Tweet · 24 Sept 2018, 16:47 UTC

Replying to @podehaye and @jason_kint

The decision from the browser to share personal data is itself processing. It involves maintaining a data store, deciding to attach the information on an outbound message, etc. This doesn’t absolve downstream from compliance — but the decision to share is the browser’s.