Texts to 22 Oct 2026

Amendment 1534· GDPR Article 88b(6)

Alternative

Tabled by
Irena Joveva and 5 others (Renew)Irena Joveva, Michael McNamara, Raquel García Hermida-Van Der Walle, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Fabienne Keller
Committee and document
ITRE–LIBE·amendments 1261–1564 to the draft report (CJ72-AM-791873, PE791.873v01-00)·27 July 2026
Source
Official text, pp. 157–158·printed header: Article 3 – paragraph 1 – point 15 / Regulation (EU) 2016/679 / Article 88b – paragraph 6
Targets
Article 88b(6) of the General Data Protection Regulation (GDPR)

Text of the amendment

As tabled

Wordingagainst the Commission’s

(6) Providers of web browsers, which are not SMEs, shall provide the technical means to allow data subjects to give their consent and to refuse a request for consent and exercise the right to object pursuant to Article 21(2) through the automated and machine-readable means referred to in paragraph 1 of this Article, as applied pursuant to paragraphs 2 to 5 of this Article.Providers of web browsers and operating systems shall: a) provide the technical means to allow data subjects to give their consent, refuse or withdraw a request for consent and exercise the right to object pursuant to Article 21(2) through the automated and machine-readable means referred to in paragraph 1 of this Article, as applied pursuant to paragraphs 2 to 5 of this Article; b) ensure that their technical infrastructure allows authorized third-party software or agent providers to act on behalf of the data subject, while data subjects, upon their first use, shall be prompted to select the use of such software in online interfaces; c) not restrict, deny or degrade access or functionality to a service for any privacy-enhancing software, such as a Virtual Private Network, automated configurations, browser extensions or other technology designed to protect the confidentiality of their communication or of their terminal equipment, provided that such technologies comply with technical specifications established by the harmonised standards pursuant to paragraph 4; d) allow data subjects to import recommended choices, such as whitelists, to the technical means allowing choices, while data subjects, upon their first use, shall be prompted to allow an exception for independent media service providers pursuant to paragraph 3. e) not process the data subject’s choices referred to in paragraph 1 for any other purpose than transmitting the signal to providers of online interfaces, including in relation to software applications operating on that terminal equipment.

Struck CommissionHighlighted amendment

GDPR Article 88b with this amendment

Amendment 1534 applied to the Commission proposal, no other amendment

Unchanged: (1), (2), (3), (4) and (5)
1.

Controllers shall ensure that their online interfaces allow data subjects to:

(a)

Give consent through automated and machine-readable means, provided that the conditions for consent laid down in this Regulation are fulfilled;

(b)

decline a request for consent and exercise the right to object pursuant to Article 21(2) through automated and machine-readable means.

2.

Controllers shall respect the choices made by data subjects in accordance with paragraph 1.

3.

Paragraphs 1 and 2 shall not apply to controllers that are media service providers when providing a media service.

4.

The Commission shall, in accordance with Article 10(1) of Regulation (EU) 1025/2012, request one or more European standardisation organisations to draft standards for the interpretation of machine-readable indications of data subjects’ choices. Online interfaces of controllers which are in conformity with harmonised standards or parts thereof the references of which have been published in the Official Journal of the European Union shall be presumed to be in conformity with the requirements covered by those standards or parts thereof, set out in paragraph 1.

5.

Paragraphs 1 and 2 shall apply from [OP: please insert the date = 24 months following the date of entry into force of this Regulation].

6.

Providers of web browsers, which are not SMEs, shall provide the technical means to allow data subjects to give their consent and to refuse a request for consent and exercise the right to object pursuant to Article 21(2) through the automated and machine-readable means referred to in paragraph 1 of this Article, as applied pursuant to paragraphs 2 to 5 of this Article.Providers of web browsers and operating systems shall: a) provide the technical means to allow data subjects to give their consent, refuse or withdraw a request for consent and exercise the right to object pursuant to Article 21(2) through the automated and machine-readable means referred to in paragraph 1 of this Article, as applied pursuant to paragraphs 2 to 5 of this Article; b) ensure that their technical infrastructure allows authorized third-party software or agent providers to act on behalf of the data subject, while data subjects, upon their first use, shall be prompted to select the use of such software in online interfaces; c) not restrict, deny or degrade access or functionality to a service for any privacy-enhancing software, such as a Virtual Private Network, automated configurations, browser extensions or other technology designed to protect the confidentiality of their communication or of their terminal equipment, provided that such technologies comply with technical specifications established by the harmonised standards pursuant to paragraph 4; d) allow data subjects to import recommended choices, such as whitelists, to the technical means allowing choices, while data subjects, upon their first use, shall be prompted to allow an exception for independent media service providers pursuant to paragraph

Amended
3.

e) not process the data subject’s choices referred to in paragraph 1 for any other purpose than transmitting the signal to providers of online interfaces, including in relation to software applications operating on that terminal equipment.

New
Unchanged: (7)
7.

Paragraph 6 shall apply from [OP: please insert the date = 48 months following the date of entry into force of this Regulation].

Struck removed Highlighted added Full text on the GDPR Article 88b page

Target

Wording of the targeted provisionlaw in force, Commission proposal, latest Council text

No Council text amends Article 88b(6).

Cite this amendment

Amendment 1534 (Irena Joveva and others), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 1261–1564 to the draft report on COM(2025) 837 (CJ72-AM-791873, PE791.873v01-00, 27 July 2026), pp. 157–158

Link, short form and official text
Reference

Amendment 1534 (Irena Joveva and others), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 1261–1564 to the draft report on COM(2025) 837 (CJ72-AM-791873, PE791.873v01-00, 27 July 2026), pp. 157–158

Short form

ITRE–LIBE Amendment 1534 (CJ72-AM-791873), p. 157

Entry in the source list