What is the EU Cookie Law
The wrong Cookies – yurilong
In may 2011 the European Union passed a law that states any website that places non-essential cookies on a visitors device has to alert the visitor and gain permission for the cookies to be placed on their device. This law applies to both individuals and companies based in the EU. Websites that fail to comply can face fines up to £500,00 for serious breaches.
Wait, what is a cookie?
A cookie is a small file that websites use to track your behaviour. A good example of this is e-commerce, when you place a item in your basket the website will place a cookie on your device to remember what is in your basket.
Most websites also track what you do on the website, often using services like google analytics or kissmetrics. The data collected is used by the website owners to understand how people are using their website, what content or features they like and how long they spend browsing the website. This data is then often used to make the website better.
So what is a non-essential cookie?
Non essential cookies are those which the website can function without. These cookies often come from (but not limited to) analytics and advertisements. If your website uses cookies to remember which items were placed in a shopping basket, would be considered an essential.
What do I need to do to comply with the law?
1. Audit your cookies.
Before taking any other actions you need to know if your website is placing any non-essential cookies on users devices. To do this you can use your browser, after browsing your website, head to the settings section and their should be a privacy section, this will allow you to see all the cookies on your device.
To be on the safe side you can download extensions for Firefox and chrome or you could ask your web developer.
2. Update your terms and conditions to include information about your cookies.
The Cookie Control Pop up
Now you know what cookies your website is using, you need to include this information in your terms and conditions. This section should include the name of the cookie, what information the cookie holds, how long it lasts for and what that cookie is used for. If your need an example of a privacy policy, a good example is the ICO’s.
3. Inform and gain consent.
You now need to inform users that your site uses cookies and give them the option to opt in to receiving those cookies. Two solutions we have found that work well and are easy to set up are cookie control and heart internet.
If your school requires any help with performing an audit or setting up a solution feel free to contact me on 0800 234 3141.
