The Finnish Transport and Communication Agency (Traficom) has published advices in order to support online service providers and users on cookie policies and the implementation of the law. The revised guideline follows the decisions made up by the Administrative Court in spring 21021, which has clarified the interpretation of the regulation on the cookie consent. After judgements on the Administrative Court, the Office of the Personal Data Protection Authority has referred to traficom complaints on cookie and its consent.
The revised guideline of Traficom aim to clarify practices connected to cookie and improve the confidentiality and privacy of communication of users when they were using electronical services. The guidelines were developed in cooperation with the Personal Data Protection Office.
The user’s guideline of online services helps them to understand how cookie work and provides tips on how can affect information which are stored on their terminal. The provider’s guideline will guide online service providers on how to store and use cookie, how to ask the consent for cookie and how to inform users on cookie as requested by the law.
The judgements of the Court during Spring 2021 were in compliance with the coherent politic of the Authority on cookie requirement. The consent for the usage of cookie shall be in compliance with consent disposals pursuant to the General Data Protection Regulation. These conditions were taken into account in new guidelines of Traficom.
The administrative Court has also declared that during Spring the Authority for the cookie’s control is Traficom. During Summer, the Office of the Personal Data Protection Authority has referred to Traficom about 100 complaints about the consent storage and the cookie usage. Traficom has started processing complaints and it says that will be in contact with all the complainant during the processing.
The Office of the Personal Data Protection Authority is still the relevant authority for questions connected to non-consensual cookies which affect the personal data processing. Among these questions there are international transfers of data and the additional processing of recollected data.