In this episode of Fieldfisher's Bytesize Legal Updates podcast, Pardeep Dhanoya and Andrea Ortega discuss the recent guidance issued by the Spanish Data Protection Authority (DPA) on cookies and its implications for businesses. Under the EU and UK cookie rules, only strictly necessary cookies are exempt from the requirement to obtain prior consent from users. Analytics cookies are not considered strictly necessary; thus, companies must provide information and obtain consent from users.