The EDPB releases report of the outcome of the cookie banner task force

Following the massive number of draft complaints (over 500) to companies implementing allegedly unlawful cookie banners issued in May 2021 by the non-profit organization NOYB, the EDPB decided to set up a task force composed of delegations of the EU Supervisory Authorities (SAs) to coordinate the response to complaints filed with several European SAs by NOYB cookie banner task force.

The task force was establish in accordance with Art. 70(1)(u) GDPR with the goal to promote cooperation, information sharing and best practices between the SAs.

In January 2023 the task force published a report of the work undertaken between May 2021 and August 2022 during the thirteen meetings held to coordinate the follow-up to the complaints raised by NOYB.

Presence of the “Reject All” option in the first layer of the cookie banner cookie banner task force

The majority of the delegations is of the opinion that if a “Reject All” option is not present on any layer with a consent button in the cookie banner, spain business fax list this would not be consider in line with the concept of valid consent, hence the practice of not having both options in the cookie banner where the consent is display, would infringe the GDPR. However, it was also not by some authorities that the e-Privacy Directive does not mention explicitly a “Reject All” option, therefore the infringement is arguable. It has to be remindas an underlying principle that no cookies requiring consent for their activation on the device can be actually implement without the valid consent.

Pre-ticked boxes

It is a well-known practice that some controllers present pre-ticked boxes in the second layer of consent of the cookie banners, when the user can select the categories of cookies/tracking technologies to allow for use. According to the task force, a hello bar is a popup this practice would contradict. GDPR and e-Privacy Directive requirement. Tpecifically in relation to the validity of consent. This is in reference to the GDPR  of the ePrivacy Directive. If the user does not perform an affirmative action, the consent cannot be consider valid, hence pre-ticked boxes should be avoid.

Deceptive links

The task force has reviewed some cases of deceptive design of the cookie banners. Especially cases where the option to refus. That are leading user to believe that only by . Accepting the optional cookies, albania business directory the website would be accessible.

According to the task force, those practices are not considered to be valid consent options. The goal of the website controller should be to enable. The users in a clear and intuitive form to make a choice on depositing the cookies.

Options to withdraw consent

An important point that has been assessed by the task force is relat. The requirement to give the possibility to the user to withdraw the consent of the cookies once it has been provided. Options to enable this possibility have already been seen on the websites, such as| buy lead.

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top