Europe3
The GDPR sets the global standard for data protection, requiring explicit opt-in consent before processing personal data of EU/EEA residents. For websites, non-essential cookies must be blocked until visitors actively consent. Pre-ticked boxes and implied consent are invalid.
Article 5(3) of the ePrivacy Directive is the primary EU legal basis requiring cookie consent. It mandates prior informed consent before storing or accessing any information on a user's device, with narrow exceptions only for transmission necessity and explicitly requested services.
Liechtenstein implements the GDPR through its Data Protection Act 2018 and the ePrivacy Directive through the Communications Act (KomG). While the DSG is fully GDPR-aligned, the KomG has not been fully updated for the 2009 ePrivacy amendments, creating a potential gap in cookie-specific requirements.