Cookies on websites - any regulation changes recently?

[Ditto]

I've noticed an increasing number of websites, UK, EU and US, that are far more upfront with cookie management options. Many now make it much easier to reject all or only accept a functional minimum on first visit. Did the regulations in this area change recently?

[GrumbleDook]

There have been successive clarifications on how the requirements around cookies should be fulfilled. Companies that make it difficult get called out more frequently now. Cookie management tools are getting better (you will see a lot from TrustArc and OneTrust) and that has helped.

Being completely blunt ... even when they are better than they used to be, they are using so many other tools now to track you it is frustrating trying to stop it all.

[Ditto]

...they are using so many other tools now to track you it is frustrating trying to stop it all.

Thanks. Interesting - would this be non locally stored tracking?

[Garacesh]

Thanks. Interesting - would this be non locally stored tracking?

 

Browser fingerprinting is a huge one, I hear.

[Ditto]

Time to resurrect this thread. I have noticed, as I am sure others have, an increasing number of sites now offer 'Accept all cookies', or pay us money to go cookie free. News sites are the main protagonists. It's becoming like the bane of entertainment, adverts! I'm sure this is not in line with the principles of owning one's own data, so how are they getting away with this?

[Garacesh]

I'm sure this is not in line with the principles of owning one's own data, so how are they getting away with this?

 

Because the ICO still consider that as consent being freely given - a user can simply choose not to use that platform.

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/online-tracking/consent-or-pay/about-this-guidance/

 

“Consent or pay” models can be compliant with data protection law if you can demonstrate that people can freely give their consent and the models meet the other requirements set out in the law.

[Ditto]

Well at least that is clear from the ICO!

In terms of rights though, I suspect it would not be easy to exercise ones right to object. But perhaps more realistically, it is hard to believe rights related to automated decision making including profiling aren't being breached. The whole reason of all of this is, money making, mostly by advertising. I suspect that is massively driven by automated decision making and profiling.

I can't see the fight being won though, the corporates just have too much power nowadays. Principles and legislation just isn't doing what it needs to.

[andy_b]

https://www.theguardian.com/technology/2025/feb/08/we-didnt-click-consent-on-any-gambling-website-so-how-did-facebook-know-where-wed-been

 

All hail the Meta pixel!