When the ePrivacy Directive Applies
The ePrivacy Directive applies when organisations:
- Use cookies or similar tracking technologies on websites or mobile applications
- Send direct marketing communications (email, SMS, automated calls) to individuals in the EU
- Process electronic communications data
- Store or access information on users' devices
Hospitality organisations are frequently within scope due to:
- Booking websites using analytics and marketing cookies
- Online behavioural advertising
- Email marketing campaigns
- SMS reservation confirmations
- Loyalty programme communications
- Digital remarketing tools
Exposure may arise even if the organisation is located outside the EU but interacts digitally with EU residents.
