--- title: "Article 5 — Confidentiality of the communications" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219" source_retrieved: 2026-10-01 shortTitle: "Article 5 — Confidentiality of the communications" instrument_type: level1_directive authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Directive 2002/58/EC" instrument: eprivacy celex: "32002L0058" regulation: ePrivacy regulation-full: "Directive 2002/58/EC" article: 5 status: in_force object_id: eu.eprivacy.legal_text.article.5 text_version: "Consolidated version of 19 December 2009" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · Consolidated version of 19 December 2009 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219)* 1. Member States shall ensure the confidentiality of communications and the related [traffic data](https://www.headlesslaw.com/definitions/eprivacy/traffic-data) by means of a public communications network and publicly available electronic communications services, through national legislation. In particular, they shall prohibit listening, tapping, storage or other kinds of interception or surveillance of communications and the related traffic data by persons other than users, without the consent of the users concerned, except when legally authorised to do so in accordance with [Article 15(1)](15.md). This paragraph shall not prevent technical storage which is necessary for the conveyance of a [communication](https://www.headlesslaw.com/definitions/eprivacy/communication) without prejudice to the principle of confidentiality. 2. Paragraph 1 shall not affect any legally authorised recording of communications and the related traffic data when carried out in the course of lawful business practice for the purpose of providing evidence of a commercial transaction or of any other business communication. 3. Member States shall ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information, in accordance with Directive 95/46/EC, inter alia, about the purposes of the processing. This shall not prevent any technical storage or access for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary in order for the provider of an information society service explicitly requested by the subscriber or user to provide the service. ## Related Level 2 and Level 3 ### Guidance and Q&A - [EDPB 2/2023 — Guideline — Technical Scope of Art. 5(3) of ePrivacy Directive \[final\]](../level-3/guidelines/edpb-02-2023-eprivacy-article-5-3-technical-scope.md) *** [Chapter II — Specific provisions](../chapters/ii.md) · [← Article 4](4.md) · [Article 6 →](6.md)