You may or may not have heard about the new(ish) cookie law that has come in requiring web sites to get the users permission before sending out a cookie that can be used to track a user across web sites. Although aimed at increasing online privacy it is causing a problem for most people who have a web site including me.
The problem I have is with third party services serving cookies, most specifically AdSense and Google Analytics. The new legislation gives both Google (as the service who sends out the cookies) and me (as the user of there service) equal responsibility to get the users agreement before service the cookies. The problem is I have no control over what Google serve and they don’t appear to have a solution in the pipeline. As the Information Commissioner’s Office, the organisation charged with enforcing the legislation, have said they are taking a light touch approach to enforcement “where there is a low level of intrusiveness and risk of harm to individuals” I will, like many, continue to take the wait and see approach and hope that Google comes up with a more defined solution in the near future.
So, in summery I am already compliant with the exception of some Google services, and I am now hoping Google will supply a recommended solution for me and many millions more across Europe.
Update: Things are changing already with new advice from the ICO saying that we can presume implied consent. As a result I can now just bring up a one time message (perhaps just for European visitors but I will need to check in to that) letting the user know I am using Google Analytics cookies and taking there continued use of the site as implied consent. Clearly I am missing the deadline on implementing this but will have it coded and active soon.