Online tracking
-
The Data (Use and Access) Act 2026 got Royal Assent on 19 June 2026. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.
The guidance and resources on this page are suitable for businesses who want to track users and their activities online.
Detailed guidance
Consent or pay
Guidance to provide clarity and advice for any organisation currently operating, or considering, a “consent or pay” model in the UK.
Storage and access technologies
How the Privacy and Electronic Communications Regulations 2003 (as amended) (PECR) and where relevant, data protection law apply when you use technologies that store information, or access information stored, on someone’s device (eg a computer or mobile phone).
We have updated this draft guidance to reflect changes to PECR following the Data (Use and Access) Act.
Guidance for consumer Internet of Things products and services
This guidance explains how data protection law and the Privacy and Electronic Communications Regulations 2003 (as amended) (PECR) apply when you process personal information in consumer Internet of Things (IoT) products.
Resources
Taking control: our online tracking strategy
This strategy sets out how we will promote compliance with the law in 2025 to obtain a fairer online tracking ecosystem for people and business.
Review of regulation 6 PECR requirements for online advertising