EU ePrivacy Directive Deadlines and Compliance Calendar

Your day-to-day obligations still come from the directive as implemented in national law, not from the proposed regulation. The most useful timeline points are therefore the current directive baseline and the major GDPR-era guidance documents.

Use these milestones to frame your documentation, training, and annual legal review checkpoints.

Most compliance failures happen through silent drift: new tags, new SDKs, new vendors, and new purposes that bypass review.

Run quarterly tracker audits the way you would run a security or release-control review.

Consent systems often fail silently through broken logging, vendor-mapping errors, or locale mismatches.

Monthly QA is the easiest way to avoid enforcement surprises and evidence gaps.

Direct-marketing complaints often come down to suppression failures, not policy wording.

Treat suppression integrity as a control that needs recurring testing.

You should be able to answer what trackers you run, why, how consent works, and what logs prove it.

Rehearse evidence exports like an incident tabletop exercise.