Are Cookies allowed under the DPDP Act?

What are Cookies?

Cookies are small pieces of data stored on a user’s device by websites to remember their preferences and actions. Third-party cookies collect data on user behavior to create detailed profiles for targeted marketing.

Why is consent needed for third-party cookies?

The DPDP Act raises significant questions about whether cookies will be classified as personal data. Since cookies store information that can be used to identify and track users, businesses must comply with consent requirements before collecting data through cookies.

How will businesses process cookie consent under DPDP Act?

All businesses that use cookies must provide a clear cookie notice, explaining types, purposes, and third parties involved. Users must have an explicit accept/reject option.

Companies should start preparing by understanding the provisions of the DPDP Act and implementing necessary privacy practices.