Cookie law (ePrivacy Directive)
The ePrivacy Directive, the regulation which contains, amongst other things, what became known as the “cookie law”, is currently being revamped. That revamp should be finalised in mid-2019.
Why you need to know
As with GDPR, if you do business in or with Europe, the ePrivacy regulation applies to your work even if you are not located within Europe. It will also apply to UK businesses trading within Europe regardless of Brexit.
What will it mean for you
The refresh of course is about much more than cookies: it concerns the privacy of all online communications in Europe, including content, metadata, telemetry, and the means of communication.
The ePrivacy refresh is closely paired with GDPR, the refresh of data protection and privacy rules across Europe. You should prepare for both new sets of rules together as if they were the same regulation.
- Plain English summary of a previous draft’s changes, now outdated (this blog)
- ePrivacy refresh announcement
- Full text of the proposed refresh (6 part PDF)
- Evaluation and review of the (first) ePrivacy Directive
- Afterbrexit.tech side blog where I monitor EU tech policy through the Brexit process