Skip to content
News·noyb - European Center for Digital RightsEN
Export

Data Protection Day: 5 misconceptions about data protection, debunked

Ever since the GDPR (General Data Protection Regulation) came into force in 2018, people in the European Union have stronger privacy and data protection.

Full text

Ever since the GDPR (General Data Protection Regulation) came into force in 2018, people in the European Union have stronger privacy and data protection. However, the law is far from perfect – and big tech companies, industry lawyers and lobbyists made sure to use every tool in their arsenal to either circumvent GDPR provisions (by misinterpretation) or to influence the public opinion about the law so that consumer don’t blame them for violations, but the GDPR itself. Over the past few years, this has led to a number of misconceptions about data protection and the GDPR in particular. Therefore, in honour of this year’s Data Protection Day, noyb is clearing up 5 of the most common misconceptions. 1. The GDPR forces companies to use cookie bannersThis is incorrect. The GDPR doesn’t force websites to use cookie banners. Instead, companies are required to obtain your explicit consent if they want to track your online movements. Typically, this is done to show you personalised advertisement

How it connects

451423 French Supreme Court reviews CNIL €35M cookie consent fine against Amazon The French DPA had received a complaint on 28 May 2018 regarding the lawfulness of processing by Amazon Europe Core ('Provider' or 'The company'). The French DPA had forwarded… Supreme Administrative Court Jun 27, 2022 Consent Supervision Cookies
449209 CE asks CJEU if GDPR one-stop-shop applies to ePrivacy cookie consent cases On 7 December 2020, the French DPA (CNIL) imposed two fines totaling € 100 million on Google LLC and Google Ireland Ltd for violating Article 82 of the French Data Protection Act… Jan 28, 2022 Supervision Consent Supervisory Authorities
449212 CE upholds CNIL competence to fine Google €100M for cookies despite no lead authority role On December, 7 2020, the French DPA imposed a financial penalty of 60 Million euros fine against Google LLC and a 40 million euros against Google Ireland Limited in accordance… Mar 4, 2021 Supervision Supervisory Authorities Law Enforcement
VI ZB 39/18 BGH: Preselected checkbox for web analytics cookies does not constitute valid consent See facts at the GDPRhub entry to the "Planet 49 case" (C-637/1/). The second checkbox containing a preselected tick used by the defendant (Planet 49) read as follows: {|… May 28, 2020 Consent Child Consent Personal Data