Sources

Lovdata

Section 3-15 requires prior consent, valid under the GDPR, before anyone stores or retrieves information in a user's communications equipment. In force from 1 January 2025.

Published 13 December 2024 · Retrieved 1 August 2026

Datatilsynet

The seven conditions for valid consent, the division of supervisory responsibility between the Data Protection Authority and Nkom, and the exemptions in section 3-15, second paragraph.

Retrieved 1 August 2026

Datatilsynet

The Data Protection Authority's notice that the new consent requirement took effect on 1 January 2025.

Retrieved 1 August 2026

Nkom (Nasjonal kommunikasjonsmyndighet)

Nkom's role: assessing whether a technical solution falls under section 3-15 and whether the exemptions are met.

Retrieved 1 August 2026

Datatilsynet

The Data Protection Authority questions whether consent is genuinely freely given when the alternative is 39 kroner a month. It has not concluded that the arrangement is unlawful, and has asked the industry to await the EDPB's work. Published 30 April 2026, updated 8 June 2026.

Published 30 April 2026 · Retrieved 1 August 2026

European Data Protection Board

Non-binding opinion: large online platforms will in most cases be unable to obtain valid consent through a bare choice between consenting and paying. An equivalent alternative without behavioural advertising should be offered.

Published 17 April 2024 · Retrieved 1 August 2026

European Data Protection Board

The EDPB's own summary of Opinion 08/2024.

Published 17 April 2024 · Retrieved 1 August 2026

Tek.no

The Norwegian Consumer Council has lodged a complaint about Schibsted's payment model with the Data Protection Authority.

Retrieved 1 August 2026

Irish Council for Civil Liberties

Real-time bidding broadcasts what people are viewing and where they are, 178 trillion times a year across the United States and Europe combined. Per person: an average of 376 times daily in Europe, 747 in the US. The report was originally hosted at iccl.ie and has since moved to enforce.ie.

Published 16 May 2022 · Retrieved 1 August 2026

The Markup

The Meta Pixel was found on the websites of 33 of America's 100 largest hospitals, sending data whenever someone booked an appointment. At seven health systems it sat inside password-protected patient portals, collecting data on prescriptions, sexual orientation and health conditions.

Published 16 June 2022 · Retrieved 1 August 2026

The Markup

After the investigation was published, 28 hospitals removed or blocked the pixel.

Published 19 September 2022 · Retrieved 1 August 2026

Matte, Bielova & Teixeira Santos — IEEE S&P 2020

A survey of 22,949 European websites carrying IAB TCF consent banners. Rigorous testing of 560 of them found at least one violation in 54%. 141 stored positive consent before the user had chosen, 236 pre-selected options, and 27 stored positive consent even after an explicit opt-out.

Published 22 November 2019 · Retrieved 1 August 2026

Nouwens, Liccardi, Veale, Karger & Kagal — CHI 2020

Of 680 consent banners examined across the 10,000 most visited UK websites, only 11.8% met the minimum requirements of European law. Removing the reject button from the first page raised consent rates by 22–23 percentage points.

Published 8 January 2020 · Retrieved 1 August 2026

CNN

A review of documented use and misuse of Flock's licence plate readers in American policing.

Published 26 July 2026 · Retrieved 1 August 2026

GlobeNewswire (Flock Safety)

Five officers in Albany, Georgia lost their jobs and were subsequently arrested after an internal audit uncovered searches with no legitimate investigative purpose.

Published 8 July 2026 · Retrieved 1 August 2026

Mission Local

Federal and out-of-state agencies searched San Francisco's licence plate data in a manner the department itself described as “improperly”. The audit found 299 unlawful queries over a single year.

Published 17 June 2026 · Retrieved 1 August 2026

Institute for Justice

A running count of cases in which officers used licence plate readers to monitor current or former partners. The count had reached at least 28 by 1 August 2026, with the bulk of them since 2024.

Retrieved 1 August 2026

American Civil Liberties Union

The ACLU's campaign against municipal Flock contracts, reviewing the risks of nationwide searchable movement databases.

Retrieved 1 August 2026

Malwarebytes Labs

An overview of American municipalities that have cancelled or rejected Flock contracts.

Published 1 July 2026 · Retrieved 1 August 2026