Clarifying consent: the case of Planet49

05 november 2019

Does a pre-ticked I agree box constitute valid consent for data processing? The answer from the EU Court of Justice, published on 1 October 2019, was a resounding no.

The company involved in the case, Planet49, had used a pre-ticked box in order to obtain consent to receive marketing messages from participants in a promotional lottery. In its ruling on case 673/17, the Court noted that even under the General Data Protection Regulation’s (GDPR) predecessor, Directive 95/46/EC, this did not constitute valid consent. 

The definition of consent in the GDPR and Regulation 2018/1725, which applies to the EU institutions, is even clearer. Under these new rules, consent must be provided in the form of a statement or by a clear affirmative action.

The Court also referred to the need for valid consent to be unambiguous. In the case of a pre-ticked box, this cannot be the case, as it would be easy for an individual to miss the box. Additionally, consent must be specific. Controllers must therefore seek consent for different purposes separately, and not bundle together consent sought for separate purposes.

As the Court confirmed, affirmative, unambiguous and specific consent is required independently of whether the cookie collected qualifies as personal data or not. This is because Article 5(3) of the EU’s ePrivacy Directive requires consent for the storing of information and the gaining of access to information already stored via cookies or similar tools for marketing purposes.

The Court’s ruling helps to clarify how, and in what cases, consent is required under the EU’s data protection rules. It should act as a reminder to all controllers to ensure that their consent procedures are fully compliant with these rules.

Source: EDPS

News archive

 

Firm news

mag29

29/05/2024

Protecting journalists and promoting media freedom: New rules enter into force

Independent, fact-based journalism helps protect our democracies by exposing injustices, holding leaders to account and allowing citizens to make informed decisions. Journalists, who sometimes

mag29

29/05/2024

The general authorisation and related frameworks for international submarine connectivity

Investment in and the modernisation of submarine telecommunications cables is essential to ensure connectivity across Europe and other continents. In order to reduce the costs associated with such investments,

mag29

29/05/2024

Facial recognition at airports: individuals should have maximum control over biometric data

During its latest plenary, the EDPB adopted an Opinion on the use of facial recognition technologies by airport operators and airline companies to streamline the passenger flow at airports*. This

Lawyer News

mag31

31/05/2024

Sul rigetto di decreto penale di condanna e successiva archiviazione

Il GIP non può decidere sull'opposizione

mag31

31/05/2024

Gratuito patrocinio: iscrizione nelle liste e calcolo dell’anzianità

Per il CNF è possibile cumulare diversi