Lunes, 21 Septiembre 2020

Obligation of adapting cookies until 30 October 2020

VolverIn November 2019, the AEPD published the so-called “Guide on the use of cookies”. However, such a guide was controversial since its beginning, because certain actions considered by the Spanish body as a valid form of obtaining consent from users weren’t approved by the data protection authorities of other states.

Essentially, the controversy was focused on the validity of the “keep browsing” option as a form of consent and that such consent may be considered as explicit, as the General Data Protection Regulation (GDPR 2016/679) requires. Other matter where disputes arose was the so-called “cookie walls”, which entails the possibility of limiting the access to certain services or contents if the use of cookies is not accepted.

Therefore, the European Committee, in May, reviewed the Consent Guidelines, deeming that “keep browsing” is not a valid form of consent and that “cookie walls” may entail that consent isn’t free, and, therefore, isn’t valid either.

Due to all the above, it has proved necessary for the AEPD to update and adapt the Guide on the use of cookies, which has recently been undertaken at the end of July 2020.

The main updates are the two mentioned above. In particular, the “keep browsing” option was one of the most used options; it was sufficient to understand that for the user to consent the cookies download, it was only necessary that the user browsed sections of the web site other than the second layer of information on cookies or the privacy policy, scrolled up or down, closed the first layer or the information notice or clicked on any content of the web page. As we have said above, such “keep browsing” option is no longer valid because the above mentioned actions are difficult to distinguish from other actions or user interactions.

However, after reviewing the Consent Guidelines 5/2020, the EDPB has stated that the “keep browsing” option is not a valid form of consent, since those actions may be difficult to distinguish from other user interactions in the site web. Hence, it would not be possible to interpret the consent as unmistakable as the case would be if the user clicked “accept”, and at proof level this latter is the most appropriate form.

Regarding “cookie walls”, their use is forbidden, unless there are alternatives to consent. The access to services cannot be bound to just accepting the use of cookies by the user. E.g. it would be clearly illegal to set accepting cookies as a prerequisite for accessing a web site when the user may only exercise a right through the access to such a site.

The AEPD has granted 3 months in order to implement the new criteria, and therefore, they should be operative by the end of October 2020. Accordingly, the mechanisms to obtain consent should be reviewed and adapted in every web site o platform using cookies.

At Belzuz Abogados, as a law firm with expertise in digital and IT law, we will be delighted to provide services of guidance and to update and adapt the new criteria on cookies.

 Emilio Perez Labrador Emilio Pérez Labrador

Departamento de Tecnologías de la Información y de la Comunicación (TIC)

 

Belzuz Abogados SLP

La presente publicación contiene información de carácter general sin que constituya opinión profesional ni asesoría jurídica. © Belzuz Abogados, S.L.P., quedan reservados todos los derechos. Se prohíbe la explotación, reproducción, distribución, comunicación pública y transformación total o parcial, de esta obra, sin autorización escrita de Belzuz Abogados, S.L.P.

Madrid

Belzuz Abogados - Despacho de Madrid

Nuñez de Balboa 115 bis 1

  28006 Madrid

+34 91 562 50 76

+34 91 562 45 40

Esta dirección de correo electrónico está siendo protegida contra los robots de spam. Necesita tener JavaScript habilitado para poder verlo.

Lisboa

Belzuz Abogados - Despacho de Lisboa

Av. Duque d´Ávila, 141 – 1º Dtº

  1050-081 Lisboa

+351 21 324 05 30

+351 21 347 84 52

Esta dirección de correo electrónico está siendo protegida contra los robots de spam. Necesita tener JavaScript habilitado para poder verlo.

Oporto

Belzuz Abogados - Despacho de Oporto

Rua Julio Dinis 204, Off 314

  4050-318 Oporto

+351 22 938 94 52

+351 22 938 94 54

Esta dirección de correo electrónico está siendo protegida contra los robots de spam. Necesita tener JavaScript habilitado para poder verlo.

Asociaciones

  • 1_insuralex
  • 3_chambers_global_2022
  • 4_cle
  • 5_chp
  • 6_aeafa