<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"from:2009-12-19","held_since":"2009-12-19","gaps":[],"covered":["ePrivacy L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/eprivacy/recitals/21","url":"https://www.headlesslaw.com/eprivacy/recitals/21","title":"Recital 21","family":"l1_recital_view","work_id":"eprivacy","view_of":"/eprivacy/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Directive 2002/58/EC, OJ L 201, 31.7.2002","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058","valid_from":"2009-12-19","valid_until":null,"content_id":"bef8d46037cc21e0","versions":["2009-12-19"],"version_url":"https://www.headlesslaw.com/eprivacy/recitals/21/versions/2009-12-19","revision_url":"https://www.headlesslaw.com/eprivacy/recitals/21/versions/2009-12-19/rev/bef8d46037cc21e0","versions_url":"https://www.headlesslaw.com/eprivacy/recitals/21/versions","relations_url":"https://www.headlesslaw.com/eprivacy/recitals/21/relations","act_url":"https://www.headlesslaw.com/eprivacy/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"eprivacy","path":"/eprivacy/recitals","name":"ePrivacy","number":"Directive 2002/58/EC","celex":"32002L0058","title_official":null,"document_date":null},"position":{"kind":"recital","key":"21","index":21,"articles":49,"annexes":0},"prev":{"path":"/eprivacy/recitals/20","key":"20","title":"Recital 20"},"next":{"path":"/eprivacy/recitals/22","key":"22","title":"Recital 22"},"act_anchor":""}}} -->
# Recital 21

*In force · Directive 2002/58/EC, OJ L 201, 31.7.2002 · Checked against EUR-Lex on 1 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058)*

Measures should be taken to prevent unauthorised access to communications in order to protect the confidentiality of communications, including both the contents and any data related to such communications, by means of public communications networks and publicly available electronic communications services. National legislation in some Member States only prohibits intentional unauthorised access to communications.