Ensuring your business is GDPR compliant is of the utmost importance for any website operating in the EU or serving EU customers. This includes understanding the difference between UK and EU GDPR. Being aware of what GDPR requires means you can easily avoid fines and penalties.
Under GDPR, there are several requirements that govern how a business can process consumer data. One of these requirements covers the use of website cookies. While there are many types of cookies out there, only a few fall into the category of “strictly necessary”.
What Are Strictly Necessary Cookies?
Strictly necessary cookies are cookies exempted from informed consent because they must be present for the website’s core functionality. This includes cookies used for services the users have explicitly agreed to use.
Because these cookies are exempt from cookie consent, the website can use them for the necessary purpose as soon as the user first interacts with the website. All other cookies must be blocked until the user agrees to their use.
Criteria for Cookie Consent Exemptions
These cookies are only strictly necessary if they meet certain strict criteria regarding what is necessary for core functionality and what is not. Examples of strictly necessary cookies include cookies used for first-party session recording, account logins, shopping cart storage, and online billing.
Cookies that record user interaction for metrics, advertising, tracking, and other purposes not considered essential won’t fit these criteria, unless the user has specifically given permission to use these cookies by explicitly requesting a service that these cookies are necessary for.
Discussion
Related Posts
If you enjoyed reading this, please explore our other articles below:
