French regulator CNIL has issued its promised guidance on the use of web cookies.
Among the key takeaways:
- you need to list all third parties involved in data collection
- consent must be real
- simply using a website is not sufficient consent and neither, as this point, are browser settings.
Also, if you meet a list of conditions, you may fall under an exemption from the need for consent for certain analytics cookies.