Regulatory Watch  /  European Union  /  Enforcement
Moderate impactEnforcementFiled

noyb files complaints against data brokers for refusing cookie‑based authentication of GDPR access requests

noyb lodged a series of complaints against websites and data brokers that denied or complicated GDPR access requests by requiring additional identification beyond cookies. The complaints argue that, under GDPR and EDPB guidance, users should be able to authenticate with cookie data already collected. The action highlights a conflict between using cookies for targeted advertising and refusing the same method for exercising data‑subject rights.

Why it matters: The complaints challenge data brokers' refusal to use cookies for identity verification, impacting the practical exercise of GDPR access rights.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Data brokers: Identification possible to sell ads, not to exercise fundamental rights
noyb · primary source · Feb 28, 2023
Data brokers: Identification possible to sell ads, not to exercise fundamental rights
noyb · Feb 28, 2023
Details
JurisdictionEuropean Union
RegulatorEDPB
LawGeneral Data Protection Regulation
StatusFiled
PublishedFebruary 28, 2023
Effectivenot stated
Organisationsdata brokers, websites
Topicsaccess, data minimization, profiling, targeted advertising, privacy, cookies, tracking
Datapersonal, browsing, behavioral