#40: Nordic Cookie Special

This week Pilvi and Milla do a deep dive into two recent cookie related rulings from Nordic data protection authorities. First we discuss the Bonnier case from IMY, the Swedish data protection authority. Whilst not strictly only about cookies, this case discusses the further processing of data collected with cookies - and more specifically, whether this processing can be based on legitimate interest (IMY says no). The second half of the show we discuss Traficom’s ruling on the Nordic media company Sanoma’s cookie practices. Lots to unpack there: necessity of certain analytics cookies, retention times, representation of legitimate interest in cookie banners and much more. Both of the cases have been appealed.   Links: Sanoma Media Finland Oy.pdf (kyberturvallisuuskeskus.fi) Tillsyn: Bonnier News AB | IMY   Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email: Twitter: https://twitter.com/PodPrivacy, #privacypod Instagram: @privacypod LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/ Email: [email protected]