Cookies, privacy and data protection
Main Article Content
Abstract
This paper aims to analyze issues related to cookies, privacy, and data protection, providing a critical overview of relevant literature and regulatory frameworks. It examines the implications of cookie usage in the context of the General Data Protection Regulation (GDPR), highlights current challenges, and discusses emerging trends such as the decline of third-party cookies and the rise of alternative tracking technologies. The paper concludes by proposing measures that organizations should adopt to ensure compliance and enhance user privacy in an evolving digital landscape.
Downloads
Article Details

This work is licensed under a Creative Commons Attribution 4.0 International License.
References
Alharbi, J. A., Albesher, A. S., & Wahsheh, H. A. (2023). An empirical analysis of e-governments’ cookie interfaces in 50 countries. Sustainability, 15(2), 1231. https://www.mdpi.com/2071-1050/15/2/1231
Commission Nationale de l’Informatique et des Libertés (CNIL). (2024). Dark patterns in cookie banners: CNIL issues formal notice to website publishers. https://www.cnil.fr/en/dark-patterns-cookie-banners-cnil-issues-formal-notice-website-publishers
Commission Nationale de l’Informatique et des Libertés (CNIL). (2025). Cookie regulation: CNIL continuing action plan and sanctions. https://www.cnil.fr/en/cookie-regulation-cnil-continuing-action-plan-initiated-2019-and-has-imposed-two-fines-shein-and
Commission Nationale de l’Informatique et des Libertés (CNIL). (2026). Sanctions and corrective measures: CNIL’s actions in 2025. https://www.cnil.fr/en/sanctions-and-corrective-measures-cnils-actions-2025
Cui, Y. (2021). Measure cookie setting behavior of web pages showing cookie privacy warnings (Master’s thesis, University of Edinburgh). https://groups.inf.ed.ac.uk/tulips/projects/20-21/cui.pdf
European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation). https://eur-lex.europa.eu/legal-content/PT/TXT/?uri=CELEX%3A02016R0679-20160504
Grossman, R., Smith, M., Borcea, C., & Chen, Y. (2025). Using salient object detection to identify manipulative cookie banners that circumvent GDPR. https://arxiv.org/pdf/2510.26967
Jayakumar, L. N. (2021). Cookies ‘n’ consent: An empirical study on the factors influencing website users’ attitudes towards cookie consent in the EU. DBS Business Review. https://dbsbusinessreview.ie/index.php/journal/article/view/72
Lima, C. R. C., Silva, I. F. S., Silva, R. D., & Carr, C. N. (2023). Cookies and their close relationship with data protection policy. Brazilian Journal of Development. https://ojs.brazilianjournals.com.br/ojs/index.php/BRJD/article/view/56231/41313
Nouwens, M., Kristensen, J. B., Maalt, K., & Bagge, R. (2025). A cross-country analysis of GDPR cookie banners and compliance: Flexible methods for scraping them.
Rasaii, A., Dao, H., Feldmann, A., Javid, M., Gasser, O., & Gosain, D. (2025). Intractable cookie crumbs: Unveiling the nexus of stateful banner interaction and tracking cookies. https://www.researchgate.net/publication/395442240_Intractable_Cookie_Crumbs_Unveiling_the_Nexus_of_Stateful_Banner_Interaction_and_Tracking_Cookies