Report reviews the implementation of some of the specification clauses of Regulation (EU) 2016/679 (GDPR) by the EU Member States. The specification clauses covered by this report are those in Article 8(1), Article 9(4), Article 23(1), points (c) and (e), Article 23(2), Article 85(1) and (2) and Article 89(2), (3) and (4) GDPR. This assessment is based on the national laws in force as at 19 December 2019.
Recommendations 2/2025 on the legal basis for requiring the creation of user accounts on e-commerce websites
The EDPB clarifies that mandatory user accounts are only lawful under the GDPR when they are strictly necessary and respect […]