The ICO has signalled active enforcement on cookie compliance across major UK sites and clarified when storage and access technologies require consent, including for consent or pay models. The Data Use and Access Act 2025 adjusts UK cookie rules by allowing some cookies for statistical or site improvement purposes without consent. The CJEU decision in Planet49 confirmed that consent cannot be implied through pre-ticked boxes, reinforcing the requirement for explicit user choice.