What changed
The ICO finalised its storage and access technologies guidance on 29 April 2026. Limited statistical and appearance uses can qualify for an exception, with conditions including transparency and a simple free objection route.
Action for your organisation
Recheck every tag’s purpose and configuration before changing consent rules. Advertising, cross-site profiling and mixed-purpose tools cannot simply be labelled essential or statistical.
Audit the technology before the banner
Build an inventory of cookies, pixels, local storage and similar technologies. Record their purposes, providers, lifespan, recipients and whether they operate before the visitor makes a choice.
Review each exception on its conditions
A statistical or appearance purpose is not a general permission for all analytics. Check the actual configuration, transparency and objection route against the current guidance. Mixed purposes may prevent reliance on an exception.
Verify in the browser
Clear site data, inspect requests and storage, then test rejection, acceptance and changed preferences. Record screenshots or technical evidence internally. This site provides the audit workflow; it does not remotely scan third-party websites.
Put it into practice
Use the relevant topic guide to review the legal conditions, then capture the decision in the working registers. Assign an owner and review the implemented process, not just the wording of the policy.
Official sources
Original explanatory briefing prepared with AI-assisted source comparison. No independent human legal review or regulatory endorsement is claimed.