Questionnaires used by German DPA in their cookie sweep

.. as well as background information at

Deep link to the questionnaire as a PDF:

Some discussuion at:

[UK] ICO’s Liz Denham on direct marketing consent

Detail of the e-privacy regulation is still being debated, but a default for all consumer marketing to be opt-in is in the current draft.

Until the e-privacy regulation comes into force, PECR will sit along side the GDPR.

That means electronic marketing will require consent. Yes, there is potential to use legitmate interests as a legal basis for processing in some circumstances, but you must be confident that you can rely on it.

It seems to me that a lot of energy and effort is being spent on trying to find a way to avoid consent. That energy and effort would be much better spent establishing informed, active, unambiguous consent.

You say you will lose customers. I say you will have better engagement with them and be better able to direct more targeted marketing to them. You will have complete confidence that your customers have given informed consent.

Report on ePrivacy Regulation draft (Oct 2017)


23 October 2017
PE 606.011v02-00 A8-0324/2017
on the proposal for a regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58/EC (Regulation on Privacy and Electronic Communications)

(COM(2017)0010 – C8-0009/2017 – 2017/0003(COD))

Committee on Civil Liberties, Justice and Home Affairs
Rapporteur: Marju Lauristin