Cookie Banners
Today,
noyb
has filed a complaint against
the popular online dictionary
dict.cc. The GDPR requires that consent is freely given, informed, specific and
unambiguous.
However, when visiting dict.c
, users are nudged into consenting to online tracking by a staggering 1,741 (!) “partners” with a single click. This makes it impossible for users to know exactly who has access to their data and how it is actually used. While dict.cc is an extreme example, requests to blindly waive your right to privacy for countless third parties is unfortunately a common issue with websites and apps relying on online advertising, even 8 years after the GDPR came into force.
Complaint against dict.cc (EN - auto-translation)
Complaint against dict.cc (DE - original)
Background.
Online advertising companies heavily rely on tracking people
’s browsing habits, their interests, interactions and whereabouts
to show them personalised ads. However, according to EU privacy law, online tracking is illegal by default.
Companies must therefore ask for your consent to “waive” your right to privacy if they want to follow you around. That’s why you see consent banners everywhere. The problem is, however, that most of these banners request your consent for
hundreds, if not thousands, of online advertising companies that share your data among each other. While this is initially done for invasive online advertising, data is often also
shared and sold by data brokers
for
other purposes
. Even law enforcement agencies from both
democratic
and
authoritarian
governments buy such data for surveillance purposes.
Uninformed consent.
dict.cc
’s
consent request currently mentions 1,741 “partner” companies that would be granted access to the device and the personal data of users. Reading all of their privacy policies would at least take 170 hours (even if you just scan each policy for 6 minutes
)
. That is more than an entire week for one single consent request. In add
… [more]