Context
The ICO has published its finalised guidance on storage and access technologies (SATs) alongside an update on its online tracking strategy. It covers how the Privacy and Electronic Communications Regulations (PECR) and, where relevant, the UK GDPR, apply to cookies, tracking pixels, device fingerprinting and similar technologies (‘storage and access technologies’).
Key points to note and next actions
- The guidance includes updates following two consultations and changes introduced by the Data (Use and Access) Act 2025.
- There are new examples and points of clarification to help organisations comply with the law. It reflects the law as it currently stands separately from the ICO’s ongoing work to review regulation 6 of PECR for online advertising purposes, on which further updates will follow in the coming weeks.