Post

Seriously though, congratulations! And, many thanks for all your hard work on this over the years. It's a textbook case of malicious non-compliance, and it's really great to see this decision -- momentous indeed!

So more precisely the effect of the Belgian DPA decision is EU-wide (ie binding other DPAs), on the basis of Article 60(6) GDPR, given that the legal challenge to it has failed? Are we sure that there were no objections by other DPAs, which triggered the consistency mechanism?

I don't know if this is the logic behind the ruling, but those "allow cookies?" pop-ups are so nebulous that there's no way they can qualify as "informed consent" for whatever they're tracking. It would be a godsend if this results in websites having one fewer obnoxious fucking pop-up.