Web site owners are warned about cookies

FIRMS MUST DO MORE to comply with cookie rules according to the Information Commissioner, who said that they must try harder.

The Information Commissioner's Office (ICO) has published guidelines to help companies comply with cookie rules that we get the impression they have tried hard to ignore.

"The guidance we've issued today (PDF) builds on the advice we've already set out, and now includes specific practical examples of what compliance might look like," said Information Commissioner Christopher Graham.

"We're half way through the lead-in to formal enforcement of the rules. But, come 26 May next year, when our 12 month grace period ends, there will not be a wave of knee-jerk formal enforcement actions taken against those who are not yet compliant but are trying to get there."

At the heart of the warning is the revised Privacy and Electronic Communications Regulation, a law that came into force in the UK on 26 May. These say that businesses and organisations with web sites in the UK must get consent from visitors to their sites before storing cookies on their computers.

It appears that not all firms are doing this, or are only making a nod in the direction of compliance. "Our mid-term report can be summed up by the schoolteacher's favourite clichés 'could do better' and 'must try harder'," added Thomas.

"Many people running websites will still be thinking that implementing the law is an impossible task. But they now need to get to work. Over the last few months we've been speaking to and working with businesses and organisations that are getting on with it and setting the standard. My message to others is - if they can do it, why can't you?"

The warning, so to speak, is not particularly strong, and although the issue of cookies and their use without visitor consent is a contentious one, Thomas was more social studies teacher than feared headmaster as he continued his comments on his blog on the ICO's web site.

There web site operators were warned that even if they don't meet compliance by the deadline of May 26 next year, they would be treated to assistance from the ICO, as opposed to fines.

"I want to make it clear what will happen after 26 May 2012, the end of the lead-in period. There will not be a wave of knee-jerk formal enforcement action taken against people who are not yet compliant but trying to get there," he added.

"[However] be assured that if we get complaints or have concerns then we will be checking your site and we will take the necessary steps to ensure that you do work towards compliance." µ