A set of regulations introduced in the United Kingdom in 2003, the Privacy and Electronic Communications Regulations (PECR) are designed to protect the privacy of individuals by regulating the use of electronic communications. These regulations apply to any individual or organization that uses electronic communications for marketing purposes, including emails, text messages, and automated calls. PECR also covers the use of cookies on websites, which are used to track user activity and preferences.
Marketing and Communications
PECR requires that website operators obtain the consent of users before using cookies and must provide clear information about how the data collected will be used. The regulations ensure that electronic communications are used in a responsible and ethical manner.
Regulatory Authority
The Information Commissioner’s Office (ICO) is the independent regulatory office responsible for enforcing PECR. The ICO reports directly to the Parliament of the United Kingdom and is sponsored by the Department for Science, Innovation and Technology. As of July 2026, the ICO continues to oversee the regulations, although future changes may transfer its functions to a new body, the Information Commission.
Scope and Compliance
PECR applies to any individual or organization using electronic communications for marketing. Compliance involves obtaining user consent for cookies and providing clear information about data usage. The regulations aim to protect individual privacy and ensure ethical use of electronic communications.
