Data Protection Monitor
Global Privacy & Data Protection Intelligence

Germany (DE) · Module Detail

Germany: AdTech & Commercial Privacy

← Full Germany overview Build report with Germany Request deeper dive

#

Cookie/tracker consent regime is mature and green, but clean-room and cross-context-advertising sub-modules have no identified DE-specific statutory basis, and dark-pattern guidance rests on DSK soft-law rather than binding statute.

Primary frameworkTTDSG/TDDDG §25 (cookies/trackers); GDPR Art 21 (direct marketing objection)
Supervisory authorityBfDI (federal telecoms); Land DPAs (general commercial adtech)
Traffic-light rationale — AmberCookie/tracker consent regime is mature and green, but clean-room and cross-context-advertising sub-modules have no identified DE-specific statutory basis, and dark-pattern guidance rests on DSK soft-law rather than binding statute.

Sub-modules (6)

Cookies And TrackersGreen

TTDSG §25(1) consent requirement for terminal-equipment storage/access, narrow §25(2) strict-necessity exception.

Claims (2):

  • TTDSG/TDDDG §25(1) requires consent for storage of or access to information on end-user terminal equipment regardless of whether personal data processing occurs.
  • TTDSG/TDDDG §25(2) provides a narrow strict-necessity exception to the cookie/tracker consent requirement.

Dark PatternsAmber

DSK guidance treats cookie walls as non-compliant, though this rests on soft-law/regulatory guidance rather than a codified statutory prohibition.

Claims (1):

  • DSK (Konferenz der unabhängigen Datenschutzaufsichtsbehörden) treats cookie walls as non-compliant, per soft-law guidance rather than a codified statutory prohibition. No DSK-specific cookie-wall guidance document independently retrieved this pass; general Telemedien Rundschreiben used as proxy.

Opt Out SignalsRed

No DE-specific statutory recognition of Global Privacy Control or equivalent opt-out signals was identified.

Absence provenance: unavailable. Searched: Global Privacy Control Deutschland TTDSG Anerkennung.

Clean Rooms And DcrRed

No DE-specific clean-room/data-collaboration-room statutory regime was identified.

Absence provenance: unavailable. Searched: Clean Room Datenschutz Deutschland Regelung.

Cross Context AdvertisingAmber

No CPRA-style statutory 'sale'/'share' concept exists in German law; cross-context advertising is governed by general GDPR consent/legitimate-interest rules.

Absence provenance: unavailable. Searched: cross-context advertising Germany equivalent CPRA sale share.

Direct MarketingGreen

Art 21(2) GDPR absolute objection right to direct-marketing processing, operationalised via BfDI model objection letters.

Claims (1):

  • GDPR Article 21(2) grants an absolute objection right to direct-marketing processing, operationalised via BfDI model objection correspondence.

Key findings (3)

  • — source on file
  • — source on file
  • — source on file
Category narrative70 words

TTDSG §25 supplies Germany's core cookie/tracker consent rule, requiring consent for any storage of or access to information on end-user terminal equipment regardless of whether personal data processing occurs, with a narrow strict-necessity exception. Cookie walls are treated by German DPAs as non-compliant. Direct-marketing objection rights under Art 21(2) GDPR are operationalised via BfDI model correspondence. Dedicated clean-room/data-collaboration-room and cross-context-advertising (CPRA-style) rules were not identified as part of German law.

no periodic updates on record for this sub-brief

Sources and claims (4)
  1. ProbableBfDI — TTDSG/TDDDG §25(1) requires consent for storage of or access to information on end-user terminal equipment regardless of whether personal data processing occurs.observed
  2. ProbableOneTrust DataGuidance — TTDSG/TDDDG §25(2) provides a narrow strict-necessity exception to the cookie/tracker consent requirement.observed
  3. UncertainBfDI — DSK (Konferenz der unabhängigen Datenschutzaufsichtsbehörden) treats cookie walls as non-compliant, per soft-law guidance rather than a codified statutory prohibition. No DSK-specific cookie-wall guidance document independently retrieved this pass; general Telemedien Rundschreiben used as proxy.observed
  4. ProbableBfDI — GDPR Article 21(2) grants an absolute objection right to direct-marketing processing, operationalised via BfDI model objection correspondence.observed