3 years of GDPR: The biggest fines so far

Re:3 years of GDPR: The biggest fines so far by kybernetikos on Monday May 24, 2021 @05:28PM (#27269943)

I believe that this is likely not GDPR compliant, although this view doesn't seem to be shared by many. My basis for saying it's not is https://www.privacy-regulation.eu/en/recital-43-GDPR.htm

> Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance.

I take this to mean that you cannot rely on consent that a user has given you to process their personally identifiable information if they did it in order to access a service you wouldn't let them have access to otherwise.

[ Parent | on HN ]

Re:3 years of GDPR: The biggest fines so far by toffi-fee on Monday May 24, 2021 @06:38PM (#27270506)

But the provision of the service is not made dependent on the consent if you can alternatively pay the monthly subscription. So I would assume, “accept all cookies or enter paid subscription” is Gdpr compliant.

[ Parent | on HN ]

Re:3 years of GDPR: The biggest fines so far by kybernetikos on Tuesday May 25, 2021 @03:42AM (#27274015)

> Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.

https://gdpr.eu/Recital-42-Burden-of-proof-and-requirements-...

I think having to pay a monthly subscription, or losing access to a service when you withdraw consent and don't pay a subscription should be regarded as a detriment.

[ Parent | on HN ]