EU Cookie Law compliance - 26th May 2012 deadline

I have to say, I am CONFUSED. The original Data Protection directive of 2002, included a cookie clause. Really, it did, you can read it here. It states:

users must give their consent for information to be stored on their terminal equipment, or that access to such information may be obtained. In order to do this, users must receive clear and comprehensive information about the purpose of the storage or access. These provisions protect the private life of users from malicious software, such as viruses or spyware, but also apply to cookies.

So, why is there the need for a Cookie specific directive?

The 2002 directive caused us marketeers a fair amount of headaches, although to be fair, (in the end) our friends in the EU saw some sense. After all, they weren't trying to stop organisations within a B-to-B environment promoting their business to relevant new prospects. For example: it's perfectly reasonable to assume a Finance Director may be interested in your XBRL filing product/service, however, you could not demonstrate an implied interest from said Finance Director in a gas barbecue (poor example but you get the point).

However, technology has moved on a lot since '02, so my guess is that there are some nefarious activities the EU feel need to be stopped - well, stopped as effectively as the '02 directive stopped spam....

The fall out from the 2002 ecommunication directive

The original 2002 ecommunication directive saw organisations spend THOUSANDS attending courses, purchasing software and struggling to cope with the fact they had apparently LOST the ability to keep in contact with their customers and prospects via the very cheap, reactive, measurable and effective email channel.

At one such event I attended, a marketing director had opted out EVERY contact their organisation had as he thought they needed to gain permission to contact them - this organisation had around 20,000 customers! You can imagine how shocked he was to discover that they were in fact allowed to continue emailing these contacts, as long as they hadn't opted out previously. Alas, as the contacts had been unsubscribed, there was no way to seperate out the people who had ACTUALLY unsubscribed from receiving emails from the people the organisation had forced email unsubcription upon... So they had essentially lost the ability to contact their customers by email. That's what happens when you adopt a "knee jerk" approach to your communications strategy.

Where do we stand with this new "Law"?

The ICO is telling us we should technically be seeking consent to store web analytics cookies. However, it’s also saying they don’t consider such cookies (and this includes the NUMBER ONE FREE analytics tool, Google Analytics) to be high risk for users and are therefore not prioritising breaches relating to analytics cookies.

Our advice:

STAY CALM. Don't spend lots of money on expensive consulting advice or software. Don't jump in with both feet and remove your cookies (analytics tools in particular are important sales and marketing tools so lets not throw them away unless we have to!). Do keep an eye on sites like tecmark.

0 comments:

 
Design by Wordpress Theme | Bloggerized by Free Blogger Templates | free samples without surveys