On July 10, 2021, the Italian data protection authority also known as the ‘Garante’ announced its finalized guidelines on cookies and other similar tracking technologies (the Guidelines). The finalized Guidelines come seven months after the Garante released its draft version for public consultation and has provided a six-month deadline for organizations to comply. Read this blog post to get up to speed on the guidelines.   

Overview of the guidelines

In light of the GDPR, the Guidelines aim to illustrate the legislation applicable to the storing of information, or the gaining of access to information already stored, in the terminal equipment of users, as well as to specify the lawful means to provide the cookie policy and collect online consent of data subjectsIn addition, due to recent technological developments and regulatory updates, the Guidelines note that the Garante’s previous guidance on Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies, while maintaining its relevance, needed to be integrated with specific reference 

Below are highlights from the finalized guidelines.  

  • Legitimate interest cannot be considered as a lawful ground to set cookies and other similar tracking technologies; 
  • Possibility to re-present cookie banner to users after six months from the initial presentation;  
  • Position an ‘X’ button within the banner by which users can continue navigating without consenting to the use of non-technical cookies; 
  • Authenticated users must be allowed to consent to the possibility of being tracked by cross-analysis of their behavior through the use of different devices; 
  • In case of changes to the third parties listthe website owner is responsible for the selection of the same third parties and for ensuring that the consequent processing remain in line with the category groups; 
  • New specifications for the accessibility of cookie information in relation to person with disabilities; 
  • Information on the criteria through which cookies are categorized semantically may be included in the privacy policy, alternatively to the dedicated cookie policy; 
  • Include a link in for the user to re-assess his/her cookie preferences in the website’s footer; 
  • On any domain, include a graphic sign, an icon, or a technical feature aimed to showcase the status of the user’s expressed consents, allowing potential amendments.

Next steps to comply with the Garante’s finalized guidelines on cookies

OneTrust empowers companies with the most powerful and flexible cookie consent solution to operationalize cookie compliance for the GDPR, LGPD, CCPA, the IAB TCF 2.0 framework, and hundreds of others. Used on over 350,000+ websites, OneTrust cookie consent enables companies to uncover hidden cookies and trackers on websites, configure branded banners using unique consent approaches based on location, and measure and optimize consent rates for maximum opt-ins. In addition to this OneTrust customers are able to:    

  • Audit websites understand first- and third-party cookies, privacy policies, cookie notices, tags, beacons, local storage objects, and other tracking technologies 
  • Configure your templates & geolocation and styling in the OneTrust platform 
  • Go to “Live Preview” and preview the testing version on your live production website 
  • Customize banners for websites using built-in consent approach options 
  • Share consent signals by syncing with Salesforce DMP, IAB TCF, Google DFP / AdSense / AdX, Google Tag Manager, Adobe DTM, and more. 
  • Centralize consent records across domains with support for cross-domain consent 
  • Drive opt-ins and engagement by tracking and analyzing consent rates with pre-built, real-time dashboards and reporting, A/B testing, and monitoring to maximize compliant opt-in rates 
  • Integrate with existing tech stack and protect investments with easy integration with Adobe Advertising Cloud, Facebook, FreeWheel, mParticle, Salesforce Audience Studio, and more 


Further Reading: 

Next Steps: 

Follow OneTrust on LinkedIn, Twitter, or YouTube for the latest on third-party cookies.