 |
 |
On Thu, 26 May 2011, David Mackland wrote: > I like the BBC's approach - > http://www.bbc.co.uk/privacy/bbc-cookies-policy.shtml > > They identify all potential cookies delivered from their sites, describe > what they do and provide links out to how they can be rejected. > Simples (too keep in with the insurance quotes) > > Obviously the BBC is a leader of standards so perhaps this could for the > basis for UK Universities approach? My take is that this approach was fine until today when (at least in theory) the new regulations came into force. Unless all the BBC cookies are "strictly necessary for the provision of an information society service" requested by me then they now need to obtain my consent if they want to "store or gain access to information stored" in my browser. At a quick look I don't think all the BBC cookies fall under "strictly necessary" as interpreted by the ICO's guidance ([1]). The Department for Culture, Media and Sport has published an open letter about the cookie rules [2]. My take is that it seems to be trying to say that consent doesn't need to be obtained in advance, which is 'interesting'. It also seems to say that relying on existing browser controls (at least their default settings) isn't sufficient. There's a lot more dust that is going to need to settle before we are going to be able to see where this is all going. There are some wittering in my blog [3] on this subject and I fear there will be more in the future. Jon. [1] http://www.ico.gov.uk/~/media/documents/library/Privacy_and_electronic/Practical_application/advice_on_the_new_cookies_regulations.pdf [2] http://www.dcms.gov.uk/images/publications/cookies_open_letter.pdf [3] http://jw35.blogspot.com/search/label/cookies -- Jon Warbrick Information Systems Development, Computing Service, University of Cambridge