On March 7, 2024, the Court of Justice of the European Union issued its judgment in the case of IAB Europe (Case C‑604/22). In this judgment, the CJEU assessed the role of IAB Europe in the processing operations associated with its Transparency and Consent Framework and further developed CJEU case law on the concept of personal data under the GDPR.
Continue Reading CJEU Rules on IAB Europe’s Transparency and Consent Framework

On January 31, 2024, the UK ICO released a statement in response to its requirement that the UK’s biggest websites comply with data protection laws when using cookies. The ICO said that it received “an overwhelmingly positive response,” with 38 of the 58 organizations having changed their cookie banners in order to come into compliance.
Continue Reading UK ICO Warns Organizations to Make Advertising Cookies Compliant Following Call to Action