<!-- headlesslaw {"release":{"id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","published":"2026-11-02T04:02:35Z","pinned":false},"limits":{"coverage":{"history":"from:2009-12-19","held_since":"2009-12-19","gaps":[],"covered":["ePrivacy L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","release_published":"2026-11-02T04:02:35Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/eprivacy/articles/9","url":"https://www.headlesslaw.com/eprivacy/articles/9","title":"Article 9 — Location data other than traffic data","family":"l1_generated","work_id":"eprivacy","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Consolidated version of 19 December 2009","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219","valid_from":"2009-12-19","valid_until":null,"revision":1,"content_id":"6b20214b22112497","change_date":null,"nearest_versions":["2009-12-19"],"first_text_date":"2002-07-12","correction_applies":false,"versions":["2009-12-19"],"version_url":"https://www.headlesslaw.com/eprivacy/articles/9/versions/2009-12-19","revision_url":"https://www.headlesslaw.com/eprivacy/articles/9/versions/2009-12-19/rev/6b20214b22112497","versions_url":"https://www.headlesslaw.com/eprivacy/articles/9/versions","relations_url":"https://www.headlesslaw.com/eprivacy/articles/9/relations","source_line":null,"attribution":null}} -->
---
title: "Article 9 — Location data other than traffic data"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219"
source_retrieved: 2026-10-01
shortTitle: "Article 9 — Location data other than traffic data"
instrument_type: level1_directive
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Directive 2002/58/EC"
instrument: eprivacy
celex: "32002L0058"
regulation: ePrivacy
regulation-full: "Directive 2002/58/EC"
article: 9
status: in_force
object_id: eu.eprivacy.legal_text.article.9
text_version: "Consolidated version of 19 December 2009"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · Consolidated version of 19 December 2009 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219)*

1. <a id="p-1"></a>Where [location data](https://www.headlesslaw.com/definitions/eprivacy/location-data) other than [traffic data](https://www.headlesslaw.com/definitions/eprivacy/traffic-data), relating to users or subscribers of public communications networks or publicly available electronic communications services, can be processed, such data may only be processed when they are made anonymous, or with the consent of the users or subscribers to the extent and for the duration necessary for the provision of a [value added service](https://www.headlesslaw.com/definitions/eprivacy/value-added-service). The service provider must inform the users or subscribers, prior to obtaining their consent, of the type of location data other than traffic data which will be processed, of the purposes and duration of the processing and whether the data will be transmitted to a third party for the purpose of providing the value added service. Users or subscribers shall be given the possibility to withdraw their consent for the processing of location data other than traffic data at any time.
2. <a id="p-2"></a>Where consent of the users or subscribers has been obtained for the processing of location data other than traffic data, the user or subscriber must continue to have the possibility, using a simple means and free of charge, of temporarily refusing the processing of such data for each connection to the network or for each transmission of a [communication](https://www.headlesslaw.com/definitions/eprivacy/communication).
3. <a id="p-3"></a>Processing of location data other than traffic data in accordance with paragraphs 1 and 2 must be restricted to persons acting under the authority of the provider of the public communications network or publicly available communications service or of the third party providing the value added service, and must be restricted to what is necessary for the purposes of providing the value added service.

***

[Chapter II — Specific provisions](../chapters/ii.md) · [← Article 8](8.md) · [Article 10 →](10.md)
