The Polish data protection authority has fined ClickQuickNow €47,126.97 for violating the General Data Protection Regulation (GDPR) by requiring too difficult a process for revoking consent.

The process in question required the person who submits the statement of withdrawal of consent to indicate the reason for his request after the site provided the person with

The Court of Justice of the European Union has issued its Planet 49 decision.

Key takeaways:

  • A pre-checked check box is not sufficient consent for the placement of cookies.
  • You need active consent whether or not cookies collect personal data.
  • The fact that a user activates the promotional game participation button is not sufficient to

Asking to read an electronic ID card as a condition for the provision of a service (issuing a rewards/loyalty card) is disproportionate and in violation of GDPR, says the Belgian data protection authority.  The company was fined €10,000.

Key takeaways also relevant to authentication/collection under GDPR and CCPA:
  • Information you collect to identify an individual

“Given the legal requirements for explicit, informed consent, it is obvious that the vast majority of cookie consent notices are not compliant with European privacy law – researchers at the University of Michigan have found.”

“If given a choice, just 0.1 percent of site visitors would freely choose to enable all cookie categories/vendors — i.e.

Red Card! The Spanish Data Protection Authority has issued LaLiga a 250,000 EUR fine for using its mobile app to detect bars illegally broadcasting soccer matches, without duly disclosing this data processing activity in violation of GDPR.

When installing the application and receiving user approval, LaLiga remotely activated the microphone of any user’s mobile phone

The “agree button is one of the biggest lies on the internet. This is not consent. This is not notice,” said U.K. Information Commissioner’s Office Executive Director for Technology Policy and Innovation Simon McDougall.

People are now living in an “age of unhappiness” and are not feeling empowered, says McDougall. With large tech companies, the

“If you start reading all privacy notices you receive, you will spend too much time reading these notices. On the other hand, if a person [ticks a box] ‘I accept and understand’ but they don’t know what they’re consenting to, that is not acceptable either. A reasonable approach is in-between,” said Giovanni Buttarelli, the European

“This call may be recorded for training purposes…if you consent say ‘Consent’.”

The Danish Data Protection Authority (Datatilsynet) has ordered a company to cease recording phone calls for training purposes until it implements a technical solution that makes it possible to obtain the caller’s consent for doing so.

In this case the complainant called the

A pre-ticked checkbox is not valid consent for placing cookies under the EU eprivacy directive – says the Advocate General to the Court of Justice of the EU in the Planet49 case.

Other takeaways:

  • Pre-ticked box + an active “click” on “participate in lottery” is still not sufficient consent for placing cookies. For consent to