What Are Website Cookies and Why Do They Matter in UK Law?
What Are Website Cookies and Why Do They Matter in UK Law?
You’ve probably seen a pop-up on a website asking you to accept cookies — but what exactly are cookies, and why do websites need them?
More importantly, why does the law in the UK require websites to display cookie banners and collect user consent?
Let’s break it down.
What Are Cookies?
Cookies are small text files stored on a visitor’s device when they browse a website. They’re used for a variety of purposes, such as:
- Remembering login details
- Tracking how visitors use the site
- Storing preferences like language or location
- Powering marketing tools like Facebook Pixel and Google Analytics
Some cookies are essential for the site to function. Others are non-essential and used for tracking or advertising.

What Does UK Law Say About Cookies?
In the UK, cookies are regulated under two key pieces of legislation:
- The UK General Data Protection Regulation (UK GDPR)
- The Privacy and Electronic Communications Regulations (PECR)
Together, these laws require websites to:
- Show a clear cookie banner when a user lands on the site
- Give users the option to accept, reject, or manage their cookie preferences
- Prevent non-essential cookies from loading until the user gives consent
- Provide a detailed cookie policy explaining what cookies are used and why
In short, if your website uses any form of tracking or analytics cookies,
you must ask permission first.
Why Is This Important?
Cookies involve the collection of personal data — including IP addresses and online behaviours. The law exists to give users control over their privacy and how their data is used.
Failure to comply doesn’t just risk a fine from the Information Commissioner’s Office (ICO). It can also damage your brand’s reputation and erode trust with your audience.
Final Thoughts
Cookies help websites run better and provide useful insights — but they also carry responsibilities. Staying compliant is essential to protect your visitors’ privacy and your business.
If you're unsure whether your website is compliant, it’s worth getting it reviewed. A few small changes can go a long way in making sure your site meets UK legal standards.