Comment by kodebach

1 day ago

Well if the cookie comes from a third party it implicitly allows tracking.

Also AFAIK the Google Fonts question (is the IP alone already PII, if Google has no way of tying the IP to a person) has not been decided by the ECJ yet. There've only been decisions by lower level German courts that are still in dispute.

IP addresses are PII according to german law, that debate has been settled long ago by final court-rulings afaik.

"Well if the cookie comes from a third party it implicitly allows tracking."

Yes, because this makes tracking possible you have to gather consent first, regardless if tracking actually happens. Very bad solution, they could just define how data can be legally used, instead of also overreaching by defining how data can be legally transmitted.