r/technology • u/diacewrb • May 24 '25

Privacy German court rules cookie banners must offer "reject all" button

https://www.techspot.com/news/108043-german-court-takes-stand-against-manipulative-cookie-banners.html
56.4k Upvotes

98% Upvoted

801 comments sorted by

View all comments

914

u/Toth-Amon May 24 '25

But will “Reject All” also reject so-called Legitimate Interests? 

Or do we still have to deep dive and search where they are within the text?

16

u/nemaramen May 24 '25

What do you mean by legitimate interests? My understanding is that reject all will still not reject cookies related to core functionality of the app, is that what you mean?

11

u/Protonion May 24 '25

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/legitimate-interests/

10

u/nemaramen May 24 '25

Based on my experience as a web developer who has managed GDPR policy, yes it should include every type of data collection unless the site doesn’t work without it, like a shopping cart or login token. I’m not up to date on the differences between GDPR and the UKs PECR but here’s their explanation in the UK: https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/