The European Union’s Privacy and Electronic Communications Directive is set to bring big changes to the way website visitors are tracked via “cookies” because now “explicit consent” must be gathered from every website user to allow sites to log and use the information.

Cookies are pieces of text, stored on users’ computers by their Web browser. They hold information about which sites users visit, data about their surfing habits, and log-in details or preferences for sites. Cookies allow users to move around regular sites faster and allow advertisers to build up a profile and tailor the type of ads they see.

The new directive – aimed at protecting users from unwanted targeted advertising and against data misuse – says users must be fully informed about information stored in cookies and why they are shown certain adverts.

However, no immediate changes are necessary to your websites just yet as the UK government is giving UK websites up to a year to comply with the new rules. During that time, the government will be working to provide technical solutions to help website owners comply.

In the meantime, now is a good time to consider your website’s privacy policy.

Any website which takes any personal information online requires a privacy policy – even if it’s just via a simple “contact us” form which users fill in with name, address, email or phone number.

Does your website ask users to sign up for a newsletter, take online orders, compile mailing lists or offer a “tell a friend” facility? Then you need to comply with the Data Protection Act 1998 with a privacy policy on your website.

Your privacy policy should:
• explain what personal information you collect and how you use it
• provide contact details if users want to see the information held about them and if there is any administration charge for providing it.
• how the website uses cookies

Find out more:
The new cookie laws on UK websites and existing regulations such as data protection, privacy and electronic communications and freedom of information laws and regulations are enforced by the Information Commissioner’s Office. Its website www.ico.gov.uk has lots more information.