Compliance

Drupal 6 tends to set an anonymous cookie by default. I recently did a quick check of UK sites and found many which are indeed setting cookies but don't have one of the available compliance modules installed. From my understanding of the law, the standard D6 anonymous cookie may be exempt if it could be proven that:

• it is required for proper use of the site (probably not the case) and

• isn't used in a way that would identify the user on returning to the site such that displayed contained would be customised for them in some way.

Discussion about The EU's Data Protection Directive and how to get drupal sites compliancy with this. Please provide your opinion on this matter.

Documentation

• http://ec.europa.eu/justice/data-protection/index_en.htm

Actors
There are 2 direct/main actors;

• visitors
• site owners

There are several indirect actors on this:

• Developers
• third parties (advertisers, google analytics)

Related modules

<

table>