GDPR - Cookies

[mcrompton01]

Hi,

 

I've come across this while reviewing our cookie policy for the trust. What does this mean in terms of GDPR complaiance? As we use wordpress and google analystic to in effect track users across our site. We can profile a visit but not identify who the person it based on the unique identifiers it creates. Just curious how this relatesto current EU cookie law...

 

GDPR Article 4 - Recital 30

(30) Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags.

 

This may leave traces which, in particular when combined with unique identifiers and other information received by the servers, may be used to create profiles of the natural persons and identify them.

 

Regards

 

Mark

[enjay]

Cookies are fine, as long as you're not aggregating the data with anything else which would allow you to associate the IP to an identified person.