Under the plan EU governments agreed, websites would still have to ask before putting most cookies on a phone or computer, but not for six specific jobs, such as keeping items in a shopping basket, counting visitors or checking how an ad matched to the page performed. Each job has strict limits: the data cannot be used for anything else, and measurement of ads cannot look at what a person did on other sites or on earlier visits. The list is not law yet, because the European Parliament still has to agree its own version and negotiate with governments.