# The Privacy and Electronic Communications (EC Directive) Regulations 2003, Paragraph 4: Storage or access strictly necessary to provide an information society service


(1) Regulation 6(1) does not apply to—
(a) technical storage of information in the terminal equipment of a subscriber or user, or
(b) technical access to information stored in such equipment,
where the storage or access is strictly necessary for the provision of an information society service requested by the subscriber or user.
(2) For the purposes of this paragraph, the technical storage of, or technical access to, information is strictly necessary for the provision of an information society service requested by the subscriber or user if, for example, the storage or access is strictly necessary—
(a) to protect information provided in connection with, or relating to, the provision of the service requested,
(b) to ensure that the security of the terminal equipment of the subscriber or user is not adversely affected by the provision of the service requested,
(c) to prevent or detect fraud in connection with the provision of the service requested,
(d) to prevent or detect technical faults in connection with the provision of the service requested, or
(e) to enable either of the following things to be done where necessary for the provision of the service requested—
(i) automatically authenticating the identity of the subscriber or user, or
(ii) maintaining a record of selections made on a website, or information put into a website, by the subscriber or user.

---
Source: https://www.legislation.gov.uk/uksi/2003/2426/schedule/A1/paragraph/4 (the official version)
Page: https://openlegislation.uk/privacy-and-electronic-communications-ec-directive-regulations-2003/schedule-A1/paragraph-4
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.