News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Data brokers: Identification possible to sell ads, not to exercise fundamental rights

Today, noyb filed a series of complaints against websites and data brokers that did not correctly address access requests using cookies as an authentication factor.

Identification Right of Access Cookies Access Controls Monitoring
Feb 28, 2023 Source noyb.eu

Full text

Today, noyb filed a series of complaints against websites and data brokers that did not correctly address access requests using cookies as an authentication factor. The companies had shown obstructive approaches when authenticating users; ranging from denying the right to access, to requiring additional information, unnecessary to authenticate the user. Complaint against data broker: machine translated EN [PDF] Complaint against website: machine translated EN [PDF] Exercising fundamental rights via cookie-based authentication. Tracking cookies are used to identify, profile and target a user with personalized ads. Therefore, cookie data can also be used to identify and authenticate users exercising their GDPR rights. At least in theory. In order to test how cookie based authentication is handled by the industry, users made a number of access requests based on cookie data in a noyb project. Failure to respond to access request. In order to obtain the information gathered on them, the use

How it connects

Related across sources

Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Apr 17, 2023 Right of Access Personal Data Right to Rectification
C-178/22 Criminal proceedings against Unknown individuals The Court of Justice of the European Union, ruling in Case C-178/22 on a preliminary reference from the Giudice delle indagini preliminari presso il Tribunale di Bolzano,… CJEU ·Grand Chamber Apr 30, 2024 Legitimate Interest Personal Data Right of Access
T-354/22 Thomas Bindl v European Commission In Case T-354/22, Thomas Bindl sought annulment of alleged personal data transfers to third countries by the European Commission when visiting the Conference on the Future of… General Court ·Sixth Chamber, Extended Composition Jan 8, 2025 Privacy Shield Personal Data International Transfer
2025 EDPB Annual Report 2024 De EDPB heeft het Jaarraport van 2024 gepubliceerd. Met ook een handzame samenvatting voor degene die geen tijd hebben. Er wordt ook een lijst met zaken van enkele DPAs… Apr 23, 2025 Direct Marketing Legitimate Interest Privacy by Design
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision
C-470/21 La Quadrature du Net and Others v Premier ministre and Ministère de la Culture In Case C-470/21, the CJEU addressed a preliminary reference from the French Conseil d'État concerning La Quadrature du Net and others v. Premier ministre and Ministre de la… CJEU ·Full Court Apr 30, 2024 Right of Access Personal Data Material scope (GDPR)
Related documents