Hacker News Reader

Comment by pas | Hacker News Reader

"""

Cookies that do not require consent [...] or authentication cookies (when users authenticate themselves on your web site to log in in order to check online services such as their bank account).

"""

https://europa.eu/youreurope/business/dealing-with-customers...

View on HN

Again: are you a lawyer?! If not, in what quality are you advising businesses how to implement such a dangerous law? Have you seen the magnitude of the potential punishment? Will you cover my fines if you're wrong?

Note that putting a “we use cookies” banner on your website will not absolve you from GDPR fines anyway. You still need to adher to the law about informend consent, storing safely etc.

If you are worried about GDPR, by far the safest is to just not collect personal information.

You are correct: implementing GDPR correctly is much, much harder and more expensive than people realise. Cookie banners are just the tip of the iceberg.

A few things not allowed under GDPR:

1. Analytics

2. Third-party resources like fonts or JS libraries

3. CDNs

4. DDOS protection services

And I am sure I am missing many more. I am not a lawyer, but I worked with a few.

Of course you can use third-party resources like fonts or JS libraries.

What you can’t do is trick the client to download something from a third-party source which then spy on the customer.

Okay, so either you know what you are talking about it or not. If not stop spreading nonsense, if yes, then why are you lying?

Do you have an actual argument or are you here just to call others liars?

Reply on news.ycombinator.com