Brave

…www.brave.com 16 August 2018 Re: Consistency of consent guidance, CNIL and Article 29 Working Party Dear Mag. Dr. Jelinek, I represent Brave, a rapidly growing privacy-focussed Internet browser. Brave’s CEO, Brendan Eich, is the inventor of JavaScript, and co-founded Mozilla/Firefox. I would like to draw your attention to this page on the CNIL website: https://www.cnil.fr/fr/cookies-comment-mettre-mon-site-web-en- conformite. The page presents the following guidance: “…la poursuite de sa navigation vaut accord au dépôt de Cookies sur son terminal”. (In English, “…continuation of navigation signals agreement to the storing of Cookies on its terminal.”) CNIL’s guidance on this important point is inconsistent with that of the Article 29 Working Party, in “Guidelines on consent under Regulation 2016/679”, revised and adopted on 10 April 2018.

…29 Working Party, in “Guidelines on consent under Regulation 2016/679”, revised and adopted on 10 April 2018. Page 17 of the Article 29 Working Party Guidelines says: “…merely continuing the ordinary use of a website is not conduct from which one can infer an indication of wishes by the data subject to signify his or her agreement to a proposed processing operation.” Ref. Ares(2020)2267838 - 28/04/2020 www.brave.com The Working Party further emphasised the point that continued navigation must not be regarded as an indication of consent with a practical example (“example 16”) in the Guidance. The CNIL guidance should be consistent with the Article 29 Working Party Guidance, in order for the application of the Regulation to be consistent throughout the Union. We hope that you will discuss this with your colleagues at CNIL to remedy this situation at the earliest opportunity.

We hope that you will discuss this with your colleagues at CNIL to remedy this situation at the earliest opportunity. Sincerely, Dr Johnny Ryan FRHistS Chief Policy & Industry Relations

Officer Brave MagǯȱDrǯȱJelinekȱ ÖsterreichischeȱDatenschutzbehördeȱȱ Wickenburggasseȱ8ȱȱ 1080ȱWienȱ ȱ 4ȱOctoberȱ2018ȱȱ ȱ ȱ ReDZȱConsistencyȱofȱconsentȱguidanceǰȱCNILȱandȱArticleȱŘşȱWorkingȱPartyȱ ȱ ȱ DearȱMagǯȱDrǯȱJelinekǰȱȱ ȱ ItȱwasȱaȱpleasureȱtoȱmeetȱyouȱinȱDublinǯȱȱ ȱ Iȱwriteȱtoȱaskȱwhetherȱyouȱhaveȱhadȱanȱopportunityȱtoȱactȱonȱmyȱletterȱofȱ16ȱAugustȱ 2018ǰȱwhichȱIȱencloseȱherewithȱforȱyourȱconvenienceǯȱIȱreceivedȱnoȱresponseǯȱȱ ȱ IȱwriteȱtoȱreiterateȱconcernsȱaboutȱtheȱconsentȱguidanceȱpublishedȱbyȱCNILǯȱIȱalsoȱ alertȱyouȱtoȱaȱrelatedȱconcernȱaboutȱconsentȱguidanceȱpublishedȱbyȱSpainȂsȱAEPDǯȱȱ ȱ CommissionȱNationaleȱdeȱlȇInformatiqueȱetȱdesȱLibert·sȱȱ CNILȂsȱguidanceȱonȱtheȱimportantȱissueȱofȱconsentȱremainsȱinconsistentȱwithȱthatȱofȱ theȱArticleȱ29ȱWorkingȱPartyǰȱinȱȃGuidelinesȱonȱconsentȱunderȱRegulationȱ2016Ȧ679Ȅǰȱ revisedȱandȱadoptedȱonȱ10ȱAprilȱ2018ǯȱȱ ȱ…

…entȱunderȱRegulationȱ2016Ȧ679Ȅǰȱrevisedȱandȱ adoptedȱonȱ10ȱAprilȱ2018ǯȱ ȱȱ SanȱFranciscoȻȱ512ȱSecondȱStǯǰȱFloorȱ2ǰȱSanȱFranciscoǰȱCAȱ94107ȱȊȱȻLondonȻȱMindspaceȱShoreditchǰȱ9ȱAppoldȱStǯǰȱLondonǰȱEC2Aȱ2APȱ Pageȱ17ȱofȱtheȱArticleȱ29ȱWorkingȱPartyȱGuidelinesȱsaysDZȱȱ ȱȱ ȃdzmerelyȱcontinuingȱtheȱordinaryȱuseȱofȱaȱwebsiteȱisȱnotȱconductȱfromȱwhichȱ oneȱcanȱinferȱanȱindicationȱofȱwishesȱbyȱtheȱdataȱsubjectȱtoȱsignifyȱhisȱorȱherȱ agreementȱtoȱaȱproposedȱprocessingȱoperationǯȄȱ ȱȱ TheȱWorkingȱPartyȱfurtherȱemphasisedȱtheȱpointȱthatȱcontinuedȱnavigationȱmustȱnotȱ beȱregardedȱasȱanȱindicationȱofȱconsentȱwithȱaȱpracticalȱexampleȱǻȃexampleȱ16ȄǼȱinȱ theȱGuidanceǯȱ

…ȱ ȱ IȱnoteȱthatȱtheȱCNILȂsȱguidanceȱremainsȱavailableȱonȱCNILȇsȱwebsiteȱtodayȱǻURLDZȱ httpsDZȦȦwwwǯcnilǯfrȦfrȦcookiesȬcommentȬmettreȬmonȬsiteȬwebȬenȬconformiteȻǼǯȱȱ ȱ InȱshortǰȱCNILȱpubliclyȱadvisesȱthatȱȃimpliedȱconsentȄȱisȱacceptableǰȱwhereasȱtheȱ EuropeanȱDataȱProtectionȱBoardǰȱwhichȱincludesȱCNILǰȱpubliclyȱadvisesȱtheȱ oppositeǯȱȱ ȱ AgenciaȱEspaÛolaȱdeȱProtecciànȱdeȱDatosȱȱ ItȱhasȱalsoȱcomeȱtoȱmyȱattentionȱthatȱSpainȇsȱAgenciaȱEspañolaȱdeȱProtecciónȱdeȱ DatosȱhasȱpublishedȱguidanceȱonȱconsentȱthatȱisȱalsoȱinconsistentȱwithȱthȻeȱWorkingȱ Partyȇsȱguidanceǯȱȱ ȱ IȱreferȱtoȱaȱpublicationȱfromȱtheȱSpanishȱDataȱProtectionȱAuthorityȱtitledȱȃGuíaȱdelȱ ReglamentoȱGeneralȱdeȱProtecciónȱdeȱDatosȱparaȱresponsablesȱdeȱtratamientoȄǯȱThisȱ isȱavailableȱonȱAEPDȂsȱwebsiteȱtodayȱǻURLDZȱ httpsDZȦȦwwwǯaepdǯesȦmediaȦguiasȦguiaȬrgpdȬparaȬresponsablesȬdeȬtratamientoǯpdfȻǼǯȱ…

…ȱacceptsȱthatȱcookiesȱareȱusedȱtoȱmonitorȱyourȱ browsingǼǯȈȱ ȱ ThisȱdocumentȱhasȱbeenȱavailableȱfromȱtheȱAEPDȂsȱwebsiteȱsinceȱNovemberȱ2017ǯȱȱ ȱ SanȱFranciscoȻȱ512ȱSecondȱStǯǰȱFloorȱ2ǰȱSanȱFranciscoǰȱCAȱ94107ȱȊȱȻLondonȻȱMindspaceȱShoreditchǰȱ9ȱAppoldȱStǯǰȱLondonǰȱEC2Aȱ2APȱ Requestȱȱ Thereȱareȱsignificantȱconcernsȱhereȱthatȱmeritȱexaminationȱinȱorderȱtoȱensureȱtheȱ consistentȱandȱhomogenousȱapplicationȱofȱtheȱRegulationȱthroughoutȱtheȱUnionǯȱ ThereforeȱIȱrequestȱthatȱtheȱDSBȱexploreȱtheseȱissuesǰȱasȱArticleȱ70ȱǻ1Ǽȱeȱofȱtheȱ Regulationȱempowersȱitȱtoǯȱȱ ȱ Inȱmyȱletterȱofȱ16ȱAugustȱ2018ǰȱIȱrequestedȱthatȱyouȱdiscussȱtheȱmatterȱofȱȈimpliedȱ consentȈȱguidanceȱwithȱyourȱcolleaguesȱatȱCNILǰȱandȱactȱtoȱremedyȱtoȱthisȱsituationǯȱ IȱreiterateȱthatȱrequestȱnowǰȱandȱbroadenȱthatȱrequestȱtoȱincludeȱAEPDǯȱȱ ȱ Iȱwouldȱbeȱgratefulȱifȱyouȱcouldȱkeepȱmeȱupdatedȱonȱtheȱstepsȱtakenȱinȱresponseȱtoȱ…

Party ȱ ȱ Dea›ȱMagǯȱD›ǯȱJelinekǰȱȱ ȱ Iȱ›efe›ȱ˜ȱm¢ȱlee›ȱ˜fȱŗŜȱAžgžœǰȱ˜ȱ hichȱIȱhaŸeȱ›eceiŸedȱn˜ȱ›e™l¢ǯȱȱ ȱ Iȱalœ˜ȱ›efe›ȱ˜ȱm¢ȱlee›ȱ˜fȱŚȱOc˜be›ǰȱ˜ȱ hichȱIȱhaŸeȱalœ˜ȱ›eceiŸedȱn˜ȱ›e™l¢ǯȱȱ ȱ Theœeȱlee›œȱ›aiœedȱim™˜›anȱc˜nce›nœȱab˜žȱheȱc˜nœenȱgžidanceȱ™žbliœhedȱb¢ȱ F›anceȂœȱCNILȱandȱS™ainȂœȱAEPDǰȱ hichȱa›eȱaȱ˜ddœȱinȱim™˜›anȱ›eœ™ecœȱf›˜mȱ A›icleȱŘşȱW˜›kingȱPa›¢ȱgžidanceǯȱȱ ȱ Aœȱ¢˜žȱkn˜ ǰȱ˜neȱiœȱeniledȱ˜ȱ›eceiŸeȱaȱ›e™l¢ȱ ihinȱŗśȱ ˜›kingȱda¢œǰȱafe›ȱ hichȱ imeǰȱheȱOmbždœmanȱcanȱbeȱengagedǯȱȱ ȱ Iȱd˜ȱŸe›¢ȱmžchȱh˜™eȱ˜ȱhea›ȱf›˜mȱ¢˜žȱœ˜˜nȱ˜nȱhiœȱ™›eœœingȱmae›ǯȱȱ ȱ Since›el¢ǰȱȱ D›ȱJ˜hnn¢ȱR¢anȱFRHiœSȱȱ ChiefȱP˜lic¢ȱǭȱIndžœ›¢ȱRelai˜nœȱOffice›ȱȱ B›aŸeȱȱ San Francisco​ȱśŗŘȱSec˜ndȱSǯǰȱFl˜˜›ȱŘǰȱSanȱF›anciœc˜ǰȱCAȱşŚŗŖŝȱȊȱȻLondon​ȱMindœ™aceȱSh˜›edichǰȱşȱA™™˜ldȱSǯǰȱL˜nd˜nǰȱECŘAȱŘAPȱ MrȱOlivierȱMicolȱȱ HeadȱofȱUnitȱȱ DataȱProtectionȱUnitȱC3ȱ EuropeanȱCommissionȱDGȱJusticeȱ…

Internet browser with ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ offices in San Francisco and Londonǰ and employees across the EU.

BraveȂs ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ CEOǰ Brendan Eichǰ is the inventor of JavaScriptǰ and coȬfounded ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ ȱ MozillaȦFirefox.ȱȱ ȱ Iȱwriteȱtoȱraiseȱaȱconcernȱaboutȱtheȱguidanceȱonȱconsentȱpublishedȱbyȱatȱleastȱ twoȱdataȱprotectionȱauthoritiesǰȱwhichȱdiffersȱinȱimportantȱaspectsȱfromȱthatȱ agreedȱandȱpublishedȱbyȱtheȱArticleȱ29ȱWorkingȱPartyȱȻinȱȃGuidelinesȱonȱ consentȱunderȱRegulationȱ2016Ȧ679Ȅǰȱrevisedȱandȱadoptedȱonȱ10ȱAprilȱ2018ǰȱ andȱnowȱendorsedȱbyȱtheȱEuropeanȱDataȱProtectionȱBoard.ȱȱ ȱ CommissionȱNationaleȱdeȱlȇInformatiqueȱetȱdesȱLibertésȱȱ IȱdrawȱyourȱattentionȱtoȱthisȱpageȱonȱtheȱCNILȱwebsiteDZȱ httpsDZȦȦwww.cnil.frȦfrȦcookiesȬcommentȬmettreȬmonȬsiteȬwebȬenȬconformiteȻ.ȱ TheȱpageȱpresentsȱtheȱfollowingȱguidanceDZȱȱ ȱȱ ȃdzlaȱpoursuiteȱdeȱsaȱnavigationȱvautȱaccordȱauȱdépôtȱdeȱCookiesȱsurȱ sonȱterminalȄ.ȱȱ ȱȱ…

…ration.Ȅȱ ȱȱ TheȱBoardȂsȱGuidelinesȱfurtherȱemphasiseȱtheȱpointȱthatȱcontinuedȱnavigationȱ mustȱnotȱbeȱregardedȱasȱanȱindicationȱofȱconsentǰȱandȱreinforcesȱtheȱpointȱbyȱ providingȱaȱpracticalȱexampleȱofȱthisȱǻȃexampleȱ16ȄǼ.ȱȱ ȱ AgenciaȱEspaÛolaȱdeȱProtecciànȱdeȱDatosȱȱ IȱalsoȱdrawȱyourȱattentionȱtoȱguidanceȱpublishedȱbyȱSpainȇsȱAgenciaȱEspañolaȱ deȱProtecciónȱdeȱDatosǰȱtitledȱȻȃGuíaȱdelȱReglamentoȱGeneralȱdeȱProtecciónȱdeȱ DatosȱparaȱresponsablesȱdeȱtratamientoȄǰȱwhichȱisȱavailableȱonȱtheȱAEPDȱ websiteDZȱ httpsDZȦȦwww.aepd.esȦmediaȦguiasȦguiaȬrgpdȬparaȬresponsablesȬdeȬtratamient o.pdfȻ.ȱPageȱ6ȱofȱthisȱdocumentȱpresentsȱtheȱfollowingȱguidanceDZȱȱ ȱ ȈElȱconsentimientoȱpuedeȱserȱinequívocoȱyȱotorgarseȱdeȱformaȱimplícitaȱ cuandoȱseȱdȻeduzcaȱdeȱunaȱacciónȱdelȱinteresadoȱǻporȱejemploǰȱcuandoȱ elȱinteresadoȱcontinúaȱnavegandoȱporȱunaȱwebȱyȱaceptaȱasíȱelȱqueȱseȱ…

…sȱtheseȱ authoritiesǰȱpubliclyȱadvisesȱtheȱopposite.ȱȱ SanȱFranciscoȻȱ512ȱSecondȱSt.ǰȱFloorȱ2ǰȱSanȱFranciscoǰȱCAȱ94107ȱȊȱȻLondonȻȱMindspaceȱShoreditchǰȱ9ȱAppoldȱSt.ǰȱLondonǰȱEC2Aȱ2APȱ ȱ ToȱensureȱȻconsistentȱandȱhomogenousȱapplicationȱofȱtheȱRegulationȱ throughoutȱtheȱUnionǰȱthisȱmustȱbeȱurgentlyȱcorrected.ȱThereforeǰȱIȱrequestȱ thatȱyouȱemployȱyourȱpowerȱunderȱArticleȱ70ȱǻ1ǼȱeȱofȱtheȱGDPRȱtoȱrequestȱ thatȱtheȱEuropeanȱDataȱProtectionȱBoardȱexamineȱtheseȱissues.ȱȱ ȱ Iȱwouldȱbeȱgratefulȱifȱyouȱcouldȱkeepȱmeȱupdatedȱonȱtheȱstepsȱtakenȱinȱ responseȱtoȱthisȱrequest.ȱȱ ȱ Sincerelyǰȱȱ ȱ DrȱJohnnyȱRyanȱFRHistSȱȱ ChiefȱPolicyȱ&ȱIndustryȱRelationsȱOfficerȱȱ Braveȱȱ SanȱFranciscoȻȱ512ȱSecondȱSt.ǰȱFloorȱ2ǰȱSanȱFranciscoǰȱCAȱ94107ȱȊȱȻLondonȻȱMindspaceȱShoreditchǰȱ9ȱAppoldȱSt.ǰȱLondonǰȱEC2Aȱ2APȱ M›ȱOliŸie›ȱMic˜lȱȱ Headȱ˜fȱUniȱȱ DaaȱP›˜eci˜nȱUniȱCřȱ Ež›˜™eanȱC˜mmiœœi˜nȱDGȱJžœiceȱ…

22 → 12

originalus šaltinis (PDF) ↗