通信安全 隐私
Disclaimer: The information contained here is not warranted to be correct, accurate, valid, up to date or error-free nor does it constitute professional legal advice. Follow any advice or suggestions at your own risk and responsibility.
免责声明:此处包含的信息不保证正确,准确,有效,最新或无错误,也不构成专业的法律建议。 遵循任何建议或建议,后果自负。
那么,什么是隐私和电子通信法规? (So, what is the Privacy and Electronic Communications Regulations?)
The official title of these regulations is the Privacy and Electronic Communications (EC Directive) Regulations 2003 (I’ll call it the “2003 Regulations” from hereon). And since the 2003 Regulations were introduced, there has been two amendments to them – one in 2004 (2004 No. 1039) and one in 2011 (2011 No. 1208). If you are wondering why a lot of European websites (including websites hosted in the UK) are warning you of “cookies” being used, this is because of the amendments made in 2011 to the 2003 Regulations that the government needed to implement to comply with European law. The “European law” in question is EC Directive 2002/58/EC. A European directive is essentially a directive, or order, to the member states to implement domestic law, as appropriate to their country, to comply with the requirements covered in the European directive. European directives are only enforced upon the member state; and if a member state does not implement correct measures to comply with an EU directive, the government are answerable, not organisations or anyone that may naturally fall under the scope of what the EU directive covers.
这些法规的正式名称是2003年隐私和电子通讯(EC指令)法规 (以下简称“ 2003法规”)。 自从2003年实施《法规》以来,已经对其进行了两项修订,一项是2004年(2004年第1039号),另一项是2011年(2011年第1208号)。 如果您想知道为什么许多欧洲网站(包括在英国托管的网站)都警告您使用“ cookies”,这是因为政府在2011年对2003年法规进行了修改,以使其遵守欧洲法律。 有问题的“欧洲法律”是EC指令2002/58 / EC 。 欧洲指令实质上是对成员国实施适用于其本国的本国法律以遵守欧洲指令所涵盖要求的指令或命令。 欧洲指令仅对成员国执行; 如果成员国未采取正确的措施来遵守欧盟指令,则政府应负责任,而不是自然应属于欧盟指令涵盖范围之内的组织或任何人。
《隐私和电子通信法规》的主要目的是什么? (What is the primary purpose of the Privacy and Electronic Communications Regulations?)
If you are wondering what piece of law covers the sending of marketing e-mail, calls and texts – and the fact that companies cannot send unsolicited marketing messages without the consent of the “subscriber” – well, that’s the 2003 Regulations. However, the scope of what is covered under these regulations have recently expanded requiring website administrators to request the website visitor for consent before being able to store, or have access to information stored, on the computer of an end user. Cookies fall under the scope of these new regulations because cookies are small text files that are stored on the end user’s computer.
如果您想知道哪条法律涵盖了营销电子邮件,电话和短信的发送,以及公司未经“订户”同意就无法发送未经请求的营销信息的事实,那就是2003年法规。 但是,这些法规所涵盖的范围最近有所扩展,要求网站管理员在能够在最终用户的计算机上存储或访问所存储的信息之前,要求网站访问者同意 。 Cookie属于这些新法规的范围,因为Cookie是存储在最终用户计算机上的小型文本文件。
So how can consent be requested? Well, there is no specific rule as to how you request consent, as long as you request it – and the way in which you do so conforms to the requirements of the applicable regulations. You can do this by perhaps having an overlay notification to new visitors who visit your website. Once a user consents to the placement of cookies, under Regulation 7(3), you can continue to set cookies because the end user would have previously consented to it in this case – which is explicitly specified in Regulation 7(3)(b) as amended in the 2011 No. 1208 Regulations. For new visitors, you can display a notification to explain that computer cookies are used and a brief explanation of what they may be used for on your website, and a hyperlink to a page disclosing further information about what cookies are, what cookies may be set and why they are used.
那么如何请求同意? 好吧,只要您请求同意,就如何请求同意并没有特别的规则-这样做的方式符合适用法规的要求。 为此,您可以向访问您网站的新访问者发出覆盖通知。 一旦用户同意放置cookie,根据条例7(3),您可以继续设置cookie,因为在这种情况下最终用户以前已经同意了它-在条例7(3)(b)中明确指定经2011年第1208号法规修订。 对于新访客,您可以显示通知以解释计算机cookie的使用以及它们在您网站上的用途的简要说明,以及指向页面的超链接,该页面提供有关cookie的信息,可能设置的cookie的更多信息。以及为什么使用它们。
我需要有同意之前,我可以在任何地方任何 cookie? (Do I need to have consent before I can place any cookies at all?)
Not necessarily. Regulation 6(1) and Regulation 6(2) of the 2003 Regulations is where the specific provision concerning accessing or storing information on an end user’s computer is located. However, Regulation 6(4) states:
不必要。 2003年法规的第6(1)条和第6(2)条是有关在最终用户的计算机上访问或存储信息的特定条款所在的位置。 但是,第6(4)条规定:
(4) Paragraph (1) shall not apply to the technical storage of, or access to, information—
(4)第(1)款不适用于以下方面的信息的技术存储或访问:
(a) for the sole purpose of carrying out or facilitating the transmission of a communication over an electronic communications network; or
(a)仅以执行或促进通过电子通信网络的通信传输为目的; 要么
(b) where such storage or access is strictly necessary for the provision of an information society service requested by the subscriber or user.
(b)严格按照用户或用户要求提供信息社会服务进行这种存储或访问。
我是否可以考虑是否需要任何预制解决方案? (Are there any pre-made solutions I can consider for compliance?)
Yes, there are. If you have a WordPress blog, there are many plugins that can be used to help towards complying with the regulations. It is important to remember that as well as having a notification overlay, which some plugins definitely help with, you also need a separate page detailing what cookies are set and why. Of course, a brief explanation of what cookies are should be added too. You can advise your website visitors if they want further information regarding cookies and how they can control the cookies websites set, they can visit websites like AboutCookies.org.
是的,有。 如果您有WordPress博客, 则可以使用许多插件来帮助遵守法规。 重要的是要记住,除了具有通知叠加层(某些插件肯定会提供帮助)之外,您还需要一个单独的页面,详细说明设置了哪些cookie以及原因。 当然,也应该添加有关cookie的简短说明。 您可以建议网站访问者是否需要有关cookie的更多信息以及如何控制cookie网站集,他们可以访问AboutCookies.org之类的网站。
For websites, you can use similar solutions like the Civic Cookie Control.
对于网站,您可以使用类似的解决方案,例如Civic Cookie Control 。
Don’t forget you need to explain what cookies are set, why they are set and give users details/instructions on how they can refuse cookies from websites. Usefully, websites like AboutCookies.org have helpful sections of their website guiding users how to control and delete cookies in all major web browsers. So ideally, linking to that website can help towards complying with the regulations, because you are giving additional information to the website visitor on how they can find more about cookies and how they can control them.
别忘了你需要解释 设置了哪些Cookie,设置了Cookie的原因并向用户提供了有关如何拒绝网站Cookie的详细信息/说明。 有用的是,诸如AboutCookies.org之类的网站在其网站上提供了有用的部分,指导用户如何在所有主要的Web浏览器中控制和删除cookie。 因此,理想情况下,链接到该网站可以帮助您遵守相关规定,因为您正在向网站访问者提供有关他们如何找到有关Cookie的更多信息以及如何控制它们的更多信息。
More information…
更多信息…
Privacy and Electronic Communications (EC Directive) Regulations 2003
Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2004
Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011
Information Commissioner’s Office – Cookie Regulations and the new EU cookie law
通信安全 隐私