Please click on any link on this page to find out more about the range of expertise offered by the lawyers at Clintons
If you are interested in career opportunities at Clintons please click here
21-05-12New Restrictive Law on "Cookies" to be Enforced from 26 May 2012
The moratorium on enforcement of last year’s “Cookie Law” will be lifted on 26 May 2012, when the UK’s “Privacy and Electronic Communications Regulations” will come into full force.
The UK implemented a new European e-Privacy Directive last year to require that (most) cookies can be placed only after the user has been provided with “clear and comprehensive information” and where the user has given “consent” – for which an “opt-out” capability is apparently not enough.
When these cookie-related amendments were first announced in early 2011, a level of media panic ensued. Websites complained that it would be practically impossible to get consent from every user before each cookie was placed. The Information Commissioner’s Office took notice of these concerns and granted a 12-month “moratorium” on enforcement of these cookie-related amendments. The moratorium expires on 26 May and, whilst the ICO has discretion and will take a “practical and proportionate” approach, the ICO does have the right to enforce by way of fines of up to £500,000.
By most accounts, few websites are confident about how to comply with the new rules – which (it is feared) may have a “speed bump” effect on ecommerce and internet use generally. Whilst some websites will take substantial steps to try to comply, it is likely that many sites will carry on as before (possibly for reasons of misunderstanding or lack of information).
The ICO has provided “guidance” on compliance which recommends every website should conduct a “cookie audit” to determine which of its cookies might escape the new law (by being “strictly necessary”) and suggests that consent for all other cookies might be obtained through the use of “pop ups”, “message bars” or other prominent notification methods.
This is a difficult and uncertain issue that all sites operating in the EU will face from later this month. It is likely that there will be detailed discussion within the ecommerce industry and further guidance from the ICO (who is also in discussions with browser manufacturers regarding a possible new “settings level”, though any resulting solution would not arrive immediately). The ICO has stated that it will focus on “those that do not comply nor attempt to comply” so most sites should address the issue sooner than later – though, for this new “cookies” law, it may take some time for online Europe to settle on “best practice” solutions.
The full text of the Regulations may be accessed via:
Article by Tom Frederikse
Clintons is authorised and regulated by the Solicitors Regulation Authority whose regulations can be found at www.rules.sra.org.uk. Solicitors Regulation Authority number 00045165 Compliance Information