Don’t let your cookies crumble
Tempting though it is to throw in a reference to the fondly remembered (at least by me) bear from the Andy Williams show (as the anti-dote to the introduction of the Osmonds), it is probably more appropriate at this moment to make mention of the more serious and ubiquitous cookies of today, that of gathering information.
Why? Because we now have the arrival of the change in the law on cookies, much previewed, and much delayed, but now finally here.
Essentially the new law requires websites to ask users what information they consent to have stored about them, and for users to make an active choice.
The underlying premise now is that as cookies store data about your use of sites, and so increasingly about you yourself, then their deployment should only be allowed if you have consented.
The basic Regulation (*) states that:
“a person shall not store or gain access to information stored, in the terminal equipment of a subscriber or user unless the requirements of paragraph (2) are met.
(2) the requirements are that the subscriber or user of that terminal equipment –
(a) is provided with clear and comprehensive information about the purposes of the storage of, or access to, that information; and
(b) has given his or her consent.
There is much published information to assist you. The Information Commissioner’s Office (ICO), for example, has published some detailed guidance notes (31 pages). Also, there are some good examples of best practice from the likes of the UK Intellectual Property Office, which states on its home page that:
The concept is, of course, to assist with transparency in respect of personal data stored. All jolly noble we might think, and maybe we should all aspire to it but, “I am incredibly busy so I will get around to sorting it out for my site eventually, or at least I will ask our website hosts to do so, they have probably got it all in hand in any event” will not pass muster.
What is the risk? Well, ultimately in the worst cases of breach a Monetary Penalty notice can be served imposing a financial penalty of £500,000 – Crumbs!