Do you need a cookie consent banner?
Privacy and Electronic Communications Regulations 2003 (PECR)
When this applies
Websites using analytics, advertising, or any non-essential cookies likely need a compliant consent mechanism. The ICO has updated its storage and access technologies guidance, implied consent is not sufficient.
When it does not apply
Cookie consent rules apply to websites and apps. Not applicable if you have no website.
What is at stake
Fines up to £17.5M or 4% of global turnover (raised from £500K in 2024)
What to do
Implement a cookie consent banner that blocks non-essential cookies until the user accepts. Strictly necessary cookies (e.g. login sessions) do not require consent.
Check all 27 regulations for your business
This is one of 27 checks getsorted runs. Answer around 12 questions and see your full compliance picture in three minutes. Free, no account.
Check your business →Reviewed: 2026-06-25 · Source: official guidance