Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The farce is saying that the popup is needed "because we use cookies". It's because you're using cookies to track users, their PII and sell information and ads.

The EU didn't add any inefficiencies, rather, it's forcing the data abuse by websites to come to light.

If you use cookies only for login/session tracking then guess what, no popup is needed.

Also if the user expressed their consent (or lack of) once, then the popup is not needed anymore (google/fb/etc do exactly that).



So, as a user, how can I signal "I don't care; stop showing me this popup on every site?"

Because if the answer is "per-site signaling," that's soft encouragement to keep using the same sites so I don't need to see that tedious notification and it rewards big players over small players (and defeats some of the benefit of the WWW as a hyperlinked network of data that's fairly location-agnostic).


> as a user, how can I signal "I don't care; stop showing me this popup on every site?"

That's on the website unfortunately

> that's soft encouragement to keep using the same sites so I don't need to see that tedious notification and it rewards big players over small players

I agree, I would want the same option (since I use privacy browser extensions I don't care), it's not the users fault the small sites are playing it dumb and using some generic annoying "we value your privacy" popup BS.


... but it may be the fault of the law, since the penalties are significant if small sites don't play the issue conservatively.


Fault of the law in which way?

The GDPR does not require continuous confirmation of consent, only that they're allowed to withdraw consent at any time

> The GDPR does not indicate a shelf life for consent. Theoretically, a person’s consent is indefinite,

https://gdpr.eu/gdpr-consent-requirements/

> since the penalties are significant if small sites

This is FUD, proportionality is used when calculating penalties


> This is FUD, proportionality is used when calculating penalties

Can you point to where in the law that guarantee is given? Furthermore, given the previous penalty was "none," any penalty can probably be considered significant for website operators who were previously assuming nearly zero risk in running their sites.


https://gdpr.eu/article-83-conditions-for-imposing-administr...

Paragraph 1. > Each supervisory authority shall ensure... in each individual case be effective, proportionate and dissuasive.

Paragraph 2. a) > the nature, gravity and duration of the infringement... as well as the number of data subjects affected and the level of damage suffered by them

Also, as we are discussing this, a lot of this will now apply to CCPA and (in some cases) COPPA


> Also, as we are discussing this, a lot of this will now apply to CCPA and (in some cases) COPPA

Yes, and COPPA has terrified YouTube content creators.

Wiggle language like "proportionate" (especially when paired with "dissuasive") doesn't assuage the fears of website admins, because it isn't a dollars-and-cents (or, in this case, euros) amount. It's at the behest of a judge, which is not a risk space an admin (particularly one running a site as a secondary function, not as core to their business model) wants to take on. So the law, as structured, encourages those popups everywhere forever. Annoying, to say the least.

I don't think I'm spreading the FUD; I think the FUD comes from the ambiguity in the penalties described in the law itself.


I'll just add that: if they're so worried about the "huge penalties" why are they taking the cheapest way out and using the first non-compliant popup they came across instead of trying to understand the law and come up with an actual solution?


Probably because nobody's gotten sued for using the same banner yet. At the end of the day, this law has added a burden very few web site admins wanted; they don't want to understand a law to provide content on the Internet (especially when that was unnecessary only a few years ago, and especially when it isn't perceived as adding value to the user experience). I'm not surprised if people try and do the minimum legally necessary to comply with its ambiguity and pray they don't become the test case to resolve that ambiguity.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: