On 1 October 2019, the Court of Justice of the European Union (CJEU) ruled on a number of questions which, inter alia, relate to the validity of consent to cookies "by way of a pre-checked checkbox" (Case C 673/17). Although the questions referred to the CJEU primarily related to provisions of the Privacy and Electronic Communications Directive (2002/58/EG), the CJEU stated that the questions must be answered also in regard to the EU General Data Protection Regulation (GDPR).
In his opinion dated 21 March 2019, the AG also addressed the requirement of a "separate" consent which the CJEU did not consider. The AG opined that for consent to be "freely given" and "informed" (as required, inter alia, under Art. 4, No. 11 of the GDPR), "it must not only be active, but also separate." The requirement of separate consent implies that an activity that a user pursues on the Internet (e.g., reading a webpage) and the giving of consent do not "form part of the same act." In particular, from the perspective of the user, the giving of consent should "not appear to be of an ancillary nature" to the user's' Internet activities. The giving of consent should "optically in particular, be presented on an equal footing" with other actions such as (as in the case before the referring court) hitting a "participation button." Whether the CJEU agrees with the AG's view on the issue on separateness remains to be confirmed.
Agreeing again with the AG, the CJEU ruled that the website user having "clear and...