Forced Consent & Consent Bypass

The GDPR generally prohibits the processing of other’s data, unless a company can demonstrate that at least one of six exceptions applies. For advertising this is typically consent of the user, as other options are not applicable.

Under the GDPR, consent must satisfy different requirements to be legally binding: it must be freely given, specific, informed, and unambiguous. Furthermore, under Article 7 GDPR, consent must be requested in a transparent and fair way and should be withdraw-able at any time – so basically you need an informed “yes/no” or “opt-in” consent. This leads to significantly less people giving consent, so many companies try to bypass it.

The market power of major corporations has allowed them to force their customers to consent to almost any form of data processing, by only giving them one chance: either accept everything or don’t use this service anymore. We take action against such approaches.

In this project, noyb