This browser is not actively supported anymore. For the best passle experience, we strongly recommend you upgrade your browser.

Our Take on Privacy & Cybersecurity

| 1 minute read

Creating a sustainable cookie program

Cookies are small pieces of data that websites and apps store on users' devices to remember their preferences, track their behavior, and deliver personalized content and advertising. However, cookies also raise privacy and data protection concerns, as they may collect and share personal information without users' knowledge or consent. Therefore, many privacy and data protection laws require companies to provide notice and choice to users about their cookie practices and obtain their consent before placing nonessential cookies on their devices. 

Recently, the International Association of Privacy Professionals (IAPP) provided a guide to creating a sustainable cookie program that complies with various legal obligations and builds trust with users. The guide covers the following topics:

  • Establishing your governance program
  • Systems and technology
  • Regular testing and audits
  • PIAs for new cookie use
  • Training
  • Privacy notice requirements

Creating and maintaining a sustainable cookie program is a complex and challenging task that benefits from a cross-functional team, a governance policy, a technical mechanism, regular testing and auditing, PIAs, training, and an appropriate privacy notice. By following the guide published by the IAPP, companies can improve their ability to comply with the various privacy and data protection laws, respect the users' choices, and build trust with their customers. 

The most common way companies manage this notice and choice obligation is with a cookie banner, but adding a cookie banner to your website isn't a quick trip to compliance.

Tags

cookies, dataprivacy, compliance