The law itself has been poorly written, overly complicated and doesn’t seem to have any solid reason or foundation for its existence.
Recently, articles have started to appear with guidance on what you should be doing in preparation. On the whole this has involved audits of what you’re using cookies for, writing them up in plain English for people to understand and updating your terms and privacy policies with the relevant information.
Why should we?
The idea of every site now having to provide some form of opt-in mechanism to work is lunacy. There are exceptions to the rule mainly sites using cookies for transactional purposes but it has yet to be clarified whether this will include tracking cookies.
There is a far simpler solution and in part it already exists.
There are billions of web pages and only a small number of browsers. To expect millions of people to fall in line with a law when it can be globally resolved by asking the assistance of the browser vendors would seem a logical solution.
The other glaring question is how to ask an international community to comply with a regionalised law. Virgin have started to do this with their blog, which is in its own right an eye soor.
I cannot see that little blog based out in Australia updating to meet these rules. What happens then? Will we have an EU firewall, shutting off sites that don’t comply?