Cookies, privacy and data protection

Main Article Content

Silvia Cardoso

Abstract

This paper aims to analyze issues related to cookies, privacy, and data protection, providing a critical overview of relevant literature and regulatory frameworks. It examines the implications of cookie usage in the context of the General Data Protection Regulation (GDPR), highlights current challenges, and discusses emerging trends such as the decline of third-party cookies and the rise of alternative tracking technologies. The paper concludes by proposing measures that organizations should adopt to ensure compliance and enhance user privacy in an evolving digital landscape.

Downloads

Download data is not yet available.

Article Details

How to Cite
Cardoso, S. . (2026). Cookies, privacy and data protection. Legal Journal (J²), 8(1), 56–60. https://doi.org/10.29073/j2.v8i1.1124
Section
Artigo
Author Biography

Silvia Cardoso, ESTG-IPP

Licenciada em Solicitadoria e Mestre em Práticas Jurídico-Digitais, ESTG-IPP

References

Alharbi, J. A., Albesher, A. S., & Wahsheh, H. A. (2023). An empirical analysis of e-governments’ cookie interfaces in 50 countries. Sustainability, 15(2), 1231. https://www.mdpi.com/2071-1050/15/2/1231

Commission Nationale de l’Informatique et des Libertés (CNIL). (2024). Dark patterns in cookie banners: CNIL issues formal notice to website publishers. https://www.cnil.fr/en/dark-patterns-cookie-banners-cnil-issues-formal-notice-website-publishers

Commission Nationale de l’Informatique et des Libertés (CNIL). (2025). Cookie regulation: CNIL continuing action plan and sanctions. https://www.cnil.fr/en/cookie-regulation-cnil-continuing-action-plan-initiated-2019-and-has-imposed-two-fines-shein-and

Commission Nationale de l’Informatique et des Libertés (CNIL). (2026). Sanctions and corrective measures: CNIL’s actions in 2025. https://www.cnil.fr/en/sanctions-and-corrective-measures-cnils-actions-2025

Cui, Y. (2021). Measure cookie setting behavior of web pages showing cookie privacy warnings (Master’s thesis, University of Edinburgh). https://groups.inf.ed.ac.uk/tulips/projects/20-21/cui.pdf

European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation). https://eur-lex.europa.eu/legal-content/PT/TXT/?uri=CELEX%3A02016R0679-20160504

Grossman, R., Smith, M., Borcea, C., & Chen, Y. (2025). Using salient object detection to identify manipulative cookie banners that circumvent GDPR. https://arxiv.org/pdf/2510.26967

Jayakumar, L. N. (2021). Cookies ‘n’ consent: An empirical study on the factors influencing website users’ attitudes towards cookie consent in the EU. DBS Business Review. https://dbsbusinessreview.ie/index.php/journal/article/view/72

Lima, C. R. C., Silva, I. F. S., Silva, R. D., & Carr, C. N. (2023). Cookies and their close relationship with data protection policy. Brazilian Journal of Development. https://ojs.brazilianjournals.com.br/ojs/index.php/BRJD/article/view/56231/41313

Nouwens, M., Kristensen, J. B., Maalt, K., & Bagge, R. (2025). A cross-country analysis of GDPR cookie banners and compliance: Flexible methods for scraping them.

Rasaii, A., Dao, H., Feldmann, A., Javid, M., Gasser, O., & Gosain, D. (2025). Intractable cookie crumbs: Unveiling the nexus of stateful banner interaction and tracking cookies. https://www.researchgate.net/publication/395442240_Intractable_Cookie_Crumbs_Unveiling_the_Nexus_of_Stateful_Banner_Interaction_and_Tracking_Cookies