ePrivacy Directive
It deals with the regulation of a number of important issues such as confidentiality of information, treatment of traffic data, spam and cookies.[3] In this way, it would repeal the ePrivacy Directive 2002/58/EC and accompany the GDPR in regulating the requirements for consent to the use of cookies and opt-out options.[11] The addressees are Member States, who should prohibit listening, tapping, storage or other kinds of interception or surveillance of communication and "related traffic", unless the users have given their consent or conditions of Article 15(1) have been fulfilled.The directive obliges the providers of services to erase or anonymise the traffic data processed when no longer needed, unless the conditions from Article 15 have been fulfilled.This reflects the EU legislator's desire to leave the regime of the directive open to future technological developments.The regime so set-up can be described as opt-in, effectively meaning that the consumer must give their consent before cookies or any other form of data is stored in their browser.