Yes, websites must get user consent before serving cookies especially if you’re subject to data privacy laws like the EU General Data Protection Regulation (GDPR), the EU Cookie Law, or UK GDPR.
This is because cookies are considered personal data under these laws.
Some laws, like the California Consumer Privacy Act (CCPA), do not require consent for cookie use, but have other requirements, like the ability to opt out of the sale or sharing of their data, and opt out of targeted advertising.
Protect your business by implementing a cookie consent solution that can gather cookie consent from your website visitors.
Trusted by thousands of companies worldwide, Termly’s intuitive software generates legal policies and handles consent management for any business in minutes.