The unworkability of consent for anti-fraud measures

*facepalm* Anti-fraud measures require consent in the context of e-mail tracking? “Thanks a lot”, regulated industries will say, as there are many sectors where anti-fraud measures are *required by law*. Even in industries where this isn’t the case, requiring consent for anti-fraud defeats their very purpose. Really, which fraudster will consent to the use of their data to prevent fraud?

I find this position re anti-fraud even more problematic because security remains mentioned as a consent exception, but where is the line between security measures and anti-fraud measures?

I have said it before: Article 5(3) of the ePrivacy Directive and the strict interpretation of certain legal grounds under the GDPR are unworkable in practice, and we need a rethink if we wish these laws to be/remain credible.

See e.g. my article on ePrivacy challenges and the idea of “one cookie law to rule them all”:
https://lnkd.in/ePDByudx