French regulator CNIL has issued its promised guidance on the use of web cookies.

Among the key takeaways:

  • you need to list all third parties involved in data collection
  • consent must be real
  • simply using a website is not sufficient consent and neither, as this point, are browser settings.

Also, if you meet a list of conditions, you may fall under an exemption from the need for consent for certain analytics cookies.

Read the full guidance.