Battle over cookies: What the new data protection law means for users!

Battle over cookies: What the new data protection law means for users!

Today, June 20, 2025, all signs point to change, especially when it comes to the use of cookies and data protection on the Internet. The legal framework for cookies has long been a hot topic, and many website operators have often found themselves navigating uncertain waters. Trinity music reports on the latest developments that may affect both operators and users.

Cookie banners can now be found almost everywhere. They are intended to ensure that data security is maintained and the legal framework becomes clearer. A look at the basics shows that the legal situation regarding cookies in Germany was anything but clear until recently. Loud WBS Many operators used simple “Ok” buttons that didn’t really give the user a choice. The Telecommunications Telemedia Data Protection Act (TTDSG), which has been in force since December 2021, has made some regulations here, but many questions remain unanswered.

The meaning of cookies and your consent

What are cookies actually? Essentially, these are small text files that website operators store to recognize users. There are different categories of cookies that can be divided into two large groups: necessary cookies, used for example for shopping cart and login status, and analytical and marketing cookies, used for behavioral analysis and personalized advertising. Consent is only not required for absolutely necessary cookies, which is not easy to define because there is no binding catalog for them.

The use of cookies for marketing purposes, however, always requires the user's explicit consent. The BfDI highlights that there are currently many legal questions about cookie banners, such as the appropriate design or the equivalence of the consent and rejection options. It's no secret that warnings due to lack of consent are common.

What comes after the ePrivacy Regulation?

An important aspect for the future is the so-called ePrivacy Regulation, which aims to improve the protection of privacy in electronic communication. The plan was to bring this regulation into force together with the General Data Protection Regulation (GDPR). But the EU Commission has withdrawn the project from the work program for 2025. The reasons for this are varied and range from a lack of agreement in the Council to the complexity of the regulations.

However, the “Digital Package”, a new law, is planned for the end of 2025, which will deal with several regulations on the digital legal situation at the same time. The success of this venture could fundamentally change the way companies handle data and provide greater clarity. The BfDI would like the data protection rules of the ePrivacy Regulation to be taken into account in this new context.

In the meantime, it remains to be seen how these developments will affect everyday internet use. One thing is certain: the discussion about data protection and cookies remains a topic that will continue to concern everyone in the future - entrepreneurs and users alike.