Privacy laws

What each privacy law asks of a website that uses cookies, and how Consentl helps you meet it.

• GDPR and ePrivacy (EU)

  What the GDPR and the ePrivacy Directive require from a website that uses cookies: prior consent, a real choice, easy withdrawal and proof, and how Consentl helps.

• UK GDPR and PECR

  How cookie consent works in the UK under PECR and the UK GDPR, what the ICO expects from a cookie banner, and what the Data (Use and Access) Act 2025 changes.

• CCPA, CPRA and US states

  What the CCPA, as amended by the CPRA, and other US state privacy laws require from websites with cookies: notice, an opt-out of sale and sharing, and GPC.

• LGPD (Brazil)

  What Brazil's LGPD and the ANPD's cookie guide expect from websites: a legal basis per cookie, consent for non-essential ones, clear information and rights.

• PIPEDA and Quebec Law 25

  How cookie consent works in Canada under PIPEDA and Quebec's Law 25, which requires tracking technology to be off by default, and how Consentl applies a Quebec rule.

This page is general information, not legal advice. Laws and guidance change; check the current rules for your situation.