Originally published on 16 September 2022. This English translation preserves the original article’s historical context. The regulatory statements below reproduce the context of the original article and have not been updated.
Many websites use only a simple cookie consent banner. The original article warned that a basic accept-or-reject banner could fall short of consent requirements, referring to changes in guidance in May 2020.
The article explained that, where consent is required, a website should obtain explicit consent for the specific purposes for which personal data will be used. It set out the following requirements:
- Prior, explicit consent before activating cookies, with an exception for necessary cookies.
- Granular consent: users should be able to activate some cookies rather than others, without being forced into an all-or-nothing choice.
- Consent must be freely given rather than forced.
- Withdrawing consent should be as easy as giving it. Users should be able to change their choices at any time.
- Consent records should be stored securely as legal records.
- The original article recommended annual renewal of consent, while noting that some national data-protection guidance recommended more frequent renewal, such as every six months.
In many cases, free plugins may not be sufficient for the required configuration, making professional consent-management solutions a more suitable option.
These changes do not necessarily involve a large budget, but they require careful implementation.
Wikafi can help you review your cookie-management setup and implement the appropriate technical solution.