The valid Cookie Consent must satisfy the following criteria and must be:
Informed. Users must be informed clearly about the types of cookies used, their purposes, the duration of
cookie
storage, and any third-party involvement.
Freely given. Users should have a real and free choice for accepting or rejecting cookies, without facing
any
negative consequences if they refuse cookies. Websites should not use techniques like dark patterns or cookie
walls
to pressure users into accepting cookies.
Specific. Consent must be specific to the purpose for which cookies are used. If there are multiple
purposes,
each
of them should have separate consent requests. For example, separate consent is needed for analytics cookies,
advertising cookies, functional cookies, etc.
Granular. Users should have the ability to consent or refuse cookies on a granular level. They should be
able to
accept some types of cookies while rejecting others.
Easy to withdraw. Users must be able to withdraw their consent as easily as they gave it. Websites should
provide
clear instructions on how to do this.
Prior Cookie Consent. Websites should ask for the user’s consent and get consent prior to placing any
cookies on
a
device. It’s not allowed to set cookies without getting their permission first.