Is cookie consent required in the UK?

Yes, cookie consent is required in the UK for cookies and similar storage or access technologies unless a PECR exemption applies.

Current UK rules include exemptions for technologies used solely to transmit communications, provide strictly necessary services, collect certain statistical information, adapt a service’s appearance or functionality to user preferences, and support specified emergency-location functions. The exemptions only apply where their specific conditions are met.

Advertising, behavioural tracking, and other non-exempt technologies generally still require prior consent. Where PECR requires consent, it must meet the applicable UK GDPR consent standard.

The ICO finalised its current storage and access technologies guidance on April 29, 2026.

ICO guidance on storage and access technologies