When you visit a website, more often than not, a small text file called a "cookie" is sent to your computer. Now, what possible use is a cookie without a glass of milk, this Naked Lawyer asks?
Well, the purpose of a cookie is to store data. For example, if you log onto a website and give details such as your name and e-mail address, the cookie will maintain your log-in details so that you do not have to log back in the next time you visit the site. A shrewd advertising tactic? Yes. An invasion of privacy? Potentially.
Cookies are currently regulated by the 2002 European Communities Directive on Privacy and Electronic Communications. Under the Directive, provided website users are given “clear and comprehensive information” about the purposes of cookies and are given the opportunity to refuse to have cookies stored on their equipment, cookies can be used for activities such as advertising, analysing website effectiveness and identifying online purchasers. Currently website owners comply with this requirement by putting information about cookies in a privacy policy and then adding a link to the policy to every page of their website.
Now proposed amendments to the law on cookies suggests that users may have to give prior consent in order to allow cookies. (This is subject to an exemption if the cookies are “strictly necessary” i.e. they enable a specific service explicitly requested by the user.) At this stage it is completely unclear what prior consent under the new proposals will mean in practical terms. A website owner could perhaps consider the following pop-up message on entry to their site: "click here for a cookie (non chocolate chip variety)". However, a pop-up message is arguably very cumbersome and not least rather off-putting to passing website traffic. This Naked Lawyer awaits the developments...