reCAPTCHA und DSGVO: Google wird Auftragsverarbeiter – was Websitebetreiber jetzt wissen müssen
ReadGoogle announced a shift in its role regarding reCAPTCHA from data controller to data processor, effective April 2026, which redefines GDPR responsibilities for businesses using this service. Website operators will become the primary data controllers, necessitating updates to privacy policies and consent mechanisms. This change resolves longstanding controversies over data processing roles and calls for businesses to reassess their compliance strategies.
Key takeaways
- –Google will change its role in reCAPTCHA from a data controller to a data processor by April 2026, impacting GDPR responsibilities for website operators.
- –Website operators will become the primary data controllers, requiring them to ensure compliance with data protection obligations like updating privacy notices and processing agreements.
- –The technical operation of reCAPTCHA remains unchanged, but legal and organizational adaptations are necessary.
- –Companies should verify that reCAPTCHA scripts load only with consent, considering alternative solutions to reduce data transmission.