> We did all the tracking on the backend
replyJust checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cookies.
I do but we shouldn’t be talking about cookies in our cookie banner then.
replyThat's why the usual phrasing is some variation of "Are we allowed to track you? We use cookies for that".
replyIt was never about the cookies themselves. That just happened to be the most common form of tracking in use when the GDPR was originally written. Cookie-less tracking still requires a consent prompt, tracking-less cookies never required one.
Sounds like your legal department is broken. You should fix that.
replyI mean that both in the sense of "you, plural" (your company should fix that) and "you, personally" (because diffusion of responsibility is a real issue, and someone needs to actually do it).
It was a 30k person company, I worked for a subsidiary and for better or worse that was not within my circle of concern or circle of influence.
reply