<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"from:2009-12-19","held_since":"2009-12-19","gaps":[],"covered":["ePrivacy L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/eprivacy/recitals/23","url":"https://www.headlesslaw.com/eprivacy/recitals/23","title":"Recital 23","family":"l1_recital_view","work_id":"eprivacy","view_of":"/eprivacy/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Directive 2002/58/EC, OJ L 201, 31.7.2002","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058","valid_from":"2009-12-19","valid_until":null,"content_id":"da1fcab374f09492","versions":["2009-12-19"],"version_url":"https://www.headlesslaw.com/eprivacy/recitals/23/versions/2009-12-19","revision_url":"https://www.headlesslaw.com/eprivacy/recitals/23/versions/2009-12-19/rev/da1fcab374f09492","versions_url":"https://www.headlesslaw.com/eprivacy/recitals/23/versions","relations_url":"https://www.headlesslaw.com/eprivacy/recitals/23/relations","act_url":"https://www.headlesslaw.com/eprivacy/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"eprivacy","path":"/eprivacy/recitals","name":"ePrivacy","number":"Directive 2002/58/EC","celex":"32002L0058","title_official":null,"document_date":null},"position":{"kind":"recital","key":"23","index":23,"articles":49,"annexes":0},"prev":{"path":"/eprivacy/recitals/22","key":"22","title":"Recital 22"},"next":{"path":"/eprivacy/recitals/24","key":"24","title":"Recital 24"},"act_anchor":""}}} -->
# Recital 23

*In force · Directive 2002/58/EC, OJ L 201, 31.7.2002 · Checked against EUR-Lex on 1 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058)*

Confidentiality of communications should also be ensured in the course of lawful business practice. Where necessary and legally authorised, communications can be recorded for the purpose of providing evidence of a commercial transaction. Directive 95/46/EC applies to such processing. Parties to the communications should be informed prior to the recording about the recording, its purpose and the duration of its storage. The recorded communication should be erased as soon as possible and in any case at the latest by the end of the period during which the transaction can be lawfully challenged.