> I don't understand why the EU didn't mandate the do not track flag to be obeyed.
1. Because the implementation is simply left open?
2. Because it's nearly impossible to verify?
1. Because the implementation is simply left open?
2. Because it's nearly impossible to verify?
What do you mean verify? If it's set then it's set. It gets automatically injected with every web request. It's not possible to make sure the user manually set the flag or if it was default, no. But in the EU the law says that tracking must be opt-in so this is perfectly good behaviour in line with the law.
Point 2: you can't check/verify if parties, especially those outside the jurisdiction of the EU, really honor things like the 'don't track' flag.
It's unfortunate that so many companies decide to implement the requirements in the laziest and sleaziest possible ways.