PrivacySignal
GDPR / Intl

Online bookies accused of UK privacy breaches with use of cookie banners

The Guardian — Privacy · · International · GDPR & International

A study found that 86% of licensed UK gambling websites appear to be violating GDPR by nudging users toward accepting tracking, and in many cases harvesting data before any consent is given. The research accuses the industry of widespread non-compliance and what it describes as systematic data surveillance of customers.

Why this matters: Gambling sites know a lot about you already. Add tracking data and they know more: your habits, your hours, how often you come back. These are not neutral facts. They can be used to target people at vulnerable moments. GDPR was supposed to stop companies from collecting that data before you say yes. Most of these sites apparently did it anyway. That is not a technicality. It means real people had their behavior recorded without meaningful choice, and the companies collecting it faced no real consequence for doing so.

Who should care: Lawyers · Privacy officers · AI governance · Compliance · Cybersecurity · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

GDPR / Intl
W WilmerHale · · International

Washington Attorney General Publishes First Data Privacy Report

Washington's Attorney General has released the office's first report focused on data privacy, marking a new phase of public accountability for how the state enforces privacy protections.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#state-privacy#privacy Read original →
GDPR / Intl
noyb (None of Your Business) · · EU

Supreme Court: CRIF illegally collected data of millions in Austria. Way clear for class action!

Austria's Supreme Court has ruled that credit reference agency CRIF violated GDPR's purpose limitation principle by collecting personal data from address publishers without a lawful basis. The decision, secured before a full hearing, strengthens a parallel class action brought by privacy group noyb on behalf of millions of affected Austrians.

Who should care: Lawyers · Privacy officers · AI governance

GDPR / Intl
BBC — Tech · · International

Reform of all social media should come with Meta changes, UN says

The United Nations has called for broad social media reform to accompany any changes made to Meta's platforms, framing child safety and platform accountability as an industry-wide issue. Separately, California's attorney general is pressing TikTok and YouTube to adopt teen safety measures.

Who should care: Lawyers · Privacy officers · Compliance

#state-privacy Read original →
GDPR / Intl
New York Times — Tech · · International

Prediction Markets and States Clashed, Setting Off a Furious Political Battle

A legal battle over the regulatory status of prediction markets like Kalshi and Polymarket has escalated into a broad political fight, drawing in the Trump administration, a member of the president's family, and attorney generals from nearly every state.

Who should care: Lawyers · Privacy officers · Compliance

#state-privacy Read original →