Is Anybody Compliant With the EU Cookie Law Yet?

The pending deadline date for compliance with the now infamous EU Cookie Law has left many website owners in a state of confusion. Serious lack of official direction and implementation advice has already, even at this early stage, created a myriad of bewildered site owners wondering what to do and how do it. For all the fever surrounding the topic most of the questions people are asking are basically: - What is the EU Cookie Law - Do I need to comply? - How do I comply? - Who has complied so far? - How is the EU going to locate compliant and non-compliant sites? - What is actually going to happen if I don't comply? Much has been said already about the first 3 of these questions and there is plenty available online to digest. Our concern in this article is to consider the last 3 questions. So, who has complied so far? This is one of the most asked questions at this point, and is naturally being asked more and more as the official deadline approaches. There are two main reasons people are concerned with this. The first is because with the lack of official clarity about how to comply people are looking to other sites (preferably large high-profile ones) to show how they are complying and then copy that same process on their own site. After all, very few sites are armed with lawyers and deep programming resources so they will look toward the leaders and early implementers to show then the way to satisfactory compliance standards. The second reason people want to know who has complied is because many experts have speculated in other articles that the EU is [link]most likely to go after higher profile sites after the deadline. Therefore there is an unspoken expectation that larger traffic sites are going to implement compliance sooner rather than later because they are most immediate risk, and that until they do the medium and smaller sites probably have less to worry about. Whilst this is not necessarily true it is the case that often lawmakers will go after larger corporations at first to make an example and encourage others to fall in line quickly for fear of suffering the same fate. Given these facts one would probably expect that the top tier sites in the various EU countries are already well on their way to compliance by now. One would expect... Interested in discovering this we collected a cookie list of the top 25 UK sites and checked out what they were doing with cookies in the browser. Here is the compliance list: google.co.uk bbc.co.uk ebay.co.uk amazon.co.uk dailymail.co.uk guardian.co.uk telegraph.co.uk thesun.co.uk hsbc.co.uk rightmove.co.uk barclays.co.uk argos.co.uk independent.co.uk national-lottery.co.uk barefruit.co.uk lloydstsb.co.uk tripadvisor.co.uk autotrader.co.uk digitalspy.co.uk groupon.co.uk santander.co.uk orange.co.uk mirror.co.uk theregister.co.uk next.co.uk As it turns out not a single one of them is EU Compliant! Why not? Well, they all created permanent cookies, some of them third party cookies, and did not ask for consent. Even worse we only checked th e homepages! Now, This doesn't mean that these large site will not comply before the approaching deadline, but it does paint a fairly grim picture of the current state of things. If the top 25 sites are not yet there, what about the top 50, or 100, or 1000? After gathering more data it turns out that not a single site in the top 150 is compliant. In the end out of the total 17,904 audited UK sites in our research so far only 53 are compliant. That is a very low and pathetic statistic: 0.3%! What does all this mean? Well, first it means that if you are not compliant yet then it would seem you are in good company. If the previously stated premise that the lawmakers will go after larger sites before smaller ones is true then there is clearly going to be some time until they work their way down the list. On the down side, there is no large commercial site to look toward for answers about how to implement and get compliant. The facts are not very comforting for anybody trying to make sense out of the cookie law. All they do is highlight the current confusion and leave us with more new questions than answers. The most interesting thing we have to ask is whether these larger sites are going actually implement compliance at all? Are they all waiting for somebody else to make a move, or are they just going to play a waiting game with legislators? This brings us to our other earlier question: what are the law makers going to do when the deadline passes if 99% of the top 1000 EU sites have all not bothered to comply with their law? Whatever the answer to these questions one thing is for sure: the future days are going to be interesting to watch how the law is (or is not) implemented, and what the EU is going to do about it for those who do not comply.