French DPA CNIL consultation on its draft recommendations on the use of cookies

France’s data protection authority, the CNIL, has launched a consultation for its draft recommendations on the use of cookies. The CNIL conducted a separate consultation last fall to develop the recommendations, which would propose operational procedures to obtain consent. The current consultation will be opened for six weeks and is scheduled to end Feb. 25. The CNIL plans to create a new version of the draft recommendations and present it to the agency’s members in a plenary session for final adoption.

In its draft recommendations, the CNIL insists that accepting or dismissing cookies should be made extremely simple and rely on informed consent for each data processing uses. This would mean that grouped buttons allowing to accept or set-up cookies settings at once for all uses (as used by a large number of current websites) would not be compliant, nor would general agreement of T&Cs be. Websites must show the various personalisation, the type of data collected and the list of data controller. Furthermore, the recommendations push for cookies choice to be done on browser settings, which has been a very contentious point opposed by Adtech and media industries in the current discussions on the draft e-privacy regulation. The DPA also recommends that data retention period for choice is set to 6 months.  Consultation is open until 25th February and recommendations will be taken onboard from next fall.  

Link to original article and consultation in French here.

Related articles