The Internet is an ever-changing universe. Technological innovations lead to the need to set out new regulations also for the protection of personal data and users’ interests. So, first the European Union and then Italy have recently addressed the cookie issue. For anyone who is not an Internet expert, cookies are small bits of text that most website operators place onto your computer and/or browser as you surf the web to enable quick identification and personalised navigation. They may include data entered in text fields, frequently visited sites, etc. All this is useful information for the website you are visiting. Directive 2009/136/EC is aimed at enhancing the regulations on safety and confidentiality of communications, protection of personal data and information already stored in a terminal equipment, providing the user concerned with clear and comprehensive information as to the ways of giving consent, in particular through web browser settings or other applications. Italy adjusted to the new rules by introducing a new legislation on 15 June 2012 (Legislative Decree No. 69/2012). Pursuant to Article 122 of Legislative Decree No. 196/2003, as amended by Legislative Decree No. 69/2012, the use of cookies is allowed only on condition that the visitor of a website has been previously informed and has expressly given his/her consent. This involves the necessity of adjusting websites by implementing some changes in order to allow users to obtain suitable information in this respect and give their consent. The new procedure involves asking for active consent (opt-in) always and in any case. Many countries have already implemented the new rules: for example, the new legislation has already been transposed in the UK, by putting into practice the new opt-in system. In Italy websites still need to adjust to the new rules, but in case of failure to comply with the new regulation, penalties will apply ranging from a pecuniary administrative sanction of between EUR 6,000 and EUR 36,000, in case of failure to inform or misinformation, to 6-18 months imprisonment in case of processing without the consent of the person concerned (illegal data processing). Very soon there will be the end of a public consultation ordered by the Italian Personal Data Protection Authority to collect proposals from the most representative consumers’ organisations and economic operators concerned for setting simplified terms for the cookie information.