ICO: Companies have 12 months to adhere to new cookie laws

The Information Commissioner's Office (ICO) has informed online companies that they have 12 months to get their websites ready for new laws that will begin implementation on Thursday.

The revised Privacy and Electronic Communications Regulations, which come into force in the UK on 26 May, stipulate that websites need consent from visitors if cookies are stored on the users' computers.

A spokesperson for the ICO has confirmed that they will not be taking action against companies over the next year, as long as they can prove that they are working towards compliance with the new legislation.

However, after the 12-month period is up, the worst breaches could be met with a fine of up to £500,000.

"I have said all along that the new EU rules on cookies are challenging," said Information Commissioner Christopher Graham.

He also explained the ICO's stance. "Browser settings giving individuals more control over cookies will be an important contributor to a solution. But the necessary changes to the technology aren't there yet," he said.

"So we're giving businesses and organisations up to one year to get their house in order. This does not let everyone off the hook. Those who choose to do nothing will have their lack of action taken into account when we begin formal enforcement of the rules."