Clarifying consent: the case of Planet49

05 novembre 2019

 
 
Does a pre-ticked I agree box constitute valid consent for data processing? The answer from the EU Court of Justice, published on 1 October 2019, was a resounding no.

The company involved in the case, Planet49, had used a pre-ticked box in order to obtain consent to receive marketing messages from participants in a promotional lottery. In its ruling on case 673/17, the Court noted that even under the General Data Protection Regulation’s (GDPR) predecessor, Directive 95/46/EC, this did not constitute valid consent. 

The definition of consent in the GDPR and Regulation 2018/1725, which applies to the EU institutions, is even clearer. Under these new rules, consent must be provided in the form of a statement or by a clear affirmative action.

The Court also referred to the need for valid consent to be unambiguous. In the case of a pre-ticked box, this cannot be the case, as it would be easy for an individual to miss the box. Additionally, consent must be specific. Controllers must therefore seek consent for different purposes separately, and not bundle together consent sought for separate purposes.

As the Court confirmed, affirmative, unambiguous and specific consent is required independently of whether the cookie collected qualifies as personal data or not. This is because Article 5(3) of the EU’s ePrivacy Directive requires consent for the storing of information and the gaining of access to information already stored via cookies or similar tools for marketing purposes.

The Court’s ruling helps to clarify how, and in what cases, consent is required under the EU’s data protection rules. It should act as a reminder to all controllers to ensure that their consent procedures are fully compliant with these rules.

Source: EDPS

Archivio news

 

News dello studio

mag28

28/05/2020

Qualificazione dell'OdV per il Garante privacy

lL Garante per la privacy ha precisato il ruolo e le responsabilità degli Organismi di Vigilanza (OdV) riguardo ai trattamenti dei dati personali svolti nelle loro funzioni e ha escluso che essi

mag28

28/05/2020

Braccialetto Anti-Covid: Agcm interviene a tutela dei consumatori

L'Autorità Garante della Concorrenza e del Mercato dispone, in via cautelare, l'eliminazione dal sito geolam.info di ogni riferimento all'efficacia curativa e preventiva del "Transmission

mag20

20/05/2020

Cugia Cuomo & Associati ottiene la validazione per i dispositivi di protezione individuale da parte dell’INAIL per Antinfortunistica Gallo s.r.l. nell’emergenza COVID-19

Lo Studio Cugia Cuomo & Associati, nella persona del partner Avv. Prof. Alessandro Bonavita, ha rappresentato con successo la società Antinfortunistica Gallo s.r.l. nella richiesta di validazione