In recent months, the Article 29 Working Party and the European Data Protection Supervisor (EDPS) have issued several opinions on the review of the EU Telecommunications Framework, in particular on the e-Privacy Directive (Directive 2002/58/EC).  

On January 9, 2009, the EDPS issued its second Opinion on the review of the e-Privacy Directive, focusing on the issue of security breaches (the first Opinion is available here, and the second here). One month later, on February 10, 2009, the Article 29 Working Party adopted its third Opinion, which also focuses on the proposal for an obligation to notify data breaches, and considers further amendments to the e-Privacy Directive, such as (a) the qualification of IP addresses as personal data, (b) the processing of traffic data for security purposes, and (c) the legal regime applicable to unsolicited communications. Finally, on February 16, 2009, the EDPS published comments on several issues relating to the review of the Universal Service Directive (Directive 2002/22/EC), in particular the ‘three-strike’ scheme; the text of the EDPS comments is available here.