Today, noyb has filed a complaint against the popular online dictionary dict.cc. The GDPR requires that consent is freely given, informed, specific and unambiguous. However, when visiting dict.c c , users are nudged into consenting to online tracking by a staggering 1,741 (!) “partners” with a single click. This makes it impossible for users to know exactly who has access to their data and how it is actually used. While dict.cc is an extreme example, requests to blindly waive your right to privacy for countless third parties is unfortunately a common issue with websites and apps relying on online advertising, even 8 years after the GDPR came into force.
Background. Online advertising companies heavily rely on tracking people ’s browsing habits, their interests, interactions and whereabouts to show them personalised ads. However, according to EU privacy law, online tracking is illegal by default. Companies must therefore ask for your consent to “waive” your right to privacy if they want to follow you around. That’s why you see consent banners everywhere. The problem is, however, that most of these banners request your consent for hundreds, if not thousands, of online advertising companies that share your data among each other. While this is initially done for invasive online advertising, data is often also shared and sold by data brokers for other purposes . Even law enforcement agencies from both democratic and authoritarian governments buy such data for surveillance purposes.
Uninformed consent. dict.cc ’s consent request currently mentions 1,741 “partner” companies that