Out-Law News | 08 Mar 2011 | 2:38 pm | 2 min. read
The Government has also insisted that the EU Directive will become UK law by the May deadline, despite a warning from the Information Commissioner that it was unlikely to take effect until autumn.
It has been unclear whether the Government would force companies to ask users outright for their permission or whether the fact that a browser is set to accept cookies can be taken as consent.
A spokesman for the Department of Culture, Media and Sport (DCMS) told OUT-LAW.COM that it was working on a browser-based solution.
"We are working with browser manufacturers to find a way to enhance browser settings so that they can obtain the necessary consent to meet the Directive's standards," said the spokesman.
The Government has also said that it will meet a 25 May deadline set by the European Union for the implementation of the EU law, after Information Commissioner Christopher Graham highlighted confusion about its implementation.
Graham told this morning's Today programme on Radio 4 that because the UK Government has not published the regulations which would transpose the measures into law it is unlikely that any change in the law would take effect before autumn, months after the EU-set deadline.
"We wait to see how this is going to be transformed into UK law. What concerns me is that in less than 12 weeks time this Directive becomes European law," he said. "I don't speak for the Government but they'd be in trouble with the European Commission if they didn't transpose this Directive into UK law in pretty short order."
"They've been consulting about it and I think the regulations will appear quite quickly but then we do need a reasonable time for everyone to adapt so typically you need about three months to get ready, so I would expect by the autumn we will see the whole thing up and running," said Graham.
The DCMS spokesman said that the regulations would be in place by 25 May but that the technical solutions it was working with browser makers on would not be ready by that time.
It said that the Government would be advising the Information Commissioner's Office (ICO) not to take enforcement action against any company that was not in compliance with the law because of the delay to what the spokesman called the "technical solutions". As long as organisations were working towards compliance they should not be punished, he said.
Debate has raged about whether sites will have to ask new users for that consent outright or whether web browser settings that permit cookies can be taken to mean that consent has been given.
The UK Government has previously said that it will simply copy the exact lettering of the EU Directive, adding no clarification or interpretation of its own when it creates regulations to turn the Directive into UK law.
Pinsent Masons and AmberhawkTraining will be running a data protection law update session on 11 April. Details and booking information (4-page / 164KB PDF)