The European Data Protection Supervisor (EDPS) received a complaint from a data subject against the Court of Justice of the European Union (CJEU). It deemed that the CJEU’s website, as well as the sites to which it sent users (the “third sites“), did not comply with the necessary tracking requirements.

The EDPS held that the CJEU did not validly inform users that YouTube cookies could be installed on their devices. In addition, it remarked that the procedure to refuse cookies was much more complex than that for accepting them.

Moreover, the EDPS noted that the CJEU had no obligation to inform users of cookies placed on third sites. Sending users to third sites did not require it to inform them of the cookies that those sites placed on the device being used.

Shortly after the complaint was filed, the CJEU rectified those issues with the help of the EDPS, something which allowed it to avoid corrective measures the EDPS could impose upon it.

You can find the decision here.