November 10, 2009 | Comments
Permission will be needed for ad cookies in Europe by April 2011.
An amendment to an EU privacy directive was voted through by the Council of the EU on October 26th, and now awaits simple formalities before it comes into force. EU member states must then interpret and implement the directive through local laws by April 26th 2011 at the latest.
The EDPS, the body responsible for EU institutions' compliance with data protection laws, issued a press release yesterday stating, "nothing stands in the way for the ePrivacy Directive to enter into force. The formalities required for formal adoption will be undertaken in the coming weeks. The revised ePrivacy Directive, as amended by the European Parliament and adopted by the Council must be implemented by the Member States within 18 months."
Struan Robertson, Legal Director at law firm Pinsent Masons, described the remaining formalities as a "rubber stamping exercise."
The amended directive will now state that national governments must "ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his/her consent, having been provided with clear and comprehensive information."
Cookies without user consent would only be allowed when they are "strictly necessary" to provide a service "explicitly requested" by the user such as storing shopping cart information on e-commerce sites, for example.
The directive must now be interpreted and implemented by individual governments through local laws, but Robertson suggests any interpretation that attempts to avoid the issue of clear user consent would be an unlawful one. "There could be advantages for everyone if it is interpreted that way, but it would not accurately implement EU law," he said. U.K. regulators, for example, reproduced the wording of the original 2002 directive faithfully in local law, and Robertson said he expects the same this time round.
However, IAB Europe Vice President Kimon Zorbas suggests that consent could be given through users' browser settings in much the same way some users already manage their cookies. That might enable users to express consent permanently, eliminating the need for pop-ups and other disruptions to user experience the directive might cause.
Roberston suggests the directive was already intended to require consent for cookies, but that its wording enabled publishers and ad companies to comply by publishing details of cookie use in their privacy policies. "I suspect the motivation for this could be to correct ambiguity in the original directive," he said.
Want to learn more?
Attend ClickZ Live New York March 30 - April 1. With over 15 years' experience delivering industry-leading events, ClickZ Live brings together over 60 expert speakers to offer an action-packed, educationally-focused agenda covering all aspects of digital marketing. Register today!
Hong Kong, May 5-6, 2015
A Buyer's Guide to Affiliate Management Software
Manage your performance marketing with the right solution. Choose a platform that will mutually empower advertisers and media partners!
Google My Business Listings Demystified
To help brands control how they appear online, Google has developed a new offering: Google My Business Locations. This whitepaper helps marketers understand how to use this powerful new tool.
May 6, 2015
12:00pm ET/9:00am PT