The provisions of both the Privacy and Electronic Communications (EC Directive) Regulation 2003 (PECR 2003), SI 2003/2426 and the General Data Protection Regulation (the GDPR), Regulation (EU) 2016/679 are relevant in the context of cookies. PECR 2003 PECR 2003, SI 2003/2426 among other things, regulates the circumstances in which an electronic communication service provider, such as a website operator, can store or gain access to information stored on an individual user’s device. Under PECR 2003, SI 2003/2426, consent is required for the storage or access to information on a subscriber’s or user’s device; in other words, a requirement to obtain consent for cookies and similar technologies. For further information on the use of cookies or similar technologies, see ICO guidance: • Guidance on the rules on use of cookies and similar technologies • Guide to PECR 2003—Cookies and similar