Websites in the EU are required to declare when cookies and other similar technologies are utilised. Notices must now be clearly displayed, and one method of doing this is by using prominent banners.

Each affected website must include a cookie notification page. Approved Cookie notice text must be used and translated into local language to reflect the language of the website.

Each page must list which categories of cookie are in use. For each specific cookie, the following notification must be provided:

• Name
• Purpose
• Category
• Persistence
• Origin (i.e. first party or third party)

‘Purpose’ descriptions should be concise and easy for non-technical users to understand.

Each AstraZeneca website should include a link to the Legal Notice which contains provisions such as a disclaimer and a statement on intellectual property rights, amongst others. It may be appropriate for other digital media communications to include the Legal Notice and the Privacy Policy depending on the nature and origin of the digital media communication.

Signatories should consult with Legal with respect to implementing specific terms and conditions for use of the digital media communication where that is appropriate.

Every website and digital media should link to or contain the Privacy Policy or relevant privacy notices and/or policy.

Digital media communications involving the processing of personal information should provide appropriate privacy notices that broadly describe the information that will be obtained, the purposes for which it will be used and who it will be shared with.

Privacy notices on digital media communications should also be provided where required by laws or regulations or where technology (e.g., cookies) is used to track user activity or build up a profile of user behaviour.