PrivacySignal
GDPR / Intl

Open Letter: Civil society coalition urges EU to kill the cookie banner!

noyb (None of Your Business) · · EU · GDPR & International

A coalition of 19 civil society groups, businesses, and academics has published an open letter urging EU institutions to support legally binding automated privacy signals as part of the Digital Omnibus package — a mechanism that would let people set privacy preferences once instead of clicking through cookie banners repeatedly. The tracking industry is opposing the proposal.

Why this matters: Cookie banners were never really about giving you control. They were designed to wear you down until you click accept. Most people do. The EU now has a straightforward fix on the table: let your browser or device carry your preferences automatically, so you never see the banner again. The tracking industry does not like this because your default answer, set once and calmly, is much more likely to be no. That is exactly why it is worth fighting for.

Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

GDPR / Intl
S Slaughter and May · · International

How to address the overlap between competition and data privacy laws? The EC and EDPB seek views (via Passle)

The European Commission and the European Data Protection Board are jointly seeking input on how competition law and data privacy law should interact where they overlap. The consultation signals growing regulatory interest in treating data as both a market power issue and a rights issue.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
noyb (None of Your Business) · · EU

AI: EU Member States approve “digital expropriation” for AI companies

EU member states have approved a change to GDPR that would make personal data processing automatically lawful when it occurs 'in the context of AI,' according to reports. Critics, including privacy advocate Max Schrems, say the provision would let major AI companies use decades of collected personal data with few restrictions.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#ai#privacy Read original →
GDPR / Intl
Politico — Tech · · International

‘Just the beginning’: New Mexico AG warns AI industry after $25B Meta ruling

New Mexico Attorney General Raúl Torrez issued a public warning to the AI and tech industry following a $25 billion ruling against Meta, calling it a starting point rather than a conclusion. Torrez urged other state attorneys general to pursue similar litigation rather than settle.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#state-privacy#ai Read original →
GDPR / Intl
B Biometric Update · · International

Clearview AI spars with UK ICO over facial recognition as monitoring

Clearview AI is in a dispute with the UK's Information Commissioner's Office over how the company's facial recognition technology should be classified and regulated. The disagreement centers on whether Clearview's system constitutes monitoring under UK data protection law.

Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy

#gdpr#surveillance#ai#privacy Read original →
GDPR / Intl
EDPS · · EU

ARETE - Assessment of Risk to Individuals of Personal Data Breaches

The European Data Protection Supervisor held a half-day workshop called ARETE in June 2026, focused on how to assess the risk that personal data breaches pose to the individuals whose data is exposed.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
D Digital Watch Observatory · · International

UK ICO consultation on research data privacy closes

The UK Information Commissioner's Office has closed its public consultation on how privacy rules apply to the use of personal data in research contexts. The consultation period has now ended, meaning responses will be reviewed before any guidance or policy changes are issued.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →