---
description: ePrivacy regulation vs GDPR: what is the new ePrivacy regulation, how it differs from GDPR and what you can do to make sure your business is compliant?
image: https://gdm-localsites-assets-gfprod.imgix.net/images/capterra/og_logo-e5a8c001ed0bd1bb922639230fcea71a.png?auto=format%2Cenhance%2Ccompress
title: ePrivacy regulation vs GDPR: what’s the difference for your SME?
---

# ePrivacy vs GDPR: what’s the difference?

Canonical: https://www.capterra.co.uk/blog/887/eprivacy-vs-gdpr-whats-the-difference

Published on 17/09/2019 | Written by Sonia Navarrete.

![ePrivacy vs GDPR: what’s the difference?](https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png)

> The introduction of the EU’s General Data Protection Regulation (GDPR) back in 2018 was a bombshell moment. With UK GDPR now in force,  the ePrivacy Regulation will open a new can of regulatory worms for businesses of all sizes. 

-----

## Article Content

The introduction of the EU’s General Data Protection Regulation (GDPR) back in 2018 was a bombshell moment. With UK GDPR now in force,  the ePrivacy Regulation will open a new can of regulatory worms for businesses of all sizes. Here is more information about the law, how it differs from GDPR and what you can do to comply. ePrivacy vs GDPR The ePrivacy Regulation will replace the ePrivacy Directive, which many of you will be familiar with. But what’s the difference? Well, whereas a directive merely sets a direction of travel for EU member states for legislation, a regulation is much more prescriptive and must be implemented in full in each EU jurisdiction – much like the GDPR is today. In fact, the GDPR and the ePrivacy Directive are very close relatives. The latter is the application of the privacy and consent principles of GDPR to the specific case of personal data that’s communicated electronically by businesses. The provisions of GDPR can therefore be seen as sitting above those of the ePrivacy Regulation. What the ePrivacy Regulation means for youTechnicalities aside, the burning question for businesses is whether or not you need comply. T he short answer is that if you provide any sort of online communications service, engage in electronic direct marketing or use any form of online tracking, such as cookies, then you do. Unlike with the old ePrivacy Directive, companies like WhatsApp or Skype that use others’ networks to deliver their services are now obliged to comply. Another novelty is that the new regulation covers not only the content of communications but also the associated metadata – the time a message was sent, for example, or the location it was sent from. Companies can now only use this data if a user has given their explicit consent. Other innovations include simplifying rules around the use of cookies and stronger protections against spam. The message to small and medium-sized businesses is therefore clear: the regulatory ride is only just beginning. GDPR has established solid principles around privacy and consent that we can now expect to see applied into specific markets through new laws like the ePrivacy Directive. This means businesses need to have in place a dynamic approach to compliance, once that can respond rapidly to new regulations as they emerge without causing too much disruption to their business.The role for compliance softwareIt’s here that choosing the right compliance software can make all the difference. When it comes to data privacy, there are a wide range of data governance solutions on the market that combine features such as big data analytics, storage, and security in a single package. Such software helps businesses keep on top of how they use and analyse data so that they can ensure they comply with all relevant obligations around consent and security.  Additionally, and as you might well expect with a regulation as high-profile as GDPR, the market has also responded with a number of new GDPR-specific solutions. Some of these products offer solutions to niche areas of GDPR compliance, such as helping businesses easily respond to requests for access to data by the owners of that data, while others provide a more complete approach and seek to address all elements of the law.Finding the best software for your businessWhat’s important is that you find the right software for your business. By researching what’s on the market you can get a good idea of the capabilities on offer and select the solutions that plug your existing compliance gaps and which look likely to be flexible enough to adapt to future requirements as they emerge. To help in this task, look through the Capterra directory for data governance software, where you will be able to compare products by user reviews, features, cost and other important factors. With the tide of regulations continuing to rise, this search won’t be a one-off job. It’s more important than ever to keep an eye on the regulatory environment and make sure you continue to take appropriate measures – whatever the size of your business.

## About the author

### Sonia Navarrete

Sonia is a Senior Content Analyst at Capterra, helping SMEs choose the best software. She published in Raconteur, Computer Weekly and IT Pro. Journalist and PR. 

## Related Categories

- [Compliance Software](https://www.capterra.co.uk/directory/30110/compliance/software)
- [CRM Software](https://www.capterra.co.uk/directory/2/customer-relationship-management/software)
- [ERP Systems](https://www.capterra.co.uk/directory/9/enterprise-resource-planning/software)
- [Human Resources Software](https://www.capterra.co.uk/directory/5/human-resource/software)
- [Network Security Software](https://www.capterra.co.uk/directory/30003/network-security/software)

## Related Articles

- [Negotiation: 5 techniques to convince your potential buyers](https://www.capterra.co.uk/blog/811/negotiation-5-techniques-to-convince-your-potential-buyers)
- [Small businesses in the UK keen to adopt digital banking](https://www.capterra.co.uk/blog/1317/90-of-small-businesses-in-the-uk-keen-to-adopt-digital-banking)
- [46% online shoppers not aware of the UK’s data privacy laws](https://www.capterra.co.uk/blog/3053/data-privacy-and-data-protection-policy)
- [5 best IT help desk ticketing systems for UK businesses](https://www.capterra.co.uk/blog/4308/best-IT-help-desk-ticketing-system-UK)
- [5 top-rated contract management systems for small businesses in the UK](https://www.capterra.co.uk/blog/4378/best-contract-management-software-UK)

## Links

- [View on Capterra](https://www.capterra.co.uk/blog/887/eprivacy-vs-gdpr-whats-the-difference)
- [Blog](https://www.capterra.co.uk/blog)
- [Home](https://www.capterra.co.uk/)

-----

## Structured Data

<script type="application/ld+json">
  {"@context":"https://schema.org","@graph":[{"name":"Capterra UK","address":{"@type":"PostalAddress","addressLocality":"Egham","addressRegion":"ENG","postalCode":"TW20 9AH","streetAddress":"Tamesis, The Glanty, Staines-upon-Thames Egham TW20 9AH United Kingdom"},"description":"Capterra UK helps millions of people find the best business software. With software reviews, ratings, infographics, and the most comprehensive list of business software.","email":"info@capterra.co.uk","url":"https://www.capterra.co.uk/","logo":"https://dm-localsites-assets-prod.imgix.net/images/capterra/logo-a9b3b18653bd44e574e5108c22ab4d3c.svg","@type":"Organization","@id":"https://www.capterra.co.uk/#organization","parentOrganization":"Gartner, Inc.","sameAs":["https://twitter.com/Capterra","https://www.facebook.com/Capterra/","https://www.linkedin.com/company/capterra/","https://www.youtube.com/channel/UCEt7vQSPiPlPAblHdhJAqnA"]},{"name":"Capterra UK","url":"https://www.capterra.co.uk/","@type":"WebSite","@id":"https://www.capterra.co.uk/#website","publisher":{"@id":"https://www.capterra.co.uk/#organization"},"potentialAction":{"query":"required","target":"https://www.capterra.co.uk/search/?q={search_term_string}","@type":"SearchAction","query-input":"required name=search_term_string"}},{"name":"ePrivacy regulation vs GDPR: what’s the difference for your SME?","description":"ePrivacy regulation vs GDPR: what is the new ePrivacy regulation, how it differs from GDPR and what you can do to make sure your business is compliant?","url":"https://www.capterra.co.uk/blog/887/eprivacy-vs-gdpr-whats-the-difference","about":{"@id":"https://www.capterra.co.uk/#organization"},"@type":"WebPage","@id":"https://www.capterra.co.uk/blog/887/eprivacy-vs-gdpr-whats-the-difference#webpage","isPartOf":{"@id":"https://www.capterra.co.uk/#website"}},{"description":"The introduction of the EU’s General Data Protection Regulation (GDPR) back in 2018 was a bombshell moment. With UK GDPR now in force,  the ePrivacy Regulation will open a new can of regulatory worms for businesses of all sizes. ","author":[{"name":"Sonia Navarrete","@type":"Person"}],"image":{"url":"https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png","@type":"ImageObject","@id":"https://www.capterra.co.uk/blog/887/eprivacy-vs-gdpr-whats-the-difference#primaryimage"},"@type":"BlogPosting","articleBody":"&lt;img title=&quot;shutterstock_674332543&quot; alt=&quot;ePrivacy regulation vs GDPR&quot; class=&quot;aligncenter&quot; fetchpriority=&quot;high&quot; src=&quot;https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png&quot; srcset=&quot;https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png?w=400 400w, https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png?w=700 700w, https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png?w=1000 1000w, https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png?w=1500 1500w, https://images.ctfassets.net/63bmaubptoky/zxmgxYbHzs-fWxPQgTL-mDv6stRImDXVUeMCE4sebII/fffc0b63240ed13ca51078e9d70099f7/shutterstock_674332543.png?w=2200 2200w&quot; sizes=&quot;(min-resolution: 2x) 2200px, (min-width: 992px) 1000px, 95vw&quot;/&gt;&lt;p&gt;The introduction of the EU’s &lt;a href=&quot;https://gdpr-info.eu/&quot; rel=&quot;nofollow noopener noreferrer&quot; target=&quot;_blank&quot;&gt;General Data Protection Regulation&lt;/a&gt; (GDPR) back in 2018 was a bombshell moment. With &lt;a href=&quot;https://ico.org.uk/for-organisations/data-protection-and-the-eu/data-protection-and-the-eu-in-detail/the-uk-gdpr/&quot; rel=&quot;nofollow noopener noreferrer&quot; target=&quot;_blank&quot;&gt;UK GDPR &lt;/a&gt;now in force,  the ePrivacy Regulation will open a new can of regulatory worms for businesses of all sizes. &lt;/p&gt;&lt;p&gt;Here is more information about the law, how it differs from GDPR and what you can do to comply. &lt;/p&gt;&lt;h2&gt;&lt;b&gt;ePrivacy vs GDPR &lt;/b&gt;&lt;/h2&gt;&lt;p&gt;The ePrivacy Regulation will replace the &lt;a href=&quot;https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32002L0058&quot; rel=&quot;noopener noreferrer nofollow&quot; target=&quot;_blank&quot;&gt;ePrivacy Directive&lt;/a&gt;, which many of you will be familiar with. But what’s the difference? Well, whereas a directive merely sets a direction of travel for EU member states for legislation, a regulation is much more prescriptive and must be implemented in full in each EU jurisdiction – much like the GDPR is today. &lt;/p&gt;&lt;p&gt;In fact, the GDPR and the ePrivacy Directive are very close relatives. The latter is the application of the privacy and consent principles of GDPR to the specific case of personal data that’s communicated electronically by businesses. The provisions of GDPR can therefore be seen as sitting above those of the ePrivacy Regulation. &lt;/p&gt;&lt;h2&gt;&lt;b&gt;What the ePrivacy Regulation means for you&lt;/b&gt;&lt;/h2&gt;&lt;p&gt;Technicalities aside, the burning question for businesses is whether or not you need comply. &lt;/p&gt;&lt;p&gt;T he short answer is that if you provide any sort of online communications service, engage in electronic direct marketing or use any form of online tracking, such as cookies, then you do. &lt;/p&gt;&lt;p&gt;Unlike with the old ePrivacy Directive, companies like WhatsApp or Skype that use others’ networks to deliver their services &lt;a href=&quot;https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52017PC0010&quot; rel=&quot;noopener noreferrer nofollow&quot; target=&quot;_blank&quot;&gt;are now obliged to comply&lt;/a&gt;. &lt;/p&gt;&lt;p&gt;Another novelty is that the new regulation covers not only the content of communications but also the associated metadata – the time a message was sent, for example, or the location it was sent from. &lt;/p&gt;&lt;p&gt;Companies can now only use this data if a user has given their explicit consent. Other innovations include simplifying rules around the use of cookies and stronger protections against spam. &lt;/p&gt;&lt;p&gt;The message to small and medium-sized businesses is therefore clear: the regulatory ride is only just beginning. GDPR has established solid principles around privacy and consent that we can now expect to see applied into specific markets through new laws like the ePrivacy Directive. &lt;/p&gt;&lt;p&gt;This means businesses need to have in place a dynamic approach to compliance, once that can respond rapidly to new regulations as they emerge without causing too much disruption to their business.&lt;/p&gt;&lt;h2&gt;&lt;b&gt;The role for compliance software&lt;/b&gt;&lt;/h2&gt;&lt;p&gt;It’s here that choosing the right compliance software can make all the difference. When it comes to data privacy, there are a wide range of &lt;a href=&quot;/directory/30854/data-governance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;data governance solutions&lt;/a&gt; on the market that combine features such as big data analytics, storage, and security in a single package. &lt;/p&gt;&lt;p&gt;Such software helps businesses keep on top of how they use and analyse data so that they can ensure they comply with all relevant obligations around consent and security.  &lt;/p&gt;&lt;p&gt;Additionally, and as you might well expect with a regulation as high-profile as GDPR, the market has also responded with a number of new &lt;a href=&quot;/directory/31309/gdpr-compliance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;GDPR-specific solutions&lt;/a&gt;. &lt;/p&gt;&lt;p&gt;Some of these products offer solutions to niche areas of GDPR compliance, such as helping businesses easily respond to requests for access to data by the owners of that data, while others provide a more complete approach and seek to address all elements of the law.&lt;/p&gt;&lt;h2&gt;&lt;b&gt;Finding the best software for your business&lt;/b&gt;&lt;/h2&gt;&lt;p&gt;What’s important is that you find the right software for your business. By researching what’s on the market you can get a good idea of the capabilities on offer and select the solutions that plug your existing compliance gaps and which look likely to be flexible enough to adapt to future requirements as they emerge. &lt;/p&gt;&lt;p&gt;To help in this task, look through the Capterra &lt;a href=&quot;/directory/30854/data-governance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;directory&lt;/a&gt; for data governance software, where you will be able to compare products by user reviews, features, cost and other important factors. &lt;/p&gt;&lt;p&gt;With the tide of regulations continuing to rise, this search won’t be a one-off job. It’s more important than ever to keep an eye on the regulatory environment and make sure you continue to take appropriate measures – whatever the size of your business. &lt;/p&gt;","dateModified":"2023-11-06T13:50:32.000000Z","datePublished":"2019-09-17T12:29:06.000000Z","headline":"ePrivacy vs GDPR: what’s the difference?","inLanguage":"en-GB","mainEntityOfPage":"https://www.capterra.co.uk/blog/887/eprivacy-vs-gdpr-whats-the-difference#webpage","publisher":{"@id":"https://www.capterra.co.uk/#organization"}}]}
</script>
