UK Cookie Law

[anglian]

On the 26th May 2012 the UK Cookie law will come into effect.
It actually came into effect in 2011, but a 12 month grace period was allowed to give site owners time to make the required modifications.

The full law can be read here

As IT professionals we are bound to be asked questions on this subject by confused clients, and as IT professionals we also should make sure that our sites abide by the law.
Basically, essential cookies are OK and need no warning (eg, add to cart) but non essential and "important" cookies need to have the users permission.

I like many here use Wordpress & google analytics. After installing attacat cookie monitoring plugin in chrome, I found that the only cookies issued by my site were those from google analytics. (My site is a static site with no blog, comments etc)

So to abide by the law I need to either a) have a popup explaining that my site uses cookies, click here to accept blah blah blah, or remove google analytics. I have chosen to remove analytics

It also seems that most government websites will faile to comply in time read more here

Just wondering what, if anything, others here are doing about this now the deadline is drawing closer, and what interpretations of the law you have?

[abbasmuraj]

The Govt themselves will not be compliant according to http://www.bbc.co.uk/news/technology-18090118

There are various way, and the most common way is to have a good privacy page explaining about the way the site handles cookies, etc and what the end user can do if they do not want to have their visit tracked.

Another good site with a plugin for Wordpress is http://www.civicuk.com/cookie-law/index

Check what the big sites like Debenhams, John Lewis are doing and follow their examples

[PBComputer]

I've decided to disable analytics for now, and I'm waiting to see how everyone else is going to comply.

Paul
Cumbria Computer Repairs

[DCGPX]

Thing is whilst we want to be compliant, how many of us are that high profile to worry about it? It's nowhere near my top50 to do list!

Sorry but that's the way it is !

[gikstar]

And how does the UK Government plan on addressing the situation where you might wander off of a UK site to a website from the United States?

[Painless]

I'm waiting to see what the 'big boys' do.

I'm unclear if we just have to tell people there are cookies and how to disable them in their browser or do we need to give them the option of viewing the site without cookies. If the latter is the option then the question would have to be asked on every page - since we can't store a cookie with their initial answer.

This whole issue seems to be the usual EU nightmare. As I understand it of the 27 countries affected only 2 are making any attempt to comply and neither of them has achieve success 12 months after the legislation came into effect.

The Information Commissioner appears to have said that no action will be taken (initially) unless a complaint is received against a site.

And then is it an issue with the site owner or the site maintainer ie the client or us?

As I said the usual EU nightmare. What does everyone else think?

John.

[Xander]

Wow. The Nanny State's insanity has been bumped up a notch lately.

Next will be the Bobbies will need a signed consent form before they can open fire on you.

[anglian]

Originally Posted by Painless

- since we can't store a cookie with their initial answer.

You are allowed to store a cookie saying the user does not want cookies from your site, this is classed as "essential"

Originally Posted by PBComputer

I've decided to disable analytics for now, and I'm waiting to see how everyone else is going to comply.

Thats the way I am doing it, can't afford to be a "test case"

[Painless]

Originally Posted by anglian

You are allowed to store a cookie saying the user does not want cookies from your site, this is classed as "essential"

But you could still have issues if people arrive at somewhere other than your 'home' page ie from a link or bookmark and what about the people who paranoid enough to disable all pop-ups and java script. To inform these viewers you would need a static paragraph which would need to be above the page break so that it is visible before they explore the sight.

It will become a bit like cigarette packets. You can't see what you are buying because of all the warnings and gory pictures.

John

[anglian]

Originally Posted by Painless

It will become a bit like cigarette packets. You can't see what you are buying because of all the warnings and gory pictures.

Yup, it is all a bit of a mess, what it means is that a UK user visiting a legitimate UK site will get popup warnings about cookies and when the same user visits a scam site based half way round the world there will be no warnings.
Sure won't help the number of people getting ripped of. There really need to be a campaign on TV etc to make people aware of the law and explain what all these popup windows will mean.