From what I understand GDPR says you are not allowed to store user identification information such us IP, name. But I could use cookies for user experience. For example I can track visited page categories/products to show related products.

Original cookie law from years ago restricted also that. In old cookie law you were not allowed to store cookies without consent if cookie was not required for functionality (e.g. shopping cart, login). User experience cookies required consent. So I could not show related products based on activity (e.g. visited categories, purchase history, number of visited pages, ...) if user didn't agree.

  • Does GDPR replace cookie notice law?
  • Do I still need to use a cookie notice?

2 Answers 2


The cookie notice/consent is apart of the Directive 2002/58/EC while The EU General Data Protection Regulation (GDPR) replaces the 95/46/EC Data Protection Directive.

They are not the same but work in a relationship. You will need to ensure your site complies with DIRECTIVE 2002/58/EC and REGULATION (EU) 2016/679 , most often complying with one may comply with the other on certain things. You need to do your own research or use a GDPR generator.


Nowhere in the GDPR it says you are not allowed to store user identification information.

What the GDPR states is that if you collect or process personal data (i.e. any data that can be linked to a certain individual) you need to be transparant to the data subject about why you use his/her personal data, and what you are doing with it – especially if you share it with other parties. This is usually communicated through a privacy statement, shown when first visiting a website.

  • 1
    can you provide a link to substantiate your claims?
    – Steve
    Dec 2, 2018 at 20:25
  • A link to substantiate my claims? You could try making an effort and actually read the regulation, as I did. Dec 3, 2018 at 12:47
  • Richard, you are a new contributor so you may not understand that part of the purpose of Stack Exchange is to create a lasting archive of answers. That includes links to resources that will help others in future. I am not interested in the question or your answer or even the regulations, but I am interested in helping make SE work into the future.
    – Steve
    Dec 3, 2018 at 22:30
  • Sorry Steve, I've encountered a few trolls elsewhere when trying to have an adult discussion on the subject and I guess the way you phrased your question triggered me. Dec 4, 2018 at 8:41
  • 1
    Algolia offers a handy search engine on the regulation's text. Dec 4, 2018 at 8:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.