Data Protection Made Easy Podcast: Cookies in 2025, What Changes and What To Do Now

Hosts, Catarina Santos with guests Oluwagbenga Onojobi (Gbenga) and Holly Miller. A brief cameo from Phil Brining.

Episode overview

In this 30 minute session we explain what cookies are, how the main types work, and what the 2025 UK reforms mean in practice. We look at PECR and UK GDPR, rising enforcement in Europe, consent or pay models, fingerprinting, Google Topics API, and the differences between the UK and EU approaches. The goal is simple, give you clear next steps that reduce risk without killing conversions.

Listen now

Also available on all major platforms, Spotify, Apple Podcasts, Audible, and popular Android apps. Many DPOs tell us they listen back on walks, in the gym, or while cooking, so feel free to enjoy this one at your leisure.

What we cover

• Cookies 101, first party, third party, strictly necessary, functionality, performance, and tracking.
• Hot topics, Google Topics API, cookie less advertising, fingerprinting, consent or pay models.
• Rules that matter, PECR and UK GDPR basics, lawful consent, transparency, and user choice.
• 2025 UK changes, low risk cookie exemptions, higher fine levels, and the ICO consultation.
• UK vs EU, where approaches differ, how to handle cross border users, and common pitfalls.

Practical takeaways

• Give Reject all equal prominence, avoid pre ticked boxes, explain purposes in plain English.
• Keep a cookie register, map scripts to purposes, owners, and retention.
• Update your cookie policy and link it clearly in the footer, keep a separate document from the privacy notice.
• Record consent events, banner version, time, and preferences, and honour withdrawal with no detriment.
• If you operate in the EU, follow the stricter position where needed, and use geo logic carefully.

Stay connected

You can always get in touch via our website or on LinkedIn. If you enjoy the podcast, share it with a colleague who looks after cookies, consent, or analytics.

Data Protection Made Easy is one of the UK’s largest data protection communities, over 1,500 subscribers, with more than 200 episodes available on major audio platforms.