The Electronic Commerce (EC Directive) Regulations 2002

Made: 30th July 2002

Laid before Parliament: 31st July 2002

Coming into force

The Secretary of State, being a Minister designated for the purposes of section 2(2) of the European Communities Act 1972 in relation to information society services, in exercise of the powers conferred on her by that section, hereby makes the following Regulations:—

Citation and commencement

1

• (1) These Regulations may be cited as the Electronic Commerce (EC Directive) Regulations 2002 and except for regulation 16 shall come into force on 21st August 2002.

• (2) Regulation 16 shall come into force on 23rd October 2002.

Interpretation

2

• (1) In these Regulations and in the Schedule—

• “commercial communication” means a communication, in any form, designed to promote, directly or indirectly, the goods, services or image of any person pursuing a commercial, industrial or craft activity or exercising a regulated profession, other than a communication—consisting only of information allowing direct access to the activity of that person including a geographic address, a domain name or an electronic mail address; orrelating to the goods, services or image of that person provided that the communication has been prepared independently of the person making it (and for this purpose, a communication prepared without financial consideration is to be taken to have been prepared independently unless the contrary is shown);

• ...

• “consumer” means any natural person who is acting for purposes other than those of his trade, business or profession;

• “coordinated field” means requirements applicable to information society service providers or information society services, regardless of whether they are of a general nature or specifically designed for them, and covers requirements with which the service provider has to comply in respect of—the taking up of the activity of an information society service, such as requirements concerning qualifications, authorisation or notification, andthe pursuit of the activity of an information society service, such as requirements concerning the behaviour of the service provider, requirements regarding the quality or content of the service including those applicable to advertising and contracts, or requirements concerning the liability of the service provider,but does not cover requirements such as those applicable to goods as such, to the delivery of goods or to services not provided by electronic means;

• “the Directive” means Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (Directive on electronic commerce) ;

• “EEA Agreement” has the meaning given by Schedule 1 to the Interpretation Act 1978;

• “enactment” includes an enactment comprised in Northern Ireland legislation and comprised in, or an instrument made under, an Act of the Scottish Parliament;

• “enforcement action” means any form of enforcement action including, in particular—in relation to any legal requirement imposed by or under any enactment, any action taken with a view to or in connection with imposing any sanction (whether criminal or otherwise) for failure to observe or comply with it; andin relation to a permission or authorisation, anything done with a view to removing or restricting that permission or authorisation;

• “enforcement authority” does not include courts but, subject to that, means any person who is authorised, whether by or under an enactment or otherwise, to take enforcement action;

• “established service provider” means a service provider who is—a national of the United Kingdom or a member State, ora company or firm as mentioned in Article 54 of the Treaty,and who effectively pursues an economic activity; by virtue of which he is a service provider using a fixed establishment in the United Kingdom or a member State for an indefinite period, but the presence and use of the technical means and technologies required to provide the information society service do not, in themselves, constitute an establishment of the provider; in cases where it cannot be determined from which of a number of places of establishment a given service is provided, that service is to be regarded as provided from the place of establishment where the provider has the centre of his activities relating to that service; references to a service provider being established or to the establishment of a service provider shall be construed accordingly;

• “information society services” (which is summarised in recital 17 of the Directive as covering “any service normally provided for remuneration, at a distance, by means of electronic equipment for the processing (including digital compression) and storage of data, and at the individual request of a recipient of a service”) has the meaning set out in Article 2(a) of the Directive, (which refers to Article 1(2) of Directive 98/34/EC of the European Parliament and of the Council of 22 June 1998 laying down a procedure for the provision of information in the field of technical standards and regulations , as amended by Directive 98/48/EC of 20 July 1998 );

• “member State” includes a State which is a contracting party to the EEA Agreement;

• “a national of the United Kingdom” means—a British citizen;a person who is a British subject by virtue of Part 4 of the British Nationality Act 1981 and who has a right of abode in the United Kingdom; ora person who is a British overseas territories citizen by virtue of a connection with Gibraltar;

• “recipient of the service” means any person who, for professional ends or otherwise, uses an information society service, in particular for the purposes of seeking information or making it accessible;

• “regulated profession” has the meaning given in regulation 8(1) of the European Union (Recognition of Professional Qualifications) Regulations 2015;

• “service provider” means any person providing an information society service; “the Treaty” means the Treaty on the Functioning of the European Union.

• (2) In regulation 4 and 5, “requirement” means any legal requirement under the law of the United Kingdom, or any part of it, imposed by or under any enactment or otherwise.

• (3) Terms used in the Directive other than those in paragraph (1) above shall have the same meaning as in the Directive.

• (4) For the purposes of the definition of “established service provider” in paragraph (1), Article 54 of the Treaty is to be read as if the United Kingdom were a member State.

Exclusions

3

• (1) Nothing in these Regulations shall apply in respect of—

• (a) the field of taxation;

• (b) questions relating to information society services covered by the UK GDPR and Directive 2002/58/EC of the European Parliament and of the Council of 12th July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) ;

• (c) questions relating to agreements or practices governed by cartel law; and

• (d) the following activities of information society services—

• (i) the activities of a public notary or equivalent professions to the extent that they involve a direct and specific connection with the exercise of public authority,

• (ii) the representation of a client and defence of his interests before the courts, and

• (iii) betting, gaming or lotteries which involve wagering a stake with monetary value.

• (2) These Regulations shall not apply in relation to any Act passed on or after the date these Regulations are made or in relation to the exercise of a power to legislate after that date.

• (3) In this regulation—

• “cartel law” means so much of the law relating to agreements between undertakings, decisions by associations of undertakings or concerted practices as relates to agreements to divide the market or fix prices;

• ...

• ...

• ...

• “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;

Internal market

4

• (1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

• (2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

• (3) Subject to paragraphs (4), (5) and (6) below, any requirement shall not be applied to the provision of an information society service by a service provider established in a member State ... for reasons which fall within the coordinated field where its application would restrict the freedom to provide information society services to a person in the United Kingdom from that member State.

• (4) Paragraph (3) shall not apply to those fields in the annex to the Directive set out in the Schedule.

• (5) The reference to any requirements the application of which would restrict the freedom to provide information society services from a member State in paragraph (3) above does not include any requirement maintaining the level of protection for public health and consumer interests established by Community acts.

• (6) To the extent that anything in these Regulations creates any new criminal offence, it shall not be punishable with imprisonment for more than two years or punishable on summary conviction with imprisonment for more than three months or with a fine of more than level 5 on the standard scale (if not calculated on a daily basis) or with a fine of more than £100 a day .

• (7) In paragraph (5), “Community acts” means Community acts as existed immediately before exit day.

Derogations from Regulation 4

5

• (1) Notwithstanding regulation 4(3), an enforcement authority may take measures, including applying any requirement which would otherwise not apply by virtue of regulation 4(3) in respect of a given information society service, where those measures are necessary for reasons of—

• (a) public policy, in particular the prevention, investigation, detection and prosecution of criminal offences, including the protection of minors and the fight against any incitement to hatred on grounds of race, sex, religion or nationality, and violations of human dignity concerning individual persons;

• (b) the protection of public health;

• (c) public security, including the safeguarding of national security and defence, or

• (d) the protection of consumers, including investors,

and proportionate to those objectives.

• (2) Notwithstanding regulation 4(3), in any case where an enforcement authority with responsibility in relation to the requirement in question is not party to the proceedings, a court may, on the application of any person or of its own motion, apply any requirement which would otherwise not apply by virtue of regulation 4(3) in respect of a given information society service, if the application of that enactment or requirement is necessary for and proportionate to any of the objectives set out in paragraph (1) above.

• (3) Paragraphs (1) and (2) shall only apply where the information society service prejudices or presents a serious and grave risk of prejudice to an objective in paragraph (1)(a) to (d).

• (4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

• (5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

• (6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

• (7) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

• (8) In paragraph (2), “court” means any court or tribunal.

General information to be provided by a person providing an information society service

6

• (1) A person providing an information society service shall make available to the recipient of the service and any relevant enforcement authority, in a form and manner which is easily, directly and permanently accessible, the following information—

• (a) the name of the service provider;

• (b) the geographic address at which the service provider is established;

• (c) the details of the service provider, including his electronic mail address, which make it possible to contact him rapidly and communicate with him in a direct and effective manner;

• (d) where the service provider is registered in a trade or similar register available to the public, details of the register in which the service provider is entered and his registration number, or equivalent means of identification in that register;

• (e) where the provision of the service is subject to an authorisation scheme, the particulars of the relevant supervisory authority;

• (f) where the service provider exercises a regulated profession—

• (i) the details of any professional body or similar institution with which the service provider is registered;

• (ii) his professional title and whether that title has been granted in the United Kingdom, or if not, the member State where that title has been granted;

• (iii) a reference to the professional rules applicable to the service provider in the United Kingdom or member State of establishment and the means to access them; and

• (g) where the service provider undertakes an activity that is subject to value added tax, the identification number referred to in Article 22(1) of the sixth Council Directive 77/388/EEC of 17 May 1977 on the harmonisation of the laws of the member States relating to turnover taxes—Common system of value added tax: uniform basis of assessment .

• (2) Where a person providing an information society service refers to prices, these shall be indicated clearly and unambiguously and, in particular, shall indicate whether they are inclusive of tax and delivery costs.

Commercial communications

7

A service provider shall ensure that any commercial communication provided by him and which constitutes or forms part of an information society service shall—

• (a) be clearly identifiable as a commercial communication;

• (b) clearly identify the person on whose behalf the commercial communication is made;

• (c) clearly identify as such any promotional offer (including any discount, premium or gift) and ensure that any conditions which must be met to qualify for it are easily accessible, and presented clearly and unambiguously; and

• (d) clearly identify as such any promotional competition or game and ensure that any conditions for participation are easily accessible and presented clearly and unambiguously.

Unsolicited commercial communications

8

A service provider shall ensure that any unsolicited commercial communication sent by him by electronic mail is clearly and unambiguously identifiable as such as soon as it is received.

Information to be provided where contracts are concluded by electronic means

9

• (1) Unless parties who are not consumers have agreed otherwise, where a contract is to be concluded by electronic means a service provider shall, prior to an order being placed by the recipient of a service, provide to that recipient in a clear, comprehensible and unambiguous manner the information set out in (a) to (d) below—

• (a) the different technical steps to follow to conclude the contract;

• (b) whether or not the concluded contract will be filed by the service provider and whether it will be accessible;

• (c) the technical means for identifying and correcting input errors prior to the placing of the order; and

• (d) the languages offered for the conclusion of the contract.

• (2) Unless parties who are not consumers have agreed otherwise, a service provider shall indicate which relevant codes of conduct he subscribes to and give information on how those codes can be consulted electronically.

• (3) Where the service provider provides terms and conditions applicable to the contract to the recipient, the service provider shall make them available to him in a way that allows him to store and reproduce them.

• (4) The requirements of paragraphs (1) and (2) above shall not apply to contracts concluded exclusively by exchange of electronic mail or by equivalent individual communications.

Other information requirements

10

Regulations 6, 7, 8 and 9(1) have effect in addition to any other information requirements in assimilated law.

Placing of the order

11

• (1) Unless parties who are not consumers have agreed otherwise, where the recipient of the service places his order through technological means, a service provider shall–

• (a) acknowledge receipt of the order to the recipient of the service without undue delay and by electronic means; and

• (b) make available to the recipient of the service appropriate, effective and accessible technical means allowing him to identify and correct input errors prior to the placing of the order.

• (2) For the purposes of paragraph (1)(a) above—

• (a) the order and the acknowledgement of receipt will be deemed to be received when the parties to whom they are addressed are able to access them; and

• (b) the acknowledgement of receipt may take the form of the provision of the service paid for where that service is an information society service.

• (3) The requirements of paragraph (1) above shall not apply to contracts concluded exclusively by exchange of electronic mail or by equivalent individual communications.

Meaning of the term “order”

12

Except in relation to regulation 9(1)(c) and regulation 11(1)(b) where “order” shall be the contractual offer, “order” may be but need not be the contractual offer for the purposes of regulations 9 and 11.

Liability of the service provider

13

The duties imposed by regulations 6, 7, 8, 9(1) and 11(1)(a) shall be enforceable, at the suit of any recipient of a service, by an action against the service provider for damages for breach of statutory duty.

Compliance with Regulation 9(3)

14