2004 on consumer protection cooperation - Main contents

Please note

This page contains a limited version of this dossier in the EU Monitor.

dossier	COM(2007)698 - Amendment of Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks, ...
document	COM(2007)698
date	November 25, 2009

Article 1

Amendments to Directive 2002/22/EC (Universal Service Directive)

Directive 2002/22/EC (Universal Service Directive) is hereby amended as follows:

Article 1 shall be replaced by the following:

‘Article 1

Subject-matter and scope

1. Within the framework of Directive 2002/21/EC (Framework Directive), this Directive concerns the provision of electronic communications networks and services to end-users. The aim is to ensure the availability throughout the Community of good-quality publicly available services through effective competition and choice and to deal with circumstances in which the needs of end-users are not satisfactorily met by the market. The Directive also includes provisions concerning certain aspects of terminal equipment, including provisions intended to facilitate access for disabled end-users.

2. This Directive establishes the rights of end-users and the corresponding obligations of undertakings providing publicly available electronic communications networks and services. With regard to ensuring provision of universal service within an environment of open and competitive markets, this Directive defines the minimum set of services of specified quality to which all end-users have access, at an affordable price in the light of specific national conditions, without distorting competition. This Directive also sets out obligations with regard to the provision of certain mandatory services.

3. This Directive neither mandates nor prohibits conditions, imposed by providers of publicly available electronic communications and services, limiting end-users’ access to, and/or use of, services and applications, where allowed under national law and in conformity with Community law, but lays down an obligation to provide information regarding such conditions. National measures regarding end-users’ access to, or use of, services and applications through electronic communications networks shall respect the fundamental rights and freedoms of natural persons, including in relation to privacy and due process, as defined in Article 6 of the European Convention for the Protection of Human Rights and Fundamental Freedoms.

4. The provisions of this Directive concerning end-users’ rights shall apply without prejudice to Community rules on consumer protection, in particular Directives 93/13/EEC and 97/7/EC, and national rules in conformity with Community law.’;

Article 2 shall be amended as follows:

(a)	point (b) shall be deleted;

(b)

points (c) and (d) shall be replaced by the following:

‘(c)	“publicly available telephone service” means a service made available to the public for originating and receiving, directly or indirectly, national or national and international calls through a number or numbers in a national or international telephone numbering plan;

(d)	“geographic number” means a number from the national telephone numbering plan where part of its digit structure contains geographic significance used for routing calls to the physical location of the network termination point (NTP);’;

(c)	point (e) shall be deleted;

(d)

point (f) shall be replaced by the following:

‘(f)	“non-geographic number” means a number from the national telephone numbering plan that is not a geographic number. It includes, inter alia, mobile, freephone and premium rate numbers.’;

Article 4 shall be replaced by the following:

‘Article 4

Provision of access at a fixed location and provision of telephone services

1. Member States shall ensure that all reasonable requests for connection at a fixed location to a public communications network are met by at least one undertaking.

2. The connection provided shall be capable of supporting voice, facsimile and data communications at data rates that are sufficient to permit functional Internet access, taking into account prevailing technologies used by the majority of subscribers and technological feasibility.

3. Member States shall ensure that all reasonable requests for the provision of a publicly available telephone service over the network connection referred to in paragraph 1 that allows for originating and receiving national and international calls are met by at least one undertaking.’;

Article 5(2) shall be replaced by the following:

‘2. The directories referred to in paragraph 1 shall comprise, subject to the provisions of Article 12 of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (19), all subscribers of publicly available telephone services.

the title of Article 6 and Article 6(1) shall be replaced by the following:

‘Public pay telephones and other publics voice telephony access points

1. Member States shall ensure that national regulatory authorities may impose obligations on undertakings in order to ensure that public pay telephones or other public voice telephony access points are provided to meet the reasonable needs of end-users in terms of the geographical coverage, the number of telephones or other access points, accessibility to disabled end-users and the quality of services.’;

Article 7 shall be replaced by the following:

‘Article 7

Measures for disabled end-users

1. Unless requirements have been specified under Chapter IV which achieve the equivalent effect, Member States shall take specific measures to ensure that access to, and affordability of, the services identified in Article 4(3) and Article 5 for disabled end-users is equivalent to the level enjoyed by other end-users. Member States may oblige national regulatory authorities to assess the general need and the specific requirements, including the extent and concrete form of such specific measures for disabled end-users.

2. Member States may take specific measures, in the light of national conditions, to ensure that disabled end-users can also take advantage of the choice of undertakings and service providers available to the majority of end-users.

3. In taking the measures referred to in paragraphs 1 and 2, Member States shall encourage compliance with the relevant standards or specifications published in accordance with Articles 17 and 18 of Directive 2002/21/EC (Framework Directive).’;

in Article 8, the following paragraph shall be added:

‘3. When an undertaking designated in accordance with paragraph 1 intends to dispose of a substantial part or all of its local access network assets to a separate legal entity under different ownership, it shall inform in advance the national regulatory authority in a timely manner, in order to allow that authority to assess the effect of the intended transaction on the provision of access at a fixed location and of telephone services pursuant to Article 4. The national regulatory authority may impose, amend or withdraw specific obligations in accordance with Article 6(2) of Directive 2002/20/EC (Authorisation Directive).’;

Article 9(1) and (2) shall be replaced by the following:

‘1. National regulatory authorities shall monitor the evolution and level of retail tariffs of the services identified in Articles 4 to 7 as falling under the universal service obligations and either provided by designated undertakings or available on the market, if no undertakings are designated in relation to those services, in particular in relation to national consumer prices and income.

2. Member States may, in the light of national conditions, require that designated undertakings provide to consumers tariff options or packages which depart from those provided under normal commercial conditions, in particular to ensure that those on low incomes or with special social needs are not prevented from accessing the network referred to in Article 4(1) or from using the services identified in Article 4(3) and Articles 5, 6 and 7 as falling under the universal service obligations and provided by designated undertakings.’;

Article 11(4) shall be replaced by the following:

‘4. National regulatory authorities shall be able to set performance targets for undertakings with universal service obligations. In so doing, national regulatory authorities shall take account of views of interested parties, in particular as referred to in Article 33.’;

10)	the title of Chapter III shall be replaced by the following:

11)	Article 16 shall be deleted;

12)

Article 17 shall be amended as follows:

(a)

paragraph 1 shall be replaced by the following:

‘1. Member States shall ensure that national regulatory authorities impose appropriate regulatory obligations on undertakings identified as having significant market power on a given retail market in accordance with Article 14 of Directive 2002/21/EC (Framework Directive) where:

(a)	as a result of a market analysis carried out in accordance with Article 16 of Directive 2002/21/EC (Framework Directive), a national regulatory authority determines that a given retail market identified in accordance with Article 15 of that Directive is not effectively competitive; and

(b)	the national regulatory authority concludes that obligations imposed under Articles 9 to 13 of Directive 2002/19/EC (Access Directive) would not result in the achievement of the objectives set out in Article 8 of Directive 2002/21/EC (Framework Directive).’;

(b)	paragraph 3 shall be deleted;

13)	Articles 18 and 19 shall be deleted;

14)

Articles 20 to 23 shall be replaced by the following:

‘Article 20

Contracts

1. Member States shall ensure that, when subscribing to services providing connection to a public communications network and/or publicly available electronic communications services, consumers, and other end-users so requesting, have a right to a contract with an undertaking or undertakings providing such connection and/or services. The contract shall specify in a clear, comprehensive and easily accessible form at least:

(a)	the identity and address of the undertaking;

(b)

the services provided, including in particular,

—	whether or not access to emergency services and caller location information is being provided, and any limitations on the provision of emergency services under Article 26,

—	information on any other conditions limiting access to and/or use of services and applications, where such conditions are permitted under national law in accordance with Community law,

—	the minimum service quality levels offered, namely the time for the initial connection and, where appropriate, other quality of service parameters, as defined by the national regulatory authorities,

—	information on any procedures put in place by the undertaking to measure and shape traffic so as to avoid filling or overfilling a network link, and information on how those procedures could impact on service quality,

—	the types of maintenance service offered and customer support services provided, as well as the means of contacting these services,

—	any restrictions imposed by the provider on the use of terminal equipment supplied;

(c)	where an obligation exists under Article 25, the subscriber's options as to whether or not to include his or her personal data in a directory, and the data concerned;

(d)	details of prices and tariffs, the means by which up-to-date information on all applicable tariffs and maintenance charges may be obtained, payment methods offered and any differences in costs due to payment method;

(e)

the duration of the contract and the conditions for renewal and termination of services and of the contract, including:

—	any minimum usage or duration required to benefit from promotional terms,

—	any charges related to portability of numbers and other identifiers,

—	any charges due on termination of the contract, including any cost recovery with respect to terminal equipment,

(f)	any compensation and the refund arrangements which apply if contracted service quality levels are not met;

(g)	the means of initiating procedures for the settlement of disputes in accordance with Article 34;

(h)	the type of action that might be taken by the undertaking in reaction to security or integrity incidents or threats and vulnerabilities.

Member States may also require that the contract include any information which may be provided by the relevant public authorities for this purpose on the use of electronic communications networks and services to engage in unlawful activities or to disseminate harmful content, and on the means of protection against risks to personal security, privacy and personal data, referred to in Article 21(4) and relevant to the service provided.

2. Member States shall ensure that subscribers have a right to withdraw from their contract without penalty upon notice of modification to the contractual conditions proposed by the undertakings providing electronic communications networks and/or services. Subscribers shall be given adequate notice, not shorter than one month, of any such modification, and shall be informed at the same time of their right to withdraw, without penalty, from their contract if they do not accept the new conditions. Member States shall ensure that national regulatory authorities are able to specify the format of such notifications.

Article 21

Transparency and publication of information

1. Member States shall ensure that national regulatory authorities are able to oblige undertakings providing public electronic communications networks and/or publicly available electronic communications services to publish transparent, comparable, adequate and up-to-date information on applicable prices and tariffs, on any charges due on termination of a contract and on standard terms and conditions in respect of access to, and use of, services provided by them to end-users and consumers in accordance with Annex II. Such information shall be published in a clear, comprehensive and easily accessible form. National regulatory authorities may specify additional requirements regarding the form in which such information is to be published.

2. National regulatory authorities shall encourage the provision of comparable information to enable end-users and consumers to make an independent evaluation of the cost of alternative usage patterns, for instance by means of interactive guides or similar techniques. Where such facilities are not available on the market free of charge or at a reasonable price, Member States shall ensure that national regulatory authorities are able to make such guides or techniques available themselves or through third party procurement. Third parties shall have a right to use, free of charge, the information published by undertakings providing electronic communications networks and/or publicly available electronic communications services for the purposes of selling or making available such interactive guides or similar techniques.

3. Member States shall ensure that national regulatory authorities are able to oblige undertakings providing public electronic communications networks and/or publicly available electronic communications services to inter alia:

(a)	provide applicable tariff information to subscribers regarding any number or service subject to particular pricing conditions; with respect to individual categories of services, national regulatory authorities may require such information to be provided immediately prior to connecting the call;

(b)	inform subscribers of any change to access to emergency services or caller location information in the service to which they have subscribed;

(c)	inform subscribers of any change to conditions limiting access to and/or use of services and applications, where such conditions are permitted under national law in accordance with Community law;

(d)	provide information on any procedures put in place by the provider to measure and shape traffic so as to avoid filling or overfilling a network link, and on how those procedures could impact on service quality;

(e)	inform subscribers of their right to determine whether or not to include their personal data in a directory, and of the types of data concerned, in accordance with Article 12 of Directive 2002/58/EC (Directive on privacy and electronic communications); and

(f)	regularly inform disabled subscribers of details of products and services designed for them.

If deemed appropriate, national regulatory authorities may promote self- or co-regulatory measures prior to imposing any obligation.

4. Member States may require that the undertakings referred to in paragraph 3 distribute public interest information free of charge to existing and new subscribers, where appropriate, by the same means as those ordinarily used by them in their communications with subscribers. In such a case, that information shall be provided by the relevant public authorities in a standardised format and shall, inter alia, cover the following topics:

(a)

the most common uses of electronic communications services to engage in unlawful activities or to disseminate harmful content, particularly where it may prejudice respect for the rights and freedoms of others, including infringements of copyright and related rights, and their legal consequences; and

(b)	the means of protection against risks to personal security, privacy and personal data when using electronic communications services.

Article 22

Quality of service

1. Member States shall ensure that national regulatory authorities are, after taking account of the views of interested parties, able to require undertakings that provide publicly available electronic communications networks and/or services to publish comparable, adequate and up-to-date information for end-users on the quality of their services and on measures taken to ensure equivalence in access for disabled end-users. That information shall, on request, be supplied to the national regulatory authority in advance of its publication.

2. National regulatory authorities may specify, inter alia, the quality of service parameters to be measured and the content, form and manner of the information to be published, including possible quality certification mechanisms, in order to ensure that end-users, including disabled end-users, have access to comprehensive, comparable, reliable and user-friendly information. Where appropriate, the parameters, definitions and measurement methods set out in Annex III may be used.

3. In order to prevent the degradation of service and the hindering or slowing down of traffic over networks, Member States shall ensure that national regulatory authorities are able to set minimum quality of service requirements on an undertaking or undertakings providing public communications networks.

National regulatory authorities shall provide the Commission, in good time before setting any such requirements, with a summary of the grounds for action, the envisaged requirements and the proposed course of action. This information shall also be made available to the Body of European Regulators for Electronic Communications (BEREC). The Commission may, having examined such information, make comments or recommendations thereupon, in particular to ensure that the envisaged requirements do not adversely affect the functioning of the internal market. National regulatory authorities shall take the utmost account of the Commission’s comments or recommendations when deciding on the requirements.

Article 23

Availability of services

Member States shall take all necessary measures to ensure the fullest possible availability of publicly available telephone services provided over public communications networks in the event of catastrophic network breakdown or in cases of force majeure. Member States shall ensure that undertakings providing publicly available telephone services take all necessary measures to ensure uninterrupted access to emergency services.’;

15)

the following Article shall be inserted:

‘Article 23a

Ensuring equivalence in access and choice for disabled end-users

1. Member States shall enable relevant national authorities to specify, where appropriate, requirements to be met by undertakings providing publicly available electronic communication services to ensure that disabled end-users:

(a)	have access to electronic communications services equivalent to that enjoyed by the majority of end-users; and

(b)	benefit from the choice of undertakings and services available to the majority of end-users.

2. In order to be able to adopt and implement specific arrangements for disabled end-users, Member States shall encourage the availability of terminal equipment offering the necessary services and functions.’;

16)

Article 25 shall be amended as follows:

(a)	the title shall be replaced by the following: ‘Telephone directory enquiry services’;

(b)

paragraph 1 shall be replaced by the following:

‘1. Member States shall ensure that subscribers to publicly available telephone services have the right to have an entry in the publicly available directory referred to in Article 5(1)(a) and to have their information made available to providers of directory enquiry services and/or directories in accordance with paragraph 2.’;

(c)

paragraphs 3, 4 and 5 shall be replaced by the following:

‘3. Member States shall ensure that all end-users provided with a publicly available telephone service can access directory enquiry services. National regulatory authorities shall be able to impose obligations and conditions on undertakings that control access of end-users for the provision of directory enquiry services in accordance with the provisions of Article 5 of Directive 2002/19/EC (Access Directive). Such obligations and conditions shall be objective, equitable, non-discriminatory and transparent.

4. Member States shall not maintain any regulatory restrictions which prevent end-users in one Member State from accessing directly the directory enquiry service in another Member State by voice call or SMS, and shall take measures to ensure such access in accordance with Article 28.

5. Paragraphs 1 to 4 shall apply subject to the requirements of Community legislation on the protection of personal data and privacy and, in particular, Article 12 of Directive 2002/58/EC (Directive on privacy and electronic communications).’;

17)

Articles 26 and 27 shall be replaced by the following:

‘Article 26

Emergency services and the single European emergency call number

1. Member States shall ensure that all end-users of the service referred to in paragraph 2, including users of public pay telephones, are able to call the emergency services free of charge and without having to use any means of payment, by using the single European emergency call number “112” and any national emergency call number specified by Member States.

2. Member States, in consultation with national regulatory authorities, emergency services and providers, shall ensure that undertakings providing end-users with an electronic communications service for originating national calls to a number or numbers in a national telephone numbering plan provide access to emergency services.

3. Member States shall ensure that calls to the single European emergency call number “112” are appropriately answered and handled in the manner best suited to the national organisation of emergency systems. Such calls shall be answered and handled at least as expeditiously and effectively as calls to the national emergency number or numbers, where these continue to be in use.

4. Member States shall ensure that access for disabled end-users to emergency services is equivalent to that enjoyed by other end-users. Measures taken to ensure that disabled end-users are able to access emergency services whilst travelling in other Member States shall be based to the greatest extent possible on European standards or specifications published in accordance with the provisions of Article 17 of Directive 2002/21/EC (Framework Directive), and they shall not prevent Member States from adopting additional requirements in order to pursue the objectives set out in this Article.

5. Member States shall ensure that undertakings concerned make caller location information available free of charge to the authority handling emergency calls as soon as the call reaches that authority. This shall apply to all calls to the single European emergency call number “112”. Member States may extend this obligation to cover calls to national emergency numbers. Competent regulatory authorities shall lay down criteria for the accuracy and reliability of the caller location information provided.

6. Member States shall ensure that citizens are adequately informed about the existence and use of the single European emergency call number “112”, in particular through initiatives specifically targeting persons travelling between Member States.

7. In order to ensure effective access to “112” services in the Member States, the Commission, having consulted BEREC, may adopt technical implementing measures. However, these technical implementing measures shall be adopted without prejudice to, and shall have no impact on, the organisation of emergency services, which remains of the exclusive competence of Member States.

Those measures, designed to amend non-essential elements of this Directive by supplementing it, shall be adopted in accordance with the regulatory procedure with scrutiny referred to in Article 37(2).

Article 27

European telephone access codes

1. Member States shall ensure that the “00” code is the standard international access code. Special arrangements for making calls between locations adjacent to one another across borders between Member States may be established or continued. End-users in the locations concerned shall be fully informed of such arrangements.

2. A legal entity, established within the Community and designated by the Commission, shall have sole responsibility for the management, including number assignment, and promotion of the European Telephony Numbering Space (ETNS). The Commission shall adopt the necessary implementing rules.

3. Member States shall ensure that all undertakings that provide publicly available telephone services allowing international calls handle all calls to and from the ETNS at rates similar to those applied for calls to and from other Member States.’;

18)

the following Article shall be inserted:

‘Article 27a

Harmonised numbers for harmonised services of social value, including the missing children hotline number

1. Member States shall promote the specific numbers in the numbering range beginning with “116” identified by Commission Decision 2007/116/EC of 15 February 2007 on reserving the national numbering range beginning with “116” for harmonised numbers for harmonised services of social value (20). They shall encourage the provision within their territory of the services for which such numbers are reserved.

2. Member States shall ensure that disabled end-users are able to access services provided under the “116” numbering range to the greatest extent possible. Measures taken to facilitate disabled end-users' access to such services whilst travelling in other Member States shall be based on compliance with relevant standards or specifications published in accordance with Article 17 of Directive 2002/21/EC (Framework Directive).

3. Member States shall ensure that citizens are adequately informed of the existence and use of services provided under the “116” numbering range, in particular through initiatives specifically targeting persons travelling between Member States.

4. Member States shall, in addition to measures of general applicability to all numbers in the “116” numbering range taken pursuant to paragraphs 1, 2, and 3, make every effort to ensure that citizens have access to a service operating a hotline to report cases of missing children. The hotline shall be available on the number “116000”.

5. In order to ensure the effective implementation of the “116” numbering range, in particular the missing children hotline number “116000”, in the Member States, including access for disabled end-users when travelling in other Member States, the Commission, having consulted BEREC, may adopt technical implementing measures. However, these technical implementing measures shall be adopted without prejudice to, and shall have no impact on, the organisation of these services, which remains of the exclusive competence of Member States.

Those measures, designed to amend non-essential elements of this Directive by supplementing it, shall be adopted in accordance with the regulatory procedure with scrutiny referred to in Article 37(2).

19)

Article 28 shall be replaced by the following:

‘Article 28

Access to numbers and services

1. Member States shall ensure that, where technically and economically feasible, and except where a called subscriber has chosen for commercial reasons to limit access by calling parties located in specific geographical areas, relevant national authorities take all necessary steps to ensure that end-users are able to:

(a)	access and use services using non-geographic numbers within the Community; and

(b)	access all numbers provided in the Community, regardless of the technology and devices used by the operator, including those in the national numbering plans of Member States, those from the ETNS and Universal International Freephone Numbers (UIFN).

2. Member States shall ensure that the relevant authorities are able to require undertakings providing public communications networks and/or publicly available electronic communications services to block, on a case-by-case basis, access to numbers or services where this is justified by reasons of fraud or misuse and to require that in such cases providers of electronic communications services withhold relevant interconnection or other service revenues.’;

20)

Article 29 shall be amended as follows:

(a)

paragraph 1 shall be replaced by the following:

‘1. Without prejudice to Article 10(2), Member States shall ensure that national regulatory authorities are able to require all undertakings that provide publicly available telephone services and/or access to public communications networks to make available all or part of the additional facilities listed in Part B of Annex I, subject to technical feasibility and economic viability, as well as all or part of the additional facilities listed in Part A of Annex I.’;

(b)	paragraph 3 shall be deleted;

21)

Article 30 shall be replaced by the following:

‘Article 30

Facilitating change of provider

1. Member States shall ensure that all subscribers with numbers from the national telephone numbering plan who so request can retain their number(s) independently of the undertaking providing the service in accordance with the provisions of Part C of Annex I.

2. National regulatory authorities shall ensure that pricing between operators and/or service providers related to the provision of number portability is cost-oriented, and that direct charges to subscribers, if any, do not act as a disincentive for subscribers against changing service provider.

3. National regulatory authorities shall not impose retail tariffs for the porting of numbers in a manner that would distort competition, such as by setting specific or common retail tariffs.

4. Porting of numbers and their subsequent activation shall be carried out within the shortest possible time. In any case, subscribers who have concluded an agreement to port a number to a new undertaking shall have that number activated within one working day.

Without prejudice to the first subparagraph, competent national authorities may establish the global process of porting of numbers, taking into account national provisions on contracts, technical feasibility and the need to maintain continuity of service to the subscriber. In any event, loss of service during the process of porting shall not exceed one working day. Competent national authorities shall also take into account, where necessary, measures ensuring that subscribers are protected throughout the switching process and are not switched to another provider against their will.

Member States shall ensure that appropriate sanctions on undertakings are provided for, including an obligation to compensate subscribers in case of delay in porting or abuse of porting by them or on their behalf.

5. Member States shall ensure that contracts concluded between consumers and undertakings providing electronic communications services do not mandate an initial commitment period that exceeds 24 months. Member States shall also ensure that undertakings offer users the possibility to subscribe to a contract with a maximum duration of 12 months.

6. Without prejudice to any minimum contractual period, Member States shall ensure that conditions and procedures for contract termination do not act as a disincentive against changing service provider.’;

22)

Article 31(1) shall be replaced by the following:

‘1. Member States may impose reasonable “must carry” obligations, for the transmission of specified radio and television broadcast channels and complementary services, particularly accessibility services to enable appropriate access for disabled end-users, on undertakings under their jurisdiction providing electronic communications networks used for the distribution of radio or television broadcast channels to the public where a significant number of end-users of such networks use them as their principal means to receive radio and television broadcast channels. Such obligations shall only be imposed where they are necessary to meet general interest objectives as clearly defined by each Member State and shall be proportionate and transparent.

The obligations referred to in the first subparagraph shall be reviewed by the Member States at the latest within one year of 25 May 2011, except where Member States have carried out such a review within the previous two years.

Member States shall review “must carry” obligations on a regular basis.’;

23)

Article 33 shall be amended as follows:

(a)

paragraph 1 shall be replaced by the following:

‘1. Member States shall ensure as far as appropriate that national regulatory authorities take account of the views of end-users, consumers (including, in particular, disabled consumers), manufacturers and undertakings that provide electronic communications networks and/or services on issues related to all end-user and consumer rights concerning publicly available electronic communications services, in particular where they have a significant impact on the market.

In particular, Member States shall ensure that national regulatory authorities establish a consultation mechanism ensuring that in their decisions on issues related to end-user and consumer rights concerning publicly available electronic communications services, due consideration is given to consumer interests in electronic communications.’;

(b)

the following paragraph shall be added:

‘3. Without prejudice to national rules in conformity with Community law promoting cultural and media policy objectives, such as cultural and linguistic diversity and media pluralism, national regulatory authorities and other relevant authorities may promote cooperation between undertakings providing electronic communications networks and/or services and sectors interested in the promotion of lawful content in electronic communication networks and services. That cooperation may also include coordination of the public interest information to be provided pursuant to Article 21(4) and the second subparagraph of Article 20(1).’;

24)

Article 34(1) shall be replaced by the following:

‘1. Member States shall ensure that transparent, non-discriminatory, simple and inexpensive out-of-court procedures are available for dealing with unresolved disputes between consumers and undertakings providing electronic communications networks and/or services arising under this Directive and relating to the contractual conditions and/or performance of contracts concerning the supply of those networks and/or services. Member States shall adopt measures to ensure that such procedures enable disputes to be settled fairly and promptly and may, where warranted, adopt a system of reimbursement and/or compensation. Such procedures shall enable disputes to be settled impartially and shall not deprive the consumer of the legal protection afforded by national law. Member States may extend these obligations to cover disputes involving other end-users.’;

25)

Article 35 shall be replaced by the following:

‘Article 35

Adaptation of annexes

Measures designed to amend non-essential elements of this Directive and necessary to adapt Annexes I, II, III, and VI to technological developments or changes in market demand shall be adopted by the Commission in accordance with the regulatory procedure with scrutiny referred to in Article 37(2).’;

26)

Article 36(2) shall be replaced by the following:

‘2. National regulatory authorities shall notify to the Commission the universal service obligations imposed upon undertakings designated as having universal service obligations. Any changes affecting these obligations or of the undertakings affected under the provisions of this Directive shall be notified to the Commission without delay.’;

27)

Article 37 shall be replaced by the following:

‘Article 37

Committee procedure

1. The Commission shall be assisted by the Communications Committee set up under Article 22 of Directive 2002/21/EC (Framework Directive).

2. Where reference is made to this paragraph, Article 5a(1) to (4) and Article 7 of Decision 1999/468/EC shall apply, having regard to the provisions of Article 8 thereof.’;

28)	Annexes I, II, III shall be replaced by the text appearing in Annex I to this Directive, and Annex VI shall be replaced by the text appearing in Annex II to this Directive;

29)	Annex VII shall be deleted.

Article 2

Amendments to Directive 2002/58/EC (Directive on privacy and electronic communications)

Directive 2002/58/EC (Directive on privacy and electronic communications) is hereby amended as follows:

Article 1(1) shall be replaced by the following:

‘1. This Directive provides for the harmonisation of the national provisions required to ensure an equivalent level of protection of fundamental rights and freedoms, and in particular the right to privacy and confidentiality, with respect to the processing of personal data in the electronic communication sector and to ensure the free movement of such data and of electronic communication equipment and services in the Community.’;

Article 2 shall be amended as follows:

(a)

point (c) shall be replaced by the following:

‘(c)	“location data” means any data processed in an electronic communications network or by an electronic communications service, indicating the geographic position of the terminal equipment of a user of a publicly available electronic communications service;’;

(b)	point (e) shall be deleted;

(c)

the following point shall be added:

‘(h)

“personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of a publicly available electronic communications service in the Community.’;

Article 3 shall be replaced by the following:

‘Article 3

Services concerned

This Directive shall apply to the processing of personal data in connection with the provision of publicly available electronic communications services in public communications networks in the Community, including public communications networks supporting data collection and identification devices.’;

Article 4 shall be amended as follows:

(a)	the title shall be replaced by the following: ‘Security of processing’;

(b)

the following paragraph shall be inserted:

‘1a. Without prejudice to Directive 95/46/EC, the measures referred to in paragraph 1 shall at least:

—	ensure that personal data can be accessed only by authorised personnel for legally authorised purposes,

—	protect personal data stored or transmitted against accidental or unlawful destruction, accidental loss or alteration, and unauthorised or unlawful storage, processing, access or disclosure, and,

—	ensure the implementation of a security policy with respect to the processing of personal data,

Relevant national authorities shall be able to audit the measures taken by providers of publicly available electronic communication services and to issue recommendations about best practices concerning the level of security which those measures should achieve.’;

(c)

the following paragraphs shall be added:

‘3. In the case of a personal data breach, the provider of publicly available electronic communications services shall, without undue delay, notify the personal data breach to the competent national authority.

When the personal data breach is likely to adversely affect the personal data or privacy of a subscriber or individual, the provider shall also notify the subscriber or individual of the breach without undue delay.

Notification of a personal data breach to a subscriber or individual concerned shall not be required if the provider has demonstrated to the satisfaction of the competent authority that it has implemented appropriate technological protection measures, and that those measures were applied to the data concerned by the security breach. Such technological protection measures shall render the data unintelligible to any person who is not authorised to access it.

Without prejudice to the provider's obligation to notify subscribers and individuals concerned, if the provider has not already notified the subscriber or individual of the personal data breach, the competent national authority, having considered the likely adverse effects of the breach, may require it to do so.

The notification to the subscriber or individual shall at least describe the nature of the personal data breach and the contact points where more information can be obtained, and shall recommend measures to mitigate the possible adverse effects of the personal data breach. The notification to the competent national authority shall, in addition, describe the consequences of, and the measures proposed or taken by the provider to address, the personal data breach.

4. Subject to any technical implementing measures adopted under paragraph 5, the competent national authorities may adopt guidelines and, where necessary, issue instructions concerning the circumstances in which providers are required to notify personal data breaches, the format of such notification and the manner in which the notification is to be made. They shall also be able to audit whether providers have complied with their notification obligations under this paragraph, and shall impose appropriate sanctions in the event of a failure to do so.

Providers shall maintain an inventory of personal data breaches comprising the facts surrounding the breach, its effects and the remedial action taken which shall be sufficient to enable the competent national authorities to verify compliance with the provisions of paragraph 3. The inventory shall only include the information necessary for this purpose.

5. In order to ensure consistency in implementation of the measures referred to in paragraphs 2, 3 and 4, the Commission may, following consultation with the European Network and Information Security Agency (ENISA), the Working Party on the Protection of Individuals with regard to the Processing of Personal Data established by Article 29 of Directive 95/46/EC and the European Data Protection Supervisor, adopt technical implementing measures concerning the circumstances, format and procedures applicable to the information and notification requirements referred to in this Article. When adopting such measures, the Commission shall involve all relevant stakeholders particularly in order to be informed of the best available technical and economic means of implementation of this Article.

Those measures, designed to amend non-essential elements of this Directive by supplementing it, shall be adopted in accordance with the regulatory procedure with scrutiny referred to in Article 14a(2).’;

Article 5(3) shall be replaced by the following:

‘3. Member States shall ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information, in accordance with Directive 95/46/EC, inter alia, about the purposes of the processing. This shall not prevent any technical storage or access for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary in order for the provider of an information society service explicitly requested by the subscriber or user to provide the service.’;

Article 6(3) shall be replaced by the following:

‘3. For the purpose of marketing electronic communications services or for the provision of value added services, the provider of a publicly available electronic communications service may process the data referred to in paragraph 1 to the extent and for the duration necessary for such services or marketing, if the subscriber or user to whom the data relate has given his or her prior consent. Users or subscribers shall be given the possibility to withdraw their consent for the processing of traffic data at any time.’;

Article 13 shall be replaced by the following:

‘Article 13

Unsolicited communications

1. The use of automated calling and communication systems without human intervention (automatic calling machines), facsimile machines (fax) or electronic mail for the purposes of direct marketing may be allowed only in respect of subscribers or users who have given their prior consent.

2. Notwithstanding paragraph 1, where a natural or legal person obtains from its customers their electronic contact details for electronic mail, in the context of the sale of a product or a service, in accordance with Directive 95/46/EC, the same natural or legal person may use these electronic contact details for direct marketing of its own similar products or services provided that customers clearly and distinctly are given the opportunity to object, free of charge and in an easy manner, to such use of electronic contact details at the time of their collection and on the occasion of each message in case the customer has not initially refused such use.

3. Member States shall take appropriate measures to ensure that unsolicited communications for the purposes of direct marketing, in cases other than those referred to in paragraphs 1 and 2, are not allowed either without the consent of the subscribers or users concerned or in respect of subscribers or users who do not wish to receive these communications, the choice between these options to be determined by national legislation, taking into account that both options must be free of charge for the subscriber or user.

4. In any event, the practice of sending electronic mail for the purposes of direct marketing which disguise or conceal the identity of the sender on whose behalf the communication is made, which contravene Article 6 of Directive 2000/31/EC, which do not have a valid address to which the recipient may send a request that such communications cease or which encourage recipients to visit websites that contravene that Article shall be prohibited.

5. Paragraphs 1 and 3 shall apply to subscribers who are natural persons. Member States shall also ensure, in the framework of Community law and applicable national legislation, that the legitimate interests of subscribers other than natural persons with regard to unsolicited communications are sufficiently protected.

6. Without prejudice to any administrative remedy for which provision may be made, inter alia, under Article 15a(2), Member States shall ensure that any natural or legal person adversely affected by infringements of national provisions adopted pursuant to this Article and therefore having a legitimate interest in the cessation or prohibition of such infringements, including an electronic communications service provider protecting its legitimate business interests, may bring legal proceedings in respect of such infringements. Member States may also lay down specific rules on penalties applicable to providers of electronic communications services which by their negligence contribute to infringements of national provisions adopted pursuant to this Article.’;

the following Article shall be inserted:

‘Article 14a

Committee procedure

1. The Commission shall be assisted by the Communications Committee established by Article 22 of Directive 2002/21/EC (Framework Directive).

2. Where reference is made to this paragraph, Article 5a(1) to (4) and Article 7 of Decision 1999/468/EC shall apply, having regard to the provisions of Article 8 thereof.

3. Where reference is made to this paragraph, Article 5a(1), (2), (4) and (6) and Article 7 of Decision 1999/468/EC shall apply, having regard to the provisions of Article 8 thereof.’;

in Article 15, the following paragraph shall be inserted:

‘1b. Providers shall establish internal procedures for responding to requests for access to users' personal data based on national provisions adopted pursuant to paragraph 1. They shall provide the competent national authority, on demand, with information about those procedures, the number of requests received, the legal justification invoked and their response.’;

10)

the following Article shall be inserted:

‘Article 15a

Implementation and enforcement

1. Member States shall lay down the rules on penalties, including criminal sanctions where appropriate, applicable to infringements of the national provisions adopted pursuant to this Directive and shall take all measures necessary to ensure that they are implemented. The penalties provided for must be effective, proportionate and dissuasive and may be applied to cover the period of any breach, even where the breach has subsequently been rectified. The Member States shall notify those provisions to the Commission by 25 May 2011, and shall notify it without delay of any subsequent amendment affecting them.

2. Without prejudice to any judicial remedy which might be available, Member States shall ensure that the competent national authority and, where relevant, other national bodies have the power to order the cessation of the infringements referred to in paragraph 1.

3. Member States shall ensure that the competent national authority and, where relevant, other national bodies have the necessary investigative powers and resources, including the power to obtain any relevant information they might need to monitor and enforce national provisions adopted pursuant to this Directive.

4. The relevant national regulatory authorities may adopt measures to ensure effective cross-border cooperation in the enforcement of the national laws adopted pursuant to this Directive and to create harmonised conditions for the provision of services involving cross-border data flows.

The national regulatory authorities shall provide the Commission, in good time before adopting any such measures, with a summary of the grounds for action, the envisaged measures and the proposed course of action. The Commission may, having examined such information and consulted ENISA and the Working Party on the Protection of Individuals with regard to the Processing of Personal Data established by Article 29 of Directive 95/46/EC, make comments or recommendations thereupon, in particular to ensure that the envisaged measures do not adversely affect the functioning of the internal market. National regulatory authorities shall take the utmost account of the Commission's comments or recommendations when deciding on the measures.’.

Article 3

Amendment to Regulation (EC) No 2006/2004

In the Annex to Regulation (EC) No 2006/2004 (the Regulation on consumer protection cooperation), the following point shall be added:

‘17.	Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications): Article 13 (OJ L 201, 31.7.2002, p. 37).’.

Article 4

Transposition

1. Member States shall adopt and publish by 25 May 2011 the laws, regulations and administrative provisions necessary to comply with this Directive. They shall forthwith communicate to the Commission the text of those measures.

When Member States adopt those measures, they shall contain a reference to this Directive or be accompanied by such a reference on the occasion of their official publication. The methods of making such reference shall be laid down by the Member States.

2. Member States shall communicate to the Commission the text of the main provisions of national law which they adopt in the field covered by this Directive.

Article 5

Entry into force

This Directive shall enter into force on the day following its publication in the Official Journal of the European Union.

Article 6

Addressees

This Directive is addressed to the Member States.