New data protection rules: What you need to know about cookies!

New data protection rules: What you need to know about cookies!

Flensburg, Deutschland - On July 10, 2025, developments related to data protection and cookies in the digital space are at the top of the list of current topics. With the entry into force of the TDDDG The legal situation in Germany changed decisively. Previously, there were ambiguities about the use of cookies, which are now more clearly regulated by the new law. In particular, the opt-in principle has ensured a fresh wind, since it requires active consent of the users to store information on end devices.

The TDDDG combines provisions of the Telemedia Act (TMG) and the Telecommunications Act (TKG) and implements the requirements of the Eprivacy Directive. In particular, Section 15 (3) TMG must be mentioned, which until this law called for an opt-out-an approach that contradicted European guidelines. These changes are intended to help users be informed more transparently about data storage and processing, which in turn should strengthen their trust in digital services.

cookies and their consent

Well, what does that mean specifically for the website operator? A clear and understandable objection of user consent is mandatory as long as no technically necessary cookies are used. Such necessary cookies are essential, for example, for the meeting management or for user administration in online form. For all other types of cookies that are not absolutely necessary, the active consent of the users must be obtained. This also includes so-called tracking mechanisms, for which special caution is required to avoid legal problems. Data protection-friendly alternatives such as the Two-click solutions should defuse legal gray areas here and offer additional security.

Consenting banner are a sensitive topic. They must be clearly formulated and the users should not be tempted by misleading information on consent. The use of techniques such as "nudging" or "Dark Patterns" is not only inadmissible, but can also be punished with sensitive fines - up to 300,000 euros are possible. The data protection supervisory authorities of the federal states have control here and become active in violations.

external content and its processing

Another important aspect is the integration of external content. Websites that insert videos or social media plugins, for example, have to make sure that you do not transfer any personal data unauthorized. Above all, the data protection -friendly integration counts to protect the personality of the users. Alternatives such as local processing or proxy scripts can help to act in accordance with data protection.

The digital world is changing and the challenges of data protection are not available. Website operators are well advised to stay attentive and to design their offers in such a way that they are both legally compliant and user -friendly. In the end it is up to us as users how well we are informed about how to deal with our data and how our online experiences are designed.

Sport4final has already given interesting insights in his reporting on these developments that make it a bit easier and explain how to use cookies and data protection in digital space.