Thx

as with much EU rules the guidance is poor and there is confusion on exactly what cookie(s) need to be declared for compliance - most of the interpretations I have seen (e.g. http://www.ico.gov.uk/news/latest_new... ) state that authorization cookies (created at login) , analytics cookies (like google) and 1st & 3rd party advertising cookies are the 3 main categories where the user must be informed before setting the cookie.

However some reports also state that simply declaring their use on a page on your site such as terms/privacy is sufficent to meet compliance, whereas others state that the user must consent (i.e. by checking a box/clicking a button) e.g. http://www.ico.gov.uk/news/latest_new... .

Like much of the industry we're waiting on firm guidelines on the interpretation of the rules and will ensure we're in compliance - at present I believe that in the worst case you would have to add a required checkbox to the registration page to alert people to the use of auth cookies and add text to the login page to state that cookies are used - both of which can easily be done. However we will assess this when the EU clarifies the required implementation details.

I have a very easy to use module for this purpose. Click here to read more about it.