The Austrian Federal Administrative Court (BVwG) confirmed the Data Protection Authority's finding that DerStandard violated the GDPR by offering a "pay or okay" choice. The court held that the newspaper did not obtain valid, granular consent for each processing purpose. The decision may be appealed to the Supreme Administrative Court and potentially referred to the CJEU.
Why it matters: The ruling clarifies that bundling payment with consent for tracking breaches GDPR's requirement for freely given, specific consent.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
