What else can they do when they have this laundry list of tracking scripts on a front page:
https://i.imgur.com/hKEItPS.png
They obviously have NO idea what's being collected on every user and how it is being used.
GDPR: US news sites unavailable to EU users over data protection rules
21–30 of 680 posts
Re: GDPR: US news sites unavailable to EU users over data protection rules
#22In 1y every website will have a click through EULA with 20 pages that loads before everything else and doesn't store IPs - and which no one is reading - privacy served. Just when they install from the App store or install Microsoft Office.
Except that won’t help them with the GDPR one bit.
They will worsen their experience and not be in compliance because they are unwilling to actually do the simple things needed.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#23In 1y every website will have a click through EULA with 20 pages that loads before everything else and doesn't store IPS - and which no one is reading - privacy served. Just when they install from the App store or install Microsoft Office.
"Click here to agree to everything we do" schemes are explicitly forbidden by the GDPR. You need to individually opt-in to every single use case, and you need to consent to every transfer to each individual third party as well.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#24In 1y every website will have a click through EULA with 20 pages that loads before everything else and doesn't store IPs - and which no one is reading - privacy served. Just when they install from the App store or install Microsoft Office.
Forcing users to accept a 20 page EULA is not compliant, that's what's so great about this directive. If all you have to do to be compliant is add a new clause to your 20 page EULA, then the law would have no purpose - we're already trained to just click accept when presented with any kind of lawyerese. The whole point is to get away from that.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#25In 1y every website will have a click through EULA with 20 pages that loads before everything else and doesn't store IPs - and which no one is reading - privacy served. Just when they install from the App store or install Microsoft Office.
Except that won’t help them with the GDPR one bit. They will worsen their experience and not be in compliance because they are unwilling to actually do the simple things needed.
IANAL but after working on GDPR topics for months with a lot of reading I'd say they would work.
Selling data is still hard to argue, I'd not do that for EU citizens ("tag EU citizens to opt out from selling data"). Everything else should be possible. Using Art 6/1(a) and Art. 7 GDPR you can store most of the data from your visitor. You need to make sure they can inform them about your usage, revoke their aggreement and make you delete it. Coupling ("click EULA or else") is a little bit more difficult, but with clever UI most visitors will accept the EULA instead of opting out, no coupling needed.
I'm sure in 1y publishing systems will provide all of this out of the box.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#26In 1y every website will have a click through EULA with 20 pages that loads before everything else and doesn't store IPS - and which no one is reading - privacy served. Just when they install from the App store or install Microsoft Office.
"Click here to agree to everything we do" schemes are explicitly forbidden by the GDPR. You need to individually opt-in to every single use case, and you need to consent to every transfer to each individual third party as well.
IANAL
No, coupling is forbidden. A 20 page, non-legalese EULA is allowed if you don't couple acceptance to using your site.
"You need to individually opt-in to every single use case"
No. But I would be happy for your source on that.
You can't change the usage purpose after collecting, but if you declare what you do before (20 pages EULA) data collection, you're fine.
"and you need to consent to every transfer to each individual third party as well."
Yes, foggy data privacy declaration from the past are no longer allowed, but 20 pages EULA, 10 pages with company listings you transfer data to are.
I'd also add a teaser on top with the most important things, like here https://juro.com/#privacy-popup
If Paypal can do it, so can you.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#27The response to GDPR is interesting. If they are handling and selling your data in ways that are not compatible with GDPR, then you should seriously consider using someone else for that information.
Essentially every publisher that integrates with google might be out of compliance with the GDPR.
Until that gets sorted out lots of sites are going to start doing this out of desperation.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#28GDPR hysteria.
I could buy "hysteria" as an explanation for the little startup apps or blogs that have shown up on HN these last few days, but these papers have revenues in excess of $2 billion. I have to assume there was some due diligence involved.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#29In 1y every website will have a click through EULA with 20 pages that loads before everything else and doesn't store IPs - and which no one is reading - privacy served. Just when they install from the App store or install Microsoft Office.
Forcing users to accept a 20 page EULA is not compliant, that's what's so great about this directive. If all you have to do to be compliant is add a new clause to your 20 page EULA, then the law would have no purpose - we're already trained to just click accept when presented with any kind of lawyerese. The whole point is to get away from that.
IANAL
I've not said that this is the only thing you need to do. EULAs don't make you compliant. I've said websites will have EULAs (and be internally compliant) and do everything - except selling - with your data that they do now.
The only real benefit of the GDPR for users is that old (e.g. 2y) data needs to be deleted and companies can't keep your personal data 10y for future use cases.
But you can do most of the things you like with consent and if you do not couple it to your offer.
But the GDPR does not prevent any business model or collecting any data as long as there is consent, you are transparent, you can export the data, consent can be revoked and data can be deleted on request.
Re: GDPR: US news sites unavailable to EU users over data protection rules
#30GDPR hysteria.
I wished everyone who says "GDPR hysteria" would cover legal costs for those who are hysteric.
For a site that shows text and images you have a simple solution change the code
if(isUserInEU())
showBlobkingPopup();)
else
loadAllTrackingScripts();
into
if(isUserInEU())
loadNonTrackingScripts();
else
loadAllTrackingScripts();