Hacker News Reader

Comment by itqwertz | Hacker News Reader

Does this mean the end of the cookies pop ups?

No, since the whole world gets to live with those stupid things.

Many sites geocode them. If you are outside the EU (+ "close enough" countries like Switzerland, Norway, ...) and think you're getting a lot, you'd be getting a lot more in the EU.

I rarely ever see them while in the USA, or using a USA VPN.

US courts have ruled sites are not even bound by their own privacy policies. They do not have to even pretend to seek consent.

Those were the most poorly conceived things in the history of tech legislation. They literally solved nothing.

Some websites don't use third party cookies or trackers so they don't have to show the popup. Like mine

That’s great. Same with mine. Sadly most sites still use them, and will still display the banners with no real option but to accept. Most are horrendous to deal with.

There might be a small subset of websites that do not show popup. However, the question is whether the users adjust their browsing behavior based on those popups or not? If the users have just become acclimatized to clicking on them, then the situation has not really changed in any meaningful way.

Dunno, I always opt out. It's not that hard to do, really.

Even when you opt out, do inspect your cookies. You'll be surprised as to how many are still there, solely for the purposes of tracking.

Which is illegal.

From what I can tell, the official EU website (https://europa.eu) does not use third-party cookies or trackers. They have a pop-up.

Only recently have they added the popup (last 6 months or so), they previously used google analytics with no consent and made themselves exempt from the law

https://www.techdirt.com/articles/20180605/22253339978/eu-co...

And regular users will now click accept to anything, without reading a thing, because they just want to buy/read/watch whatever they clicked on.

IANAL This is why the GDPR requires that the default or most obvious option should be the one that denies use of personal data.

Consent should be given by a clear affirmative act [...] Silence, pre-ticked boxes or inactivity should not therefore constitute consent. [...]

So, all those websites that have preticked boxes where you share data unless you untick them are in violation of the GDPR (unless the personal data is required for the site to function). So are websites that only present an 'accept/ok' option, since processing personal data is typically not necessary to retrieve the page:

When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract.

Websites that are designed to let unattentive users consent to data by e.g. clicking the most visible button are probably in violation as well, since it is not a clear affirmative act.

GDPR has an enforcement problem. Ideally we should have some mechanism that allows us to submit violations as easy as posting to HN. The next problem are courts in Ireland which have been stonewalling attempts to move things swiftly (and moving things at scale will simply be impossible). See also Max Schrems v. Facebook

You only have to use a cookie popup if you use them to store user data beyond what you need for purely functional reasons.

Don't track your users and boom: you need no cookie banner. EasyI

Long time lurker but had to create an account when I saw no one gave the correct answer when replying to this.

The cookie pop-ups is definitely not GDPR - it is a separate thing called the ePrivacy Directive and came about many years before GDPR.

GDPR and ePD are both wonderful for consumers. I am fairly annoyed that the implementation and skirting by 90%+ of websites is due to them not being able to monetize our data or track us.

I suspect the rate of non-compliance is closer to 99%+ considering most of the annoying cookie banners I see pop up are actually not following the guidance.

Cookiebot seems the closest to me (defaults to only required cookies, etc.)

Damn we're taking back control already

Reply on news.ycombinator.com