Wave goodbye to annoying cookie banners (soon)

On 19 June 2025, the Data (Use and Access) Bill was given Royal Assent and became the Data (Use and Access) Act 2025 (the Data Act). The Data Act aims to modernise UK data protection law, balancing innovation with privacy safeguards.

Whilst it does not completely overhaul the current UK data protection framework, it introduces several significant changes that organisations will need to be aware of.

One of these provisions is in the use of cookies, and the placing of them on a user's computing device ("terminal equipment"). As outlined by the Information Commission, the DUAA relaxes the requirement for stringent acceptance policies, i.e. the user no longer has to give explicit consent for cookies to be placed on their device for most normal, day-to-day uses (including most tracking purposes).

We have updated the Application Cookies page on our website to reflect the upcoming changes. Essentially, however, this situation returns us to the period between 2013 - 2016, when users were assumed to have accepted cookies if they continued to browse the website, i.e. they did not have to give explicit permission. As such, VerseOne DXP already has a control for that and we have updated the Cookie Acceptance Features section on the website with the relevant instructions.

Please note, however, that the new cookie legislation part of the DUAA has not yet come into force: we are still awaiting a Commencement Order, which is estimated to pass into legislation at some point over Winter 2025/26. We shall aim to post a further update when this occurs.