cookies and more

CNIL recommendation on tracking pixels

The CNIL’s recommendation (in French here) formally brings email tracking pixels under the same legal regime as cookies and similar trackers. In practice, this means that most tracking in emails—particularly for marketing or behavioural analysis—requires prior consent that is separate from consent to receive the communication. The CNIL narrows the Read more

When Procedure Shapes Enforcement – lessons learned: Luxembourg’s Administrative Court overturns €746 million GDPR fine imposed on Amazon.

Yesterday, the Luxembourg Administrative Court issued a historical ruling in the long-running dispute between Amazon Europe Core S.à r.l. and the Luxembourg data protection authority (CNPD), concerning the €746 million fine imposed by the latter in 2021. The violations examined in the case were related to the legal basis for Read more