Staffa - 2:53 pm on Mar 9, 2011 (gmt 0)

I found the following :

Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) [eur-lex.europa.eu]

view para (25) in which they refer to Directive 95/46/EC

Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data [eur-lex.europa.eu]

Happy reading :o)