The Working Paper indicates that necessary information includes:
identification of all of the types of cookies used; the purpose(s) of the cookies; if relevant, an indication of possible cookies from third parties; if relevant, third party access to data collected by the cookies; the data retention period (i.e. the cookie expiry date); and typical values and other technical information. Users must also be informed about the ways that they can accept all, some or no cookies and how to change their cookie settings in the future.
Timing: Consent must be obtained before data processing begins, i.e. on the entry page. The Working Party recommends that websites implement a consent solution in which no cookies are set to a user's device (other than those that fall under an exception and thus do not require the user's consent) until that user has...