Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“I'm able to do more in the day, which means I'm providing more value to my clients - and it's helped my margins in terms of how much I can bill. LexisNexis is helping me make money.”

ParrisWhittaker

Access all documents on Device fingerprinting

Device fingerprinting meaning

What does Device fingerprinting mean?
Device fingerprinting describes the practice of collecting multiple technical attributes from a user’s device and browser to create a unique profile for identification or recognition online. Attributes may include device and browser configuration data, data revealed by network protocols, CSS and JavaScript behaviours, HTTP headers, system clock and TCP/IP variations, installed fonts and plugins, and use of APIs (e.g., Canvas/WebGL). It can be passive (observing signals) or active (probing the device). Used for tracking, fraud prevention and account security, it is often an alternative to cookies. The term is not defined in statute, but under UK GDPR/EU GDPR, such online identifiers can constitute personal data where they single out a user. In the UK (UK GDPR and PECR) and Ireland (EU GDPR and the ePrivacy Regulations), accessing or deriving information from terminal equipment for fingerprinting generally requires prior consent unless strictly necessary for a service requested by the user. Where personal data are processed, a lawful basis, transparency, purpose limitation, and DPIA and security duties may arise. Regulatory treatment is broadly consistent across England & Wales, Scotland, Northern Ireland and Ireland; the ICO and the Irish DPC have both treated fingerprinting as subject to cookie/ePrivacy rules.
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related News about Device fingerprinting

NEWS
TMT weekly: AI regulation updates, data protection guidance, media and advertising developments, telecoms case law and practitioner resources (20 February 2025)

In this issue: New technologies Data protection Media Advertising, marketing and sponsorship Telecommunications LexTalk®TMT: a Lexis®Nexis community Daily and weekly news alerts New and updated content Dates for your diary Trackers Useful information New technologies European Commission issues guidelines on the definition of AI systems The European Commission has released long‑anticipated, detailed guidance on the definition of artificial intelligence (AI) systems set by Regulation (EU) 2024/1689 (EU AI Act). This practical guidance is designed to help providers, deployers, importers and distributors judge whether a system qualifies as an AI system under the EU AI Act, supporting consistent application and enforcement. The definition of AI systems has applied since 2 February 2025. Dóra Petrányi, Central Eastern Europe managing director and co‑head of the Technology, Media and Communications Group, together with CMS partners Katalin Horváth and Ian Stevens, explore the central features of the definition. See News Analysis: European Commission issues guidelines on the...

Read More Right Arrow
NEWS
UK commercial law highlights: Procurement Act guidance and NPPS, EE v Virgin on exclusion of anticipated profits, FCA motor finance appeal, ICO device fingerprinting, e‑invoicing consultation—20 February 2025

In this issue: Advertising, marketing and sponsorship Agency and distribution Contracts International Public procurement Supplier management Daily and weekly news alerts New and updated content Dates for your diary Trackers Latest Q&A Advertising, marketing and sponsorship Google’s reversal on device fingerprinting—ICO reaction and follow-up guidance. Jules Toynton, senior associate, and Isla Neil, data, privacy and cybersecurity lawyer at DLA Piper, assess the Information Commissioner’s Office (ICO) reaction to Google lifting its ban on device fingerprinting, alongside the ICO’s draft guidance on the deployment of storage and access technologies issued in the wake of that response. See News Analysis: Google’s U-turn on device fingerprinting—ICO reaction and subsequent guidance. ASA rulings—19 February 2025 The Advertising Standards Authority (ASA) received a single complaint about misleading discount representations on Secret Escapes Ltd’s website. The ASA upheld the complaint. See: LNB News 19/02/2025 29. Agency and distribution UK FCA gets permission to intervene in...

Read More Right Arrow
NEWS
Risk and compliance weekly: ICO PECR cookies/tracking guidance, EDPB DSA–GDPR consultation, Cyber Security and Resilience Bill delay, OFSI frozen assets reporting, Employment Rights Bill update (18 September 2025)

In this issue: Data Protection and cybersecurity Sanctions Other Practice Compliance updates this week Daily and weekly news alerts New and updated content Data Protection and cybersecurity ICO dispels myths on storage and access technologies The Information Commissioner’s Office (ICO) has addressed widespread misconceptions about how the Privacy and Electronic Communications Regulations (PECR) apply to storage and access technologies, including cookies, tracking pixels and device fingerprinting. It confirmed PECR is not confined to personal data, that what is ‘strictly necessary’ must be judged from the user’s viewpoint, and that consent is required for purposes that are not exempt. The ICO also indicated that a draft impact assessment has been issued and will be finalised after consultation. See: LNB News 12/09/2025 26. EDPB opens consultation on draft guidance on the DSA–GDPR interplay The European Data Protection Board (EDPB) has launched a public consultation on draft Guidelines 3/2025, which explain how the EU Digital Services...

Read More Right Arrow

View the related Practice Notes about Device fingerprinting

PRACTICE NOTES
EU cookies and similar technologies: ePrivacy Directive, GDPR interplay, consent, exemptions, enforcement, audits and reform

STOP PRESS This Practice Note reflects the present legislative landscape; however, be aware that some aspects will be affected by the Digital Omnibus proposals issued on 19 November 2025 under the Commission’s ‘simplification’ programme. For further details, see Practice Note: EU Digital Omnibus—tracker. This Practice Note explores the law governing the use of cookies and related technologies in the EU, covering the following: Types of cookies and related technologies ePrivacy Directive and cookies Responsibility for compliance Consent Clear and comprehensive information Exemptions EU GDPR and cookies Territorial scope Intranets Sanctions and enforcement Cookie audits Reform Resources and guidance Cookies are small data files placed on a user’s computer, phone or tablet. They enable an online service, such as a website, to recognise an individual user and retain particular information about them, such as login credentials, the contents of shopping baskets and site preferences. They are also widely used to direct advertising...

Read More Right Arrow
PRACTICE NOTES
Ireland: Cookies and Similar Technologies—ePrivacy Regulations 2011, GDPR interplay, consent and information duties, exemptions, third-party cookies, DPC enforcement, audits, intranets, territorial scope, reform

This Practice Note examines the law on the use of cookies and similar technologies in Ireland It addresses the following: types of cookies and comparable tracking technologies SI No 336/2011 European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (Ireland) SI No 336/2011 (IRL) (the ePrivacy Regulations (IRL)) and cookies responsibility for compliance consent clear and comprehensive information exemptions Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (EU GDPR) and cookies territorial scope intranets sanctions and enforcement cookie audits reform resources and guidance Cookies are small text files stored on a user’s device, such as a computer, smartphone or tablet. They let an online service recognise a particular user, and...

Read More Right Arrow