I agree UE has some funky laws, i do stuff for WHMCS too and the profoma stuff and some of the other requirements are just crazy. 

so for anylytics or functional coockies you dont need anything. 

http://www.rijksoverheid.nl/...egels-en-richtlijnen

Hi Dave, the splash screen is nto the best solution, not sure whether it can handle multilanguage cookies descripton.

Also I am not sure whether the splash screen does not hurt SEO. If google want to crawls the site it may not be possible  or am I wrong?

I checked again the EU cookie directive. In these cases the site owner does not need any vistor´s consent if

The ePrivacy directive – more specifically Article 5(3) – requires prior informed consent for storage ofor access to information stored on a user's terminal equipment. In other words, you must ask users if they agreeto most cookies and similar technologies (e.g. web beacons, Flash cookies, etc.) before the site starts to use them.

For consent to be valid, it must be informed, specific, freely givenand must constitute a real indication of the individual's wishes.

However, some cookies are exempt from this requirement. Consent is not required if the cookie is:

• used for the sole purpose of carrying out the transmission of a communication, and
• strictly necessary in order for the provider of an information society service explicitly required by the user to provide that service.

Cookies clearly exempt from consent according to the EU advisory body on data protection- WP29 include:

• user‑input cookies (session-id) such as first‑party cookies to keep track of the user's input when filling online forms, shopping carts, etc., for the duration of a session or persistent cookies limited to a few hours in some cases
• authentication cookies, to identify the user once he has logged in, for the duration of a session
• user‑centric security cookies, used to detect authentication abuses, for a limited persistent duration
• multimedia content player cookies, used to store technical data to play back video or audio content, for the duration of a session
• load‑balancing cookies, for the duration of session
• user‑interface customisation cookies such as language or font preferences, for the duration of a session (or slightly longer)
• third‑party social plug‑in content‑sharing cookies, for logged‑in members of a social network.

The question is whether the basic Oxwall release striclty uses these kind of cookies where no consent is needed based ont he law. Please could you kindly clarify ?

Also what happens if I install google analytics plugin, can I expect that this will include cookies for which I need visitor´s consent?

Thanks

Martin