Fact sheets
Data Protection
GDPR
Privacy
Cookie Exceptions under PECR and the DUAA
Updated 14 January 2026
Free Fact Sheet: Cookie Exceptions under PECR and the Data (Use and Access) Act 2025
Download this fact sheet to understand how the Data (Use and Access) Act (DUAA) has updated the occasions when you can drop cookies without first obtaining consent from website visitors. We also cover the examples the DUAA has given for what could count as “strictly necessary” cookies.
Published: January 2026
