Explicit permission to be required for cookie usage

[Duncan Rounding]

I don't see how this can be enforced or policed. Almost every internet site of any worth will have tracking of some nature. The directive should differentiate between real personal data and anonymous tracking data in my opinion. Just now we'll need PCI-DSS compliance to store cookies and collect tracking data.

To try and bundle this with spyware trojans and the likes is ridiculous. How many millions. if not billions. of sites are there out there again?

[NickD]

What about deep linking? It surely can't be suggested that every page on a website has to have a prominent message - one on the home page would be OK and do-able easily but would that alone be accepted by the Information commissioner? It would be perfectly possible to deep link to my site and conclude a transaction without ever going near the home page or seeing a prominent warning. I'm sure most sites are like that. A footer might work implementationally - but again would it be considered good enough and "explicit"?

Has there been any dialogue between Actinic and the Information Commissioner to see if this approach is acceptable? If there are valid reasons why it is impractical to do what has been suggested, then as a stakeholder representing many thousands of other Actinic-using stakeholders, I feel that is appropriate. Or we may all have a BIG problem later in the year.

[Duncan Rounding]

I can't see that using pop-ups will work. People have come to hate them and most browsers will block them.

[Duncan Rounding]

Again I think the BBC are making the most out of this story - this is nothing new and cookies are just a small part of the whole directive.

The full directive can be read here: http://eur-lex.europa.eu/LexUriServ/...2L0058:EN:HTML

All that I believe will be required is for e-commerce sites to place a note on the page in the footer and/or perhaps or a link to a page that advises the visitor about data privacy and use of cookies advising that if they do not wish to be tracked then to please leave the site. Anything else is not practical.

It seems like the EU have nothing better to do, no wonder they want so much of our money.

[Mike Hughes]

I think Google analytics is a good question. I believe the driving force behind this is the tracking of what users are doing online and particularly the 'profiling' of users for advertising.

I'd be surprised if Google analytics (and similar) isn't covered by the legislation. Presumably Analytics will need to pop up a question asking for permission before it can start to track the user.

Mike

[alewis]

How will this affect Google Analytics?

Will individual site owners be reponsible for warning people their site is using it?

[Mike Hughes]

I saw this too and was wondering about it.

It's probably posted in the wrong forum though as it's not really V10 related or specific. Maybe the mods can move it.

You've highlighted the bit that says

Specifically excluded by the directive are cookies that log what people have put in online shopping baskets.

So is there anything Actinic need to do on this?

Mike

PS. It all seems to be a bit rushed. The legislation is supposed by come into effect on May 25th, but it soulds as if they're still discussing the details and haven't yet published the regulations. Makes it hard to say what needs to be done by when.

[NickD]

Just heard about this on the radio:-

http://www.bbc.co.uk/news/technology-12668552

New net rules set to make cookies crumble

Websites face restrictions on how they watch what their users do.

How websites track visitors and tailor ads to their behaviour is about to undergo a big shake-up. From 25 May, European laws dictate that "explicit consent" must be gathered from web users who are being tracked via text files called "cookies". These files are widely used to help users navigate faster around sites they visit regularly. Businesses are being urged to sort out how they get consent so they can keep on using cookies.

Track changes

The changes are demanded by the European e-Privacy directive which comes into force in the UK in late May. The section of the directive dealing with cookies was drawn up in an attempt to protect privacy and, in particular, limit how much use could be made of behavioural advertising. This form of marketing involves people being tracked across websites, with their behaviour used to create a profile that dictates the type of adverts they see. As part of its work to comply with the directive, the IAB - an industry body that represents web ad firms - created a site that explains how behavioural advertising works and lets people opt out of it. The directive demands that users be fully informed about the information being stored in cookies and told why they see particular adverts. Specifically excluded by the directive are cookies that log what people have put in online shopping baskets. However, the directive is likely to have an impact on the more general use of cookies that remember login details and enable people to speed up their use of sites they visit regularly.

(end)

The radio interview with the information commissioner is not yet available on the BBC iplayer but as soon as it is I will post a link.

Is Actinic aware of this, and are there any plans to implement something within the timescales mentioned on Radio 4, which were "approx September this year" ?

Nick