PECR – The Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426) – Schedule A1 – Storing information in the terminal equipment of a subscriber or user

Schedules

Schedule A1[^F1 Storing information in the terminal equipment of a subscriber or userRegulation 6

Interpretation

(1) In this Schedule, “website” includes a mobile application and any other platform by means of which an information society service is provided.

(2) For further provision about the interpretation of this Schedule, see regulation 6(2).

Consent

(1) Regulation 6(1) does not prevent a person storing information, or gaining access to information stored, in the terminal equipment of a subscriber or user if the subscriber or user—

(a)
is provided with clear and comprehensive information about the purpose of the storage or access, and
(b)
gives consent to the storage or access.

(2) Where an electronic communications network is used by the same person to store or access information in the terminal equipment of a subscriber or user for the same purpose on more than one occasion, it is sufficient that the requirements of sub-paragraph (1) are met in respect of the initial use.

(3) For the purposes of sub-paragraph (1)(b), the means by which the subscriber or user may signify consent include—

(a)
amending or setting controls on the internet browser which the subscriber or user uses;
(b)
using another application or programme.

Transmission of a communication over an electronic communications network

3. Regulation 6(1) does not apply to—

(a)
technical storage of information in the terminal equipment of a subscriber or user, or
(b)
technical access to information stored in such equipment,

for the sole purpose of carrying out the transmission of a communication over an electronic communications network.

Storage or access strictly necessary to provide an information society service

(1) Regulation 6(1) does not apply to—

(a)
technical storage of information in the terminal equipment of a subscriber or user, or
(b)
technical access to information stored in such equipment,

where the storage or access is strictly necessary for the provision of an information society service requested by the subscriber or user.

(2) For the purposes of this paragraph, the technical storage of, or technical access to, information is strictly necessary for the provision of an information society service requested by the subscriber or user if, for example, the storage or access is strictly necessary—

(a)
to protect information provided in connection with, or relating to, the provision of the service requested,
(b)
to ensure that the security of the terminal equipment of the subscriber or user is not adversely affected by the provision of the service requested,
(c)
to prevent or detect fraud in connection with the provision of the service requested,
(d)
to prevent or detect technical faults in connection with the provision of the service requested, or
(e)
to enable either of the following things to be done where necessary for the provision of the service requested—
- (i)
  automatically authenticating the identity of the subscriber or user, or
- (ii)
  maintaining a record of selections made on a website, or information put into a website, by the subscriber or user.

Collecting information for statistical purposes

(1) Regulation 6(1) does not prevent a person storing information, or gaining access to information stored, in the terminal equipment of a subscriber or user if—

(a)
the person provides an information society service,
(b)
the sole purpose of the storage or access is to enable the person—
- (i)
  to collect information for statistical purposes about how the service is used with a view to making improvements to the service, or
- (ii)
  to collect information for statistical purposes about how a website by means of which the service is provided is used with a view to making improvements to the website,
(c)
any information that the storage or access enables the person to collect is not shared with any other person except for the purpose of enabling that other person to assist with making improvements to the service or website,
(d)
the subscriber or user is provided with clear and comprehensive information about the purpose of the storage or access, and
(e)
the subscriber or user is given a simple means of objecting, free of charge, to the storage or access and does not object.

(2) In sub-paragraph (1), the reference to gaining access to information stored in the terminal equipment of a subscriber or user does not include a reference to collecting or monitoring information automatically emitted by the terminal equipment.

(3) Where an electronic communications network is used by the same person to store or access information in the terminal equipment of a subscriber or user for the same purpose on more than one occasion, it is sufficient that the requirements of sub-paragraph (1)(d) and (e) are met in respect of the initial use.

Website appearance etc

(1) Regulation 6(1) does not prevent a person storing information, or gaining access to information stored, in the terminal equipment of a subscriber or user if—

(a)
the person provides an information society service by means of a website,
(b)
the sole purpose of the storage or access is—
- (i)
  to enable the way the website appears or functions when displayed on, or accessed by, the terminal equipment to adapt to the preferences of the subscriber or user, or
- (ii)
  to otherwise enable an enhancement of the appearance or functionality of the website when displayed on, or accessed by, the terminal equipment,
(c)
the subscriber or user is provided with clear and comprehensive information about the purpose of the storage or access, and
(d)
the subscriber or user is given a simple means of objecting, free of charge, to the storage or access and does not object.

Emergency assistance

7. Regulation 6(1) does not prevent a person storing information, or gaining access to information stored, in the terminal equipment of a subscriber or user if—

(a)
the person receives a communication from the terminal equipment,
(b)
the communication is a request from the subscriber or user for emergency assistance or otherwise indicates that the subscriber or user is in need of emergency assistance, and
(c)
the sole purpose of the storage or access is to enable the geographical position of the subscriber or user to be ascertained with a view to the emergency assistance being provided.]

Amended text

This Schedule is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 19 September 2026, ELI), as incorporated in the text in force on 19 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

F1 Sch. A1 inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 12; S.I. 2026/82, reg. 2(z13)

https://pecr.digiphile.law/schedule/schedule-A1.html

Text as at 19 September 2026.

This is an unofficial convenience version of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.