version of the proposed text. Once that happens, the three bodies get together for so-called \u201ctrilogue<\/a>\u201d negotiations to come up with a final, compromise text, which can then become law.<\/p>\n

In a further complication arising from the EU\u2019s political structure, the presidency of the Council of the EU rotates among all the member states. It is currently held by Austria, which unexpectedly proposed weakening two key sections of the ePrivacy text<\/a> \u2013 one that forbids \u201ctracking walls\u201d, and the other requiring \u201cPrivacy By Design and By Default\u201d.<\/p>\n

A few days later, in an agenda document for a meeting in December this year, the Austrian Presidency announced that it would be providing a \u201cstatus report\u201d for the ePrivacy Regulation. That was a coded way of saying that it would not be making it one of the priorities for its six-month Presidency, and that no further progress would be made with the law. Since there are important elections for the European Parliament in May 2019, the practical effect of the Austrian Presidency\u2019s decision is that the earliest the ePrivacy Regulation could enter into force would be 2020.<\/p>\n

The surprise move by Austria to halt work on the new privacy law is almost certainly down to yet more lobbying, notably by the German publishing industry. It\u2019s part of a continuing attempt to de-rail this important legislation, which would greatly strengthen privacy protections for EU citizens. Moreover, as with the GDPR, if passed in anything like its current version, the ePrivacy Regulation is also likely to have important knock-on effects for Internet users around the world.<\/p>\n

Featured image by European Commission<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the EU, its reach is truly global, since it affects anyone storing the personal data of EU citizens, no matter where the organization is located. In part because of a flurry … Continue reading “Beyond the GDPR: here comes the EU’s ePrivacy regulation \u2013 but not yet”<\/span><\/a><\/p>\n","protected":false},"author":20,"featured_media":8458,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":false,"_modified_date":"","footnotes":""},"categories":[1,130,1941],"tags":[879,507,213,401,200,485,51],"class_list":["post-8457","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-governments","category-surveillance","tag-austria","tag-backdoors","tag-cookies","tag-encryption","tag-eu","tag-gdpr","tag-surveillance"],"yoast_head":"\nBeyond the GDPR: here comes the EU's ePrivacy regulation \u2013 but not yet<\/title>\n<meta name=\"description\" content=\"The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Beyond the GDPR: here comes the EU's ePrivacy regulation \u2013 but not yet\" \/>\n<meta property=\"og:description\" content=\"The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2018-08-25T22:00:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-28T09:30:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1239\" \/>\n\t<meta property=\"og:image:height\" content=\"704\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Glyn Moody\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/twitter.com\/glynmoody\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Glyn Moody\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\"},\"author\":{\"name\":\"Glyn Moody\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\"},\"headline\":\"Beyond the GDPR: here comes the EU’s ePrivacy regulation \u2013 but not yet\",\"datePublished\":\"2018-08-25T22:00:23+00:00\",\"dateModified\":\"2025-04-28T09:30:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\"},\"wordCount\":1175,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png\",\"keywords\":[\"austria\",\"backdoors\",\"cookies\",\"encryption\",\"EU\",\"gdpr\",\"surveillance\"],\"articleSection\":[\"General Privacy News\",\"Governments\",\"Surveillance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\",\"name\":\"Beyond the GDPR: here comes the EU's ePrivacy regulation \u2013 but not yet\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png\",\"datePublished\":\"2018-08-25T22:00:23+00:00\",\"dateModified\":\"2025-04-28T09:30:27+00:00\",\"description\":\"The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png\",\"width\":1239,\"height\":704},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Beyond the GDPR: here comes the EU’s ePrivacy regulation \u2013 but not yet\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775\",\"name\":\"Glyn Moody\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g\",\"caption\":\"Glyn Moody\"},\"description\":\"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \\\"Rebel Code,\\\" is the first and only detailed history of the rise of open source, while his subsequent work, \\\"The Digital Code of Life,\\\" explores bioinformatics - the intersection of computing with genomics.\",\"sameAs\":[\"http:\/\/opendotdotdot.blogspot.com\/\",\"https:\/\/www.linkedin.com\/in\/glynmoody\/\",\"https:\/\/x.com\/http:\/\/twitter.com\/glynmoody\"],\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Beyond the GDPR: here comes the EU's ePrivacy regulation \u2013 but not yet","description":"The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/","og_locale":"en_US","og_type":"article","og_title":"Beyond the GDPR: here comes the EU's ePrivacy regulation \u2013 but not yet","og_description":"The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2018-08-25T22:00:23+00:00","article_modified_time":"2025-04-28T09:30:27+00:00","og_image":[{"width":1239,"height":704,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png","type":"image\/png"}],"author":"Glyn Moody","twitter_card":"summary_large_image","twitter_creator":"@http:\/\/twitter.com\/glynmoody","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Glyn Moody","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/"},"author":{"name":"Glyn Moody","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775"},"headline":"Beyond the GDPR: here comes the EU’s ePrivacy regulation \u2013 but not yet","datePublished":"2018-08-25T22:00:23+00:00","dateModified":"2025-04-28T09:30:27+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/"},"wordCount":1175,"commentCount":0,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png","keywords":["austria","backdoors","cookies","encryption","EU","gdpr","surveillance"],"articleSection":["General Privacy News","Governments","Surveillance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/","name":"Beyond the GDPR: here comes the EU's ePrivacy regulation \u2013 but not yet","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png","datePublished":"2018-08-25T22:00:23+00:00","dateModified":"2025-04-28T09:30:27+00:00","description":"The General Data Protection Regulation (GDPR) is the most important \u2013 and controversial \u2013 privacy law passed in recent years. Despite its origin in the","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/08\/eprivacy.png","width":1239,"height":704},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/beyond-the-gdpr-here-comes-the-eus-e-privacy-regulation-but-not-yet\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Beyond the GDPR: here comes the EU’s ePrivacy regulation \u2013 but not yet"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/99ba810662cdf92245f61106c0c29775","name":"Glyn Moody","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/220b7317aa40ea679b23b79c368761eb6fd45039d978354b06dc7683a812d2fc?s=96&d=mm&r=g","caption":"Glyn Moody"},"description":"Glyn Moody is a freelance journalist who writes and speaks about privacy, surveillance, digital rights, open source, copyright, patents and general policy issues involving digital technology. He started covering the business use of the Internet in 1994, and wrote the first mainstream feature about Linux, which appeared in Wired in August 1997. His book, \"Rebel Code,\" is the first and only detailed history of the rise of open source, while his subsequent work, \"The Digital Code of Life,\" explores bioinformatics - the intersection of computing with genomics.","sameAs":["http:\/\/opendotdotdot.blogspot.com\/","https:\/\/www.linkedin.com\/in\/glynmoody\/","https:\/\/x.com\/http:\/\/twitter.com\/glynmoody"],"url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/glynmoody\/"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/8457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=8457"}],"version-history":[{"count":17,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/8457\/revisions"}],"predecessor-version":[{"id":29161,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/8457\/revisions\/29161"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/8458"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=8457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=8457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=8457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}