UK regulator ICO is set to play cookie cop for the digital ad industry
This week, U.K. data protection authority the Information Commissioner’s Office issued a blunt reminder of how cookies should be used under the Privacy Electronics Communications Regulation. The reason: The law has now been updated to mirror the General Data Protection Regulation’s rules on consent.
Since last year, the wide interpretation of GDPR and a lack of standardization of consent management platforms, which relay consent-request messages to users — have resulted in a messy consumer experience.
The ICO wants to bust any misunderstandings around how and where cookies can be used in advertising and other online services. But it has only vetoed cookies that are “non-essential.” That means any cookie necessary for the delivery of the service a person has requested to use doesn’t need user consent.
“Cookie compliance will be an increasing regulatory priority for the ICO in the future,” wrote Ali Shah, head of technology policy for the ICO in the update. He added that all future action will be proportionate, but that businesses should run cookie audits.
The ad tech industry has already been on red alert since the ICO warned that current ad-targeting practices weren’t legal under GDPR, last month. Others believe this latest guidance takes that up another notch.
Here is a look at what the ICO has vetoed:
Farewell implied consent
Thanks to GDPR, (this was legal under PECR previously) implied consent can no longer be relied on for cookies or for processing personal data. That means users must give explicit consent to cookies which are deemed non-essential to their website visit or intentions for using an online service (like a purchase). Pre-ticked boxes (of which there are still many) or any tactic that means users are opted in by default are not allowed for non-essential cookies. Users must be given absolute control over what non-essential cookies are dropped on them and these kinds of cookies also can’t be set on landing pages before that user has given consent. Naturally, some businesses would argue that all their cookies are essential for performing their business or service to a user. That would be a risky assumption.
Analytics cookies need consent
It looks like the trusty analytics cookies are out of luck. The ICO has deemed these should require user consent, because otherwise users aren’t aware this type of cookie is being dropped on their computer when they use an online service. For that reason, the ICO has said they are aren’t necessary for the user to be able to access a service; therefore, they must have user consent.
“Time will tell how many people give consent for non-essential cookies, but it will undoubtedly restrict the reach of advertisers,” added Gracey.
Cookie walls: dead on arrival
An idea bandied around at one point ahead of GDPR was the notion of a “tracking wall” or what the ICO refers to as a cookie wall. The concept is that any visitor to a publisher’s site that has a tracking wall installed won’t be able to continue on the site, read or watch the content until they give consent to their data being used and stored by that publisher for advertising purposes. It also applies to a lot of assumed consent strategies. Many sites have added a message to the effect that using the site means giving consent to cookies. However, the ICO has stated this is not valid consent under GDPR.
As the ICO recently stated in its latest GDPR update, relying on legitimate interest for sending targeted advertising is a hard no. Same goes for PECR. In fact, the ICO claimed this had always been the case under PECR.
“PECR always requires consent for non-essential cookies, such as those used for the purposes of marketing and advertising. Legitimate interests cannot be relied upon for these cookies,” wrote Shah.
‘We’re netting out with higher revenue’: Publishers reaping the benefits of Snapchat’s strong second half
With CPMs up as much as 20% year over year in the fourth quarter, many Discover publishers are bullish on the upstart platform for next year.
How Cosmo is building brand affinity with younger audiences through its focus on commerce
Cosmopolitan's focus on e-commerce through a line of branded wines and its own shopping holiday has led to a 254% increase in product sales.
‘Go to market faster’: The Washington Post’s Arc goes outside the tent for payment and data integrations
Subscriber revenue has become more of a priority to the Washington Post's Arc clients since it launched its subscription tools last year.
SponsoredPublishers will lead the charge as cookie-less advertising becomes the norm
Steve Wing, managing director, EMEA, Magnite As the advertising industry moves closer to a cookieless world — one in which browserless environments including connected TV (CTV) and mobile in-app are an increasingly large part of ad budgets — publishers will have an increasingly important role in developing the future of identity. Segment creation and identity […]
‘Profitability in the back half of next year’: BuzzFeed CEO Jonah Peretti (and Verizon Media CEO Guru Gowrappan) on their big merger
A special Digiday podcast episode features Interviews with BuzzFeed CEO Jonah Peretti and Verizon Media CEO Guru Gowrappan.
‘A digital Madison Square Garden’: How Complex reimagined the sponsorship opportunities for ComplexLand
The online event, which will combine music, conversation, gaming and shopping in an online world, will have 60 sponsors.