Government Digital Services give their take on EU Cookie Law
The Government Digital Services team recently hosted a meeting of government website managers, developers, policy advisers and communications experts to discuss a range of issues including the EU Cookie legislations. The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 actually came into effect last year and deals with the issue of privacy and cookie use on UK websites. The law will impact nearly all of UK websites and a years grace period was given to allow website owners to make and required amendments. That years grace is nearly ended and many have been looking to the government for guidance on this issue.
In a blog post titled "it's not about cookies, it's about privacy", the GDS explained that while they did not get hung up on cookies, they did talk about the experiences auditing their website cookies and how to correctly classify them in terms of privacy intrusiveness (i.e. "moderately intrusive", "minimally intrusive" or "exempt from changes to privacy legislation")
"Inevitably, analytics and the vital role analytics-related cookies play in allowing public sector websites to be held to account on the cost-effectiveness of the way we deliver government information and services came up. Even more importantly, analytics are essential to our "continual improvement" approach to developing digital public services, which is critical to delivering the government's digital by default agenda."
The GDS have also released an Implementer Guide which includes recommendations for website owners. The guide does highlight part of the ICO guidance which states that "it is highly unlikely that priority for any formal action would be given to focusing on uses of cookies where there is a low level of intrusiveness and risk of harm to individuals. Provided clear information is given about their activities we are unlikely to prioritise first-party cookies used only for analytical purposes in any consideration of regulatory action."