When even the ICO admits its website cookie policy doesn’t fully conform to GDPR, small business owners can feel comforted if their data privacy policies haven’t been fully hammered out just yet.