# Cookie compliance under GDPR

**URL:** <https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275>\
**Category:** Community Building\
**Tags:** gdpr\
**Created:** [April 13, 2018, 7:10pm UTC](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275 "2018-04-13T19:10:56Z")\
**Posts on this page:** 1\
**Showing post:** 58

<div class="post-metadata">

**Author:** ![rriemann](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rriemann/32/115238_2.png) [@rriemann](https://meta.discourse.org/u/rriemann)\
**Post date:** [February 5, 2023, 9:31pm UTC](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275/58 "2023-02-05T21:31:07Z")

</div>

I’m auditing websites for a EU data protection authority.

I noticed that when websites embed youtube videos, often times those websites make calls to [doubleclick.net](http://doubleclick.net), which is Google’s advertisement business.

We tell those websites to stop making these calls, because they mean usually:

1. international data transfers of personal data without a legal basis
2. lack of transparency and documentation despite legal requirement
3. if youtube employs cookies or localstorage: lack of user consent required by ePrivacy directive.

You can check out how the court of justice of the EU employs Youtube on their website. That’s the minimum safeguard: [Court of Justice of the European Union - curia](https://curia.europa.eu/jcms/jcms/j_6/en/)

EDIT: Just checked – the current Youtube embed here on this page also causes calls to [doubleclick.net](http://doubleclick.net) when played.

[![](https://global.discourse-cdn.com/meta/original/4X/9/2/b/92bde0e29f058abc2bd0ade2bcfbeb2119aac86f.jpeg "Trailer - 70 years of the Court of Justice of the European Union") ](https://www.youtube.com/watch?v=lQxTFoIfkx0)

---

_[View the full topic](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275)._