Changes between Version 6 and Version 7 of Ticket #59445, comment 15
- Timestamp:
- 09/27/2023 01:47:30 AM (17 months ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #59445, comment 15
v6 v7 21 21 22 22 {{{ 23 PECR requirements are separate from, and different to, those of the UK GDPR. Guidance produced by European data protection authorities on how the ePrivacy Directive relates to the UK GDPR clarifies that, if consent is required under the cookie rules: 23 PECR requirements are separate from, and different to, those of the UK GDPR. 24 Guidance produced by European data protection authorities on how the 25 ePrivacy Directive relates to the UK GDPR clarifies that, if consent is required 26 under the cookie rules: 24 27 25 "the controller cannot rely on the full range of possible lawful grounds provided by article 6 of the UK GDPR". 28 "the controller cannot rely on the full range of possible lawful grounds provided 29 by article 6 of the UK GDPR". 26 30 27 The simplest way to understand it is that if your cookies require consent under PECR, then you cannot use one of the alternative lawful bases from the GDPR to set them. If you’re setting cookies, this is why you need to look to PECR first and comply with its specific rules, before considering any of the general rules in the UK GDPR. 31 The simplest way to understand it is that if your cookies require consent 32 under PECR, then you cannot use one of the alternative lawful bases from 33 the GDPR to set them. If you’re setting cookies, this is why you need to look 34 to PECR first and comply with its specific rules, before considering any of the 35 general rules in the UK GDPR. 28 36 }}} 29 37 30 38 31 39 {{{ 32 It is important to note that cookies may not always be classed as personal data. However, PECR applies whether or not the storage of or access to information on user devices involves processing personal data. 40 It is important to note that cookies may not always be classed as personal data. 41 However, PECR applies whether or not the storage of or access to information 42 on user devices involves processing personal data. 33 43 }}} 34 44