The State Commissioner for Data Protection and Freedom of Information (LfDI) Baden-Württemberg has decided to check the websites of media companies concerning compliant cookie banners. The focus is on media with a particularly large online reach.
In addition to Baden-Württemberg, the data protection authorities in Hamburg, Brandenburg, Hesse, Lower Saxony, and North Rhine-Westphalia are also participating in the process.
New standards for cookie banners – inspections underway
Until recently, it was unclear if and how consent to cookies must be obtained; the German Telemedia Act (TMG) could be interpreted so that one only had to offer the option of rejecting cookies.
In May 2020, however, the German Federal Court of Justice decided, in accordance with the requirements of the ePrivacy Directive, that valid consent must be obtained from visitors to the website before cookies are set.
Visitors must give consent voluntarily and explicitly. Cookie walls that force users to accept cookies to access the website are not permitted. Further, scrolling a website does not count as explicit consent, nor do boxes ticked in advance.
Strictly necessary cookies, however, do not require consent. These are technically needed cookies for the loading and functioning of a website, e.g., shopping cart cookies, login cookies, or language preferences.
What are the consequences of non-compliance?
The fines for non-compliance with the processing of personal data with the help of cookies are extensive. According to the GDPR, fines of €20 million or 4% of the global annual turnover are imposed. Including violations related to the use of cookies.
Especially media companies often make extensive use of tracking technologies. According to the LfDI Baden-Württemberg, newspapers, particularly, enjoy a high level of trust from the population; this should also be reflected in the responsible handling of user data.
How can you obtain valid cookie consent on your website?
When informing users about cookies and obtaining and storing valid consents, you should use a certified Consent Management Platform.
With a Consent Solution from Cookie Information solution, you will receive a cookie consent pop-up that:
- Informs your website visitors about cookies (who owns them, their purpose, their lifespan);
- Gives your visitors the option to reject cookies (and tracking);
- Holds back cookies until the consent has been obtained;
- Does not assume consent by ticking the boxes in advance;
- Stores consents for 5 years (in the event of an inspection by the data protection authorities);
- It can be customized with your company logo, colors, and fonts.
Check if your website complies with German privacy regulations.
