What’s new
What’s new?
- This guidance is a significant update to the detailed cookies guidance. It aims to clarify and reference the range of storage and access technologies that are widespread today alongside cookies, through examples throughout.
- The guidance has been rewritten using “must”, “should”, or “could” language to provide regulatory clarity to readers.
- The guidance reflects recent case law and ICO positions on key topics, including on our expectations for online advertising.
Below we outline the changes at chapter level so past readers of the detailed cookies guidance can navigate the changes.
What are storage and access technologies?
This is a pre-existing chapter with new content to explain other storage and access technologies covered by PECR in more detail, alongside cookies.
What are the rules?
This is a pre-existing chapter with some changes to the content, including added detail and new examples. This chapter now includes some sub-sections that were previously contained elsewhere in the guidance.
How do the PECR rules relate to the UK GDPR?
This is a pre-existing chapter with minor changes to the content.
How do we comply with the rules?
This is a pre-existing chapter which has been split into multiple chapters. This chapter includes refreshed examples and minor changes to the text of existing sub-sections, including some new policy lines.
How do we manage consent in practice?
This is a new chapter with some content from the previous “how do we comply with the rules?” chapter. It also includes new content to reflect ICO expectations for requesting consent, with examples of good and bad practice consent mechanisms.
How do the rules apply to online advertising?
This is a new chapter with mostly new content to provide clarity on how the rules apply to online advertising.
What happens if we don’t comply?
This is a pre-existing chapter with minor stylistic changes.
Glossary
This is a new resource.