SlideShare a Scribd company logo
1 of 21
Cookie Law




    CC-BY-SA-2.0 by Luis Ferro, 2012
Bake a nice Cookie!




Guide to make impeccable cookies
Who am I?
I'm a PHP Developer
And... IANAL!
Data Protection
European Directive of 1995
Data Protection Act of 1998
Update of DPA of 2003

http://en.wikipedia.org/wiki/Data_Protection_Act_1998
Regulation of Data Protection
Information Commissioner's Office
http://www.ico.gov.uk



Data Controlers
http://www.ico.gov.uk/ESDWebPages/search.asp
Origins
The Privacy and Electronic Communications
 Regulations 2003
Directive 2009/136/EC (specially the Article 5(3)
 of the E-Privacy Directive)
All EC States had until 25 May 2011 to transpose
  it.
UK transposes it in 25 May 2011
The Cookie (monster) Law
Why I should care?

That is a simple question. And has a simple
 answer:




  Penalties – can go up to £ 500.000
The Law Resumed
Applies to anything that runs on a user device
Applies to any action of storing and/or retrieving
 information
Requires informed consent
The ICO Recomendations
Implied consent (ic)
Very well Informed (specially if using ic)
Simple and direct “Cookie Policies”
Explicit consent (on certain cases)
Steps to compliance
Audit
Inform
Roadmap / Plan
Adapt (implied / explicit consent)
Techniques for compliance
Browser DoNotTrack
Geo location (ex. GeoIP)
Pop-ups
Layers
Plug-ins etc.. (WordPress, Joomla, Drupal, etc..)
Examples
Examples
Examples
Examples
Examples
Examples
Debate
Open debate of Cookie Law
Images - attributions
Cook – flickr, skampy, 2510844252, license CC-
 BY-SA-2.0, 20120521
CookieMonster – flicker, Newbirth35,license CC
 BY-NC 2.0, 20120607
References
Cookies

http://www.allaboutcookies.org/manage-cookies/index.html

http://en.wikipedia.org/wiki/HTTP_cookie

History

http://en.wikipedia.org/wiki/Phorm

http://www.zdnet.co.uk/news/security-threats/2009/02/12/ec-warns-govt-over-phorm-foot-dragging-39615480/

http://news.bbc.co.uk/1/hi/technology/7339263.stm

The Laws / Guides / etc..

http://www.ico.gov.uk/for_organisations/privacy_and_electronic_communications/the_guide/cookies.aspx

http://www.ico.gov.uk/what_we_cover/legislation.aspx

http://www.aboutcookies.org/Default.aspx?page=3

http://www.out-law.com/page-5486

www.ffw.com/pdf/cookie-consent-tracking-table.pdf

http://blogs.webtrends.com/2012/05/cookie-law-myth-busting/

http://ie.microsoft.com/testdrive/browser/donottrack/default.html

More Related Content

Viewers also liked

ολη η θεωρια των εξετασεων στην εκθεση
ολη η θεωρια των εξετασεων στην εκθεσηολη η θεωρια των εξετασεων στην εκθεση
ολη η θεωρια των εξετασεων στην εκθεσηarsinaki
 
What can YOU do to make a difference?
What can YOU do to make a difference?What can YOU do to make a difference?
What can YOU do to make a difference?scastro212
 
PCA13 Product Camp - Product Council
PCA13 Product Camp - Product CouncilPCA13 Product Camp - Product Council
PCA13 Product Camp - Product CouncilLance Ellisor
 
PHP London Dec 2013 - Varnish - The 9 circles of hell
PHP London Dec 2013 - Varnish - The 9 circles of hellPHP London Dec 2013 - Varnish - The 9 circles of hell
PHP London Dec 2013 - Varnish - The 9 circles of hellluis-ferro
 
Evaluación del desempeño 2016 2017
Evaluación del desempeño 2016 2017Evaluación del desempeño 2016 2017
Evaluación del desempeño 2016 2017Ivan Michel
 

Viewers also liked (9)

beijoca martins
beijoca martinsbeijoca martins
beijoca martins
 
ολη η θεωρια των εξετασεων στην εκθεση
ολη η θεωρια των εξετασεων στην εκθεσηολη η θεωρια των εξετασεων στην εκθεση
ολη η θεωρια των εξετασεων στην εκθεση
 
Slide test 6 14
Slide test 6 14Slide test 6 14
Slide test 6 14
 
What can YOU do to make a difference?
What can YOU do to make a difference?What can YOU do to make a difference?
What can YOU do to make a difference?
 
Pnewsletter9
Pnewsletter9Pnewsletter9
Pnewsletter9
 
PCA13 Product Camp - Product Council
PCA13 Product Camp - Product CouncilPCA13 Product Camp - Product Council
PCA13 Product Camp - Product Council
 
Coating Slip layer for Steel pipe piles to reduce Negative skin friction (2)
Coating Slip layer for Steel pipe piles to reduce Negative skin friction (2)Coating Slip layer for Steel pipe piles to reduce Negative skin friction (2)
Coating Slip layer for Steel pipe piles to reduce Negative skin friction (2)
 
PHP London Dec 2013 - Varnish - The 9 circles of hell
PHP London Dec 2013 - Varnish - The 9 circles of hellPHP London Dec 2013 - Varnish - The 9 circles of hell
PHP London Dec 2013 - Varnish - The 9 circles of hell
 
Evaluación del desempeño 2016 2017
Evaluación del desempeño 2016 2017Evaluación del desempeño 2016 2017
Evaluación del desempeño 2016 2017
 

Similar to EU Cookie Directive

Bootlaw Cookies
Bootlaw CookiesBootlaw Cookies
Bootlaw Cookiesdbaillieu
 
2012-Oct: Effect of EU cookie law on US organisations
2012-Oct: Effect of EU cookie law on US organisations2012-Oct: Effect of EU cookie law on US organisations
2012-Oct: Effect of EU cookie law on US organisationsPhil Pearce
 
Cookie Law – How to meet the deadline for compliance: The Legal Context
Cookie Law – How to meet the deadline for compliance:  The Legal ContextCookie Law – How to meet the deadline for compliance:  The Legal Context
Cookie Law – How to meet the deadline for compliance: The Legal ContextCIVIC Digital
 
Eprivacy issues and standards -- where do we stand?
Eprivacy issues and standards -- where do we stand?Eprivacy issues and standards -- where do we stand?
Eprivacy issues and standards -- where do we stand?Anna Long
 
Cookie Law (Dwf 190511)
Cookie Law (Dwf 190511)Cookie Law (Dwf 190511)
Cookie Law (Dwf 190511)RobertMachin
 
Agenda 21 eu cookie seminar - david naylor - field fisher waterhouse
Agenda 21   eu cookie seminar - david naylor - field fisher waterhouseAgenda 21   eu cookie seminar - david naylor - field fisher waterhouse
Agenda 21 eu cookie seminar - david naylor - field fisher waterhouseagenda21
 
The E-Privacy Directive and Performance Marketing
The E-Privacy Directive and Performance MarketingThe E-Privacy Directive and Performance Marketing
The E-Privacy Directive and Performance MarketingAndrew Tibber
 
E-privacy Directive and Performance Marketing - Andrew Tibber
E-privacy Directive and Performance Marketing - Andrew TibberE-privacy Directive and Performance Marketing - Andrew Tibber
E-privacy Directive and Performance Marketing - Andrew Tibberauexpo Conference
 
EU cookie law - solutions
EU cookie law - solutionsEU cookie law - solutions
EU cookie law - solutionssamie19
 
Cookie Conundrum? Article 5(3) of the EU ePrivacy Directive
Cookie Conundrum? Article 5(3) of the EU ePrivacy DirectiveCookie Conundrum? Article 5(3) of the EU ePrivacy Directive
Cookie Conundrum? Article 5(3) of the EU ePrivacy DirectiveCarl-Christian Buhr
 
What Is Evercookie and Why You Should Avoid It for Privacy’s Sake
What Is Evercookie and Why You Should Avoid It for Privacy’s SakeWhat Is Evercookie and Why You Should Avoid It for Privacy’s Sake
What Is Evercookie and Why You Should Avoid It for Privacy’s SakePiwik PRO
 
EU Cookie Directive Report On Compliance In The UK And Ireland
EU Cookie Directive Report On Compliance In The UK And IrelandEU Cookie Directive Report On Compliance In The UK And Ireland
EU Cookie Directive Report On Compliance In The UK And IrelandKrishna De
 
The EU ePrivacy Directive - Navigating the UK Cookie Law
The EU ePrivacy Directive - Navigating the UK Cookie LawThe EU ePrivacy Directive - Navigating the UK Cookie Law
The EU ePrivacy Directive - Navigating the UK Cookie LawSilverpop
 
CEE CMS Data Protection webinar series - Part 2
CEE CMS Data Protection webinar series - Part 2CEE CMS Data Protection webinar series - Part 2
CEE CMS Data Protection webinar series - Part 2CMSLondon
 
eBusiness Club "Demystifying the EU Cookie Law presentation, Geldards
eBusiness Club  "Demystifying the EU Cookie Law presentation, GeldardseBusiness Club  "Demystifying the EU Cookie Law presentation, Geldards
eBusiness Club "Demystifying the EU Cookie Law presentation, GeldardsJon Egley
 
Nick Stringer, IAB UK - Preparing for the revised ePrivacy directive
Nick Stringer, IAB UK - Preparing for the revised ePrivacy directiveNick Stringer, IAB UK - Preparing for the revised ePrivacy directive
Nick Stringer, IAB UK - Preparing for the revised ePrivacy directiveTagMan
 
Social Media and Legal Ethics
Social Media and Legal EthicsSocial Media and Legal Ethics
Social Media and Legal Ethicsanthonywong
 
Definition of a Cookies Policy
Definition of a Cookies PolicyDefinition of a Cookies Policy
Definition of a Cookies Policytermsfeed
 

Similar to EU Cookie Directive (20)

Bootlaw Cookies
Bootlaw CookiesBootlaw Cookies
Bootlaw Cookies
 
120119 ukgc12-cookies
120119 ukgc12-cookies120119 ukgc12-cookies
120119 ukgc12-cookies
 
2012-Oct: Effect of EU cookie law on US organisations
2012-Oct: Effect of EU cookie law on US organisations2012-Oct: Effect of EU cookie law on US organisations
2012-Oct: Effect of EU cookie law on US organisations
 
Cookie Law – How to meet the deadline for compliance: The Legal Context
Cookie Law – How to meet the deadline for compliance:  The Legal ContextCookie Law – How to meet the deadline for compliance:  The Legal Context
Cookie Law – How to meet the deadline for compliance: The Legal Context
 
Eprivacy issues and standards -- where do we stand?
Eprivacy issues and standards -- where do we stand?Eprivacy issues and standards -- where do we stand?
Eprivacy issues and standards -- where do we stand?
 
Cookie Law (Dwf 190511)
Cookie Law (Dwf 190511)Cookie Law (Dwf 190511)
Cookie Law (Dwf 190511)
 
Agenda 21 eu cookie seminar - david naylor - field fisher waterhouse
Agenda 21   eu cookie seminar - david naylor - field fisher waterhouseAgenda 21   eu cookie seminar - david naylor - field fisher waterhouse
Agenda 21 eu cookie seminar - david naylor - field fisher waterhouse
 
The E-Privacy Directive and Performance Marketing
The E-Privacy Directive and Performance MarketingThe E-Privacy Directive and Performance Marketing
The E-Privacy Directive and Performance Marketing
 
E-privacy Directive and Performance Marketing - Andrew Tibber
E-privacy Directive and Performance Marketing - Andrew TibberE-privacy Directive and Performance Marketing - Andrew Tibber
E-privacy Directive and Performance Marketing - Andrew Tibber
 
EU cookie law - solutions
EU cookie law - solutionsEU cookie law - solutions
EU cookie law - solutions
 
Cookie Conundrum? Article 5(3) of the EU ePrivacy Directive
Cookie Conundrum? Article 5(3) of the EU ePrivacy DirectiveCookie Conundrum? Article 5(3) of the EU ePrivacy Directive
Cookie Conundrum? Article 5(3) of the EU ePrivacy Directive
 
What Is Evercookie and Why You Should Avoid It for Privacy’s Sake
What Is Evercookie and Why You Should Avoid It for Privacy’s SakeWhat Is Evercookie and Why You Should Avoid It for Privacy’s Sake
What Is Evercookie and Why You Should Avoid It for Privacy’s Sake
 
EU Cookie Directive Report On Compliance In The UK And Ireland
EU Cookie Directive Report On Compliance In The UK And IrelandEU Cookie Directive Report On Compliance In The UK And Ireland
EU Cookie Directive Report On Compliance In The UK And Ireland
 
The EU ePrivacy Directive - Navigating the UK Cookie Law
The EU ePrivacy Directive - Navigating the UK Cookie LawThe EU ePrivacy Directive - Navigating the UK Cookie Law
The EU ePrivacy Directive - Navigating the UK Cookie Law
 
CEE CMS Data Protection webinar series - Part 2
CEE CMS Data Protection webinar series - Part 2CEE CMS Data Protection webinar series - Part 2
CEE CMS Data Protection webinar series - Part 2
 
eBusiness Club "Demystifying the EU Cookie Law presentation, Geldards
eBusiness Club  "Demystifying the EU Cookie Law presentation, GeldardseBusiness Club  "Demystifying the EU Cookie Law presentation, Geldards
eBusiness Club "Demystifying the EU Cookie Law presentation, Geldards
 
Nick Stringer, IAB UK - Preparing for the revised ePrivacy directive
Nick Stringer, IAB UK - Preparing for the revised ePrivacy directiveNick Stringer, IAB UK - Preparing for the revised ePrivacy directive
Nick Stringer, IAB UK - Preparing for the revised ePrivacy directive
 
Social Media and Legal Ethics
Social Media and Legal EthicsSocial Media and Legal Ethics
Social Media and Legal Ethics
 
Definition of a Cookies Policy
Definition of a Cookies PolicyDefinition of a Cookies Policy
Definition of a Cookies Policy
 
Cookies and European Union Law
Cookies and European Union LawCookies and European Union Law
Cookies and European Union Law
 

Recently uploaded

MS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectorsMS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectorsNanddeep Nachan
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...DianaGray10
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...apidays
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusZilliz
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays
 
Vector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxVector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxRemote DBA Services
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxRustici Software
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century educationjfdjdjcjdnsjd
 
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Jeffrey Haguewood
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businesspanagenda
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyKhushali Kathiriya
 
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Victor Rentea
 
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...apidays
 
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Orbitshub
 
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ..."I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...Zilliz
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesrafiqahmad00786416
 
CNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In PakistanCNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In Pakistandanishmna97
 

Recently uploaded (20)

MS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectorsMS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectors
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with Milvus
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
Vector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxVector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptx
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptx
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : Uncertainty
 
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...
 
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
 
Understanding the FAA Part 107 License ..
Understanding the FAA Part 107 License ..Understanding the FAA Part 107 License ..
Understanding the FAA Part 107 License ..
 
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ..."I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
CNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In PakistanCNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In Pakistan
 

EU Cookie Directive

Editor's Notes

  1. Those are tasty cookies but We are referring to Browser cookies, sort of... So what are they and why a Law about them?
  2. Regulation of the registration and processing of personal data Become UK Law in 1998
  3. (Implementing European Directive – 2002/58/EC) E-Privacy Directive mandates the requirement of requesting consent for storing and accessing data
  4. "The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011" is introduced in UK in 25 May 2011 and soon it was named "The Cookie (monster) Law"
  5. "Implied consent is a valid form of consent and can be used in the context of compliance with the revised rules on cookies." "If you are relying on implied consent you need to be satisfied that your users understand that their actions will result in cookies being set. Without this understanding you do not have their informed consent." "You should not rely on the fact that users might have read a privacy policy that is perhaps hard to find or difficult to understand." "In some circumstances, for example where you are collecting sensitive personal data such as health information, you might feel that explicit consent is more appropriate."