@davidculley I don't know. I am not a layer and I definitely don't know the German situation well. I do think it is complicated and somewhat ambiguous. It seems the TDDDG specifically applies to the Telecommunications and Telemedia industry? And it mostly talks about websites and cookies. Is a mobile app part of that? Or would K-9 fall under the BDSG, which seems to use the same definitions as the GDPR around classification of personal data and when consent needs to be asked?