Thanks. After reading the ICO's guidance, so it seems. I was, in fact entirely wrong. As someone elsethread pointed out, if this is taken seriously, people wil

Thanks. After reading the ICO's guidance, so it seems. I was, in fact entirely wrong. As someone elsethread pointed out, if this is taken seriously, people will just start browser fingerprinting. That at least means that the information is stored server-side rather than client-side, which the new directive seems particularly concerned about.