: Is a cookie prompt needed for European company websites used only internally? I am developing a web application that is only being used internally in a company (inside EU), and it is only for

@Holmes151

This guidance (Guidance on the rules on use of cookies and similar technologies) from ICO(UK's independent body set up to uphold information rights) has a part related to the intranet:


How do these rules apply to intranets?
In our view the rules do not apply in the same way to intranets. The Regulations
require that consent is obtained from the user or subscriber. A ‘user’ is defined
as any individual using a public electronic communications service. An intranet is
unlikely to be a public electronic communications service. Although the Regulations would not therefore apply in the same way to cookies that are set
on an intranet it is important to remember that the requirements of the DPA are
likely to apply if your use of cookies is for the purposes of monitoring
performance at work, for example. Wherever an organisation collects personally
identifiable information using cookies then the normal fairness requirements of
the DPA will apply.

Vote Up Vote Down