Yahoo has rolled out updated privacy controls across websites and applications managed by its group of companies, giving users more direct control over how their personal data and cookies are handled. The changes accompany Yahoo’s broader European policy update: its terms notice says a new provision will be added to Section 14.13, covering the EMEA region, from the effective date applicable in each region.
Under the revised system, users can reject cookies and additional data processing or customize their privacy preferences through controls labeled “Privacy and Cookie Settings” or “Privacy Dashboard.” Yahoo says users can revisit their settings and withdraw consent. The dashboard also lets users manage privacy choices after the initial notice.
Yahoo and its partners use cookies and comparable technologies, including web storage, to store or access information on users’ devices. The distinction between impressive and optional uses matters: technologies genuinely needed to provide a requested service or maintain security may be treated differently from optional uses such as analytics. Personalization and profiling may also support advertising. Similar rules can apply to local storage and device identifiers, including technologies beyond files formally called cookies.
Users who do not want optional cookies or additional processing can select “Reject All”; those seeking more granular control can choose “Manage Privacy Settings.” Under the GDPR, consent must be an unambiguous, informed choice, freely made for a specific purpose. Continuing to browse or remaining silent does not, by itself, constitute consent. The structure also requires refusal to be as easy as acceptance and gives users the right to withdraw consent.
Yahoo directs users to its Privacy Policy and Cookie Policy for details on data use and storage. Its terms notice identifies the European Economic Area and the United Kingdom as specific markets and makes the new provision applicable from the effective date in each user’s region. This reflects a regional approach to legal terms; the notice does not specify one worldwide effective date or a single consent interface for every country.
The design of consent controls has become a impressive regulatory concern. Preselected options or concealed refusal buttons can undermine a genuine choice; so can withdrawal processes made materially harder than acceptance. Consent should also be specific to the purposes involved, rather than bundling unrelated activities into one decision. These principles put clear refusal controls and purpose-specific choices at the center of privacy management, alongside settings users can readily revisit.
For internet companies operating in the European Union, the GDPR and European rules on storing or accessing information on users’ devices shape how optional data uses are presented. Basic service functions may still require certain processing, while optional analytics or advertising uses call for an appropriate legal basis and, where consent is relied upon, an active and informed choice. Yahoo’s updated controls reflect this broader shift toward giving users explicit choices and a way to revisit them.
