How often should I update my consent settings?

There is no universal expiry period for cookie consent. Users should be able to change their preferences at any time, and fresh consent may be required when the purposes, technologies, vendors, or data uses covered by the original choice materially change.

In the UK, neither PECR nor the UK GDPR sets a fixed consent period for storage and access technologies. The ICO gives six months as a general guideline for requesting fresh consent, while noting that a shorter period may be appropriate when the underlying processing changes.

A consent management system should keep track of the user’s choice and the configuration that applied when consent was given. This helps determine whether the existing choice remains valid or a new consent request is needed.