[LRUG] This cookie nonsense

Kevin Monk kevin at mangoswiss.com
Thu Jun 21 06:18:57 PDT 2012


Thanks, Steve and Graham. Both very useful links.

The ICC guide was particularly useful and a great clarifier.


On 21 Jun 2012, at 13:30, Stephen Bartholomew wrote:

> Not sure on the specifics of the questions you asked, but do not that session cookies that are required for correct operation of the site don't require explicit consent.  This covers:
> 
> * Ecommerce sites using sessions to track a customer's basket/order
> * Login that needs sessions in order to provide access to an area
> * etc
> 
> Check out: http://www.international-chamber.co.uk/components/com_wordpress/wp/wp-content/uploads/2012/04/icc_uk_cookie_guide.pdf
> 
> Specifically 'Part 2: Categories of cookies"
> 
> Seems to be that the big thing they're trying to hit are advertising / tracking cookies.  
> 
> Steve
> 
> 
> On Thu, Jun 21, 2012 at 1:16 PM, Kevin Monk <kevin at mangoswiss.com> wrote:
> Hi LRUGers,
> 
> What are people doing about this EU cookie law?
> 
> According to the ICO guidance... http://www.ico.gov.uk/for_organisations/privacy_and_electronic_communications/the_guide/~/media/documents/library/Privacy_and_electronic/Practical_application/cookies_guidance_v3.ashx
> 
> "Implied consent is certainly a valid form of consent but those who seek to rely on it should not see it as an easy way out or use the term as a euphemism for “doing nothing”
> 
> An 11th hour reprieve? http://www.guardian.co.uk/technology/2012/may/26/cookies-law-changed-implied-consent
> 
> But...
> 
> "For implied consent to work there has to be some action taken by the consenting individual from which their consent can be inferred."
> 
> Or put another way - implied consent is OK as long as it's explicit. << scratches head >>
> 
> And RE: Prior consent
> "It is difficult to see that a good argument could be made that agreement to an action could be obtained after the activity the agreement is needed for has already occurred. This is not the generally accepted way in which consent works in other areas, and is not what users will expect. Setting cookies before users have had the opportunity to look at the information provided about cookies, and make a choice about those cookies, is likely to lead to compliance problems. The Information Commissioner does however recognise that currently many websites set cookies as soon as a user accesses the site. This makes obtaining consent before the cookie is set difficult. Wherever possible the setting of cookies should be delayed until users have had the opportunity to understand what cookies are being used and make their choice. Where this is not possible at present websites should be able to demonstrate that they are doing as much as possible to reduce the amount of time before the user receives information about cookies and is provided with options. A key point here is ensuring that the information you provide is not just clear and comprehensive but also readily available."
> 
> Am I right in thinking that cookies are stored from the first page view? Even prior to the login. In which case, any cookie based session storage requires prior consent?
> 
> At the moment, I'm in the camp of putting an asterisk on the log in box that references a statement in the footer of the website.  Using pop-up/dialog boxes seems invasive and annoying for the user as does a large ugly message in a prominent position on the page - Exhibit A: The BBC website. Some appear to have done nothing - Exhibit B: http://www.guardian.co.uk ??
> 
> Yours dazed and confused,
> 
> Kevin.
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org
> 
> 
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org

Kevin Monk
Technical Director

Mango Swiss Ltd
Westow Hill Studios
45 Westow Hill
Upper Norwood
London SE19 1TS

E: kevin at mangoswiss.com
T: 020 8670 5461
M: 07736 066408



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20120621/b8703766/attachment.html>


More information about the Chat mailing list