This article was updated with a comment by Meta.
Google’s plan to include a “reject all” button on cookie banners after its existing policy violated EU law was welcomed by Hamburg’s top data protection official, who presented his activity report on Thursday (7 April). EURACTIV Germany reports.
Google will likely first introduce such a button in France, which has already imposed fines on the US giant and Facebook, before launching it in Germany.
“Google has told us that they now want to establish this ‘reject all’ button step by step in the European Union, Switzerland and the UK,” Hamburg’s Commissioner for Data Protection and Freedom of Information Thomas Fuchs said on Wednesday (6 April) during a presentation of his 2021 activity report.
Google’s step comes in response to massive criticism and fines. The fact that rejecting cookies requires much more effort from users than consenting to them with just one click does not meet the requirements of data protection law.
Data protection issues
Fuchs wrote to Google last week asking the company to revise its cookie banner policy because it failed to comply with data protection requirements.
Pop up cookie banners can be irritating to users who generally just close them, implying consent. However, to actually reject cookie tracking, numerous selections have to be made which is far more time-consuming.
“The good news is that there is now a written commitment from Google” to make a one-click-button available by default, Fuchs also said.
French data protection authority CNIL previously fined Google €150 million and Facebook €60 million. “Rejecting cookies should be as easy as accepting them,” according to CNIL’s guiding principle.
When asked by EURACTIV, Google said it was determined to make further changes and actively cooperate with the CNIL.
According to a Meta spokesperson, Facebook has already updated the cookie consent options at the end of March 2022. “In all EU countries, it is now equally easy to reject or accept non-essential cookies,” the spokesperson told EURACTIV.
Plans to phase out cookies
Google’s introduction of the “reject all” button is likely to be only an interim solution because the US giant already presented far-reaching plans at the end of January to altogether remove Google cookies from third-party providers by 2023.
Instead of cookies, the internet giant wants to rely on in-house tracking technology for the Google Privacy Sandbox project.
Part of the Google Privacy Sandbox project is called Topics API, whereby Chrome is supposed to record the five most important topics that correspond to the users’ interests weekly. These topics are updated every seven days, and historical data is deleted every three weeks.
Advertisers would be able to display advertising content based on the top three themes. According to Google, these preferences would be stored directly on the device, and thus no data would be transmitted to third-party providers or Google servers. Users will be able to view, change or completely disable their top themes.
The theme pool, which is currently under development, has entered a test phase. Since 31 March, developers can test Topics API in Chrome’s Canary version. In Europe, users can sign up to participate in the tests.
As a result, Google made several commitments, like refraining from referencing itself and offering the UK’s antitrust and data protection authorities regulatory oversight. The authority accepted these commitments and will monitor their implementation.
[Edited by Alice Taylor]