UK ICO Warns Organizations to Make Advertising Cookies Compliant Following…

In November 2023, the UK Information Commissioner’s Office (“ICO”) wrote to organizations operating 53 of the UK’s biggest websites regarding their compliance with data protection laws when using cookies.  On January 31, 2024, the ICO released a statement on such action noting that it received “an overwhelmingly positive response” with 38 of those organizations having changed their cookie banners in order to come into compliance. Others have either committed to ensuring compliance within a month, or are exploring other solutions such as contextual advertising.

The ICO intends to continue with this approach and notes that it is “preparing to write to the next 100 – and the 100 after that.” It expects all websites using advertising cookies to give website users a “fair choice” as to whether they consent to the use of such technologies, and notes that those organizations that do not comply will “face the consequences.” The ICO is developing an AI solution to help identify websites using non-compliant cookie banners and warns organizations to take action now to become compliant.

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts