New UK Cookie Law Changes in 2026: What Small Businesses Need to Know
Cookie compliance is not optional in the UK. The Privacy and Electronic Communications Regulations (PECR) require every website that uses cookies to get informed consent from visitors before setting non-essential cookies.
In 2026, the ICO has signalled increased enforcement against small businesses, not just the large corporations. If your website sets analytics cookies, marketing pixels, or chatbot cookies without a consent banner, you are at risk.
What counts as a cookie?
Most business owners think of cookies as the things that track you across the internet. But cookies also include session identifiers, analytics trackers (including Google Analytics), chat widget storage, and even some caching mechanisms.
What the law requires
You must tell visitors what cookies you use, explain why, and get consent before setting non-essential cookies. The consent must be freely given, which means pre-ticked boxes are not valid consent. You also need a clear way for visitors to withdraw consent.
How to check your compliance
LaunchKitty scans your website for cookie consent banners by checking for 11 different consent management signatures including CookieBot, OneTrust, Quantcast, and custom implementations. We flag it immediately if no consent mechanism is found.
Our UK compliance guide covers everything you need to know about PECR, UK GDPR, and the ICO guidance for small businesses.