Live data from Hacker News

Only 9% of visitors give GDPR consent to be tracked

markosaric.com

181–190 of 457 posts

Re: Only 9% of visitors give GDPR consent to be tracked

#181
post #93

Earlier quoted context omitted.

Why would anyone consent to be tracked if given a real choice? What are the benefits? The 9% look like an error.

I consent to website 'Measurement' cookies - I'm happy for most websites to do statistical analysis on their visitors. I opt out of marketing cookies etc.

The author of the article mentioned a GDPR compliant alternative to google analytics that doesn't require users to give consent for tracking simply by not relying on personally identifiable information.

Re: Only 9% of visitors give GDPR consent to be tracked

#182

Small changes in UI can have a significant effect on acceptance rate. I'm developing an open-source consent tool (Klaro - https://klaro.kiprotect.com , Github: https://github.com/kiprotect/klaro ) and where to put the different buttons, which colors to give to them and how easy to make opt-out is a large debate in our community. By default we favor a very user-friendly approach but we give our users (i.e. the website…

I now see a lot of websites now complying with the "opt-out as easy as opt-in" part by giving you checkboxes for configuring your cookies, with a faint "save choice" button that effectively opts out, and a really obvious, well contrasted "accept all" button. I think that ticks all checkboxes of the law, while still being an obvious dark pattern designed to trick the user into opting in.

Re: Only 9% of visitors give GDPR consent to be tracked

#183
post #138
post #81

Surprised no one has mentioned the systems that, if opted out of, redirect users to a 'privacy policy' page and won't allow access to content without opting in. Or the sites that don't bother with compliance and just show a message to the effect of 'this site operates under a jurisdiction that may have different privacy laws to your country' and leaves it at that.

Those very much falls in the shady part. The first option, redirect, is not GDPR-compliant, because then the "consent" cannot be considered freely given, and thus is not valid The second option is really borderline, and could work out for a US-only news website, for example (arguing it doesn't cater to European residents), but would be non-compliant for a business which knowingly serve European residents.

> The first option, redirect, is not GDPR-compliant, because then the "consent" cannot be considered freely given, and thus is not valid.

I don't quite understand the reasoning on that one. In Europe, and pretty much everywhere else, there are a bazillion interactions every day in the form of one party offering to provide some good or service only if the other party agrees to something.

For example, the grocery store will only give me food if I agree to let them charge my credit card.

Why is consent considered freely given when I give someone money for a good or service because if I do not do so they will not provide the good or service, but not freely given when I click "agree" on a privacy policy disclosure because if I do not do so they will not provide the good or service?

Re: Only 9% of visitors give GDPR consent to be tracked

#184
post #133

Earlier quoted context omitted.

The Irish DPC is deliberately dragging its feet on GDPR enforcement, which is a huge problem because the majors like Facebook or Google have their European headquarters there, not so coincidentally.

How can a company that violates law in 13 countries just choose which country gets to enforce?

Because the EU is a union of sovereign states. The EU itself is not sovereign and cannot do anything at all without acting through its members. A member can simply decide not to carry out the EU's wishes. Sure there are penalties, but they take a long time to appear and are fairly minor.

Re: Only 9% of visitors give GDPR consent to be tracked

#185
This is one of the reasons server side tracking becomes more and more important. Even if users agree, tools like uBlock block client side scripts like Analytics. I build a library for Go [1] to solve this. Check it out!

[1] https://marvinblum.de/blog/server-side-tracking-without-cook...

Re: Only 9% of visitors give GDPR consent to be tracked

#188

Earlier quoted context omitted.

Verizon/Yahoo/Techcrunch is such a blatant offender, and especially noticable because they get posted here often. Their modal is a giant obfuscation dark-pattern, and far as I can tell, there is no way to opt out.

I'd like to remind you and everyone else about Firefox reader mode. Solves like 99% of this user-enslaving shit.

This doesn't work on Yahoo sites which redirect to a different URL for the consent.

Re: Only 9% of visitors give GDPR consent to be tracked

#190

I must say I'm really surprised. I'm a frontend developer and probably more keen to keep an eye on this stuff but there are lots of times where I just say yes because the popup is in-my-face and I just want to scroll to the content. I guess where the article falls flat is where the author says a "proper GDPR content banner" was implemented. No online publication will do this. At least they will trick you with button…

> but there are lots of times where I just say yes because the popup is in-my-face and I just want to scroll to the content. I am exactly the same. I use UBlock Origin and Privacy Badger so pretty much nothing gets through anyway but just to get rid of the banner, I click on OK. However, that being said, I only do it if the other choice is "Manage Preferences" or something equally vague: If I am given a clear yes-or-…

There's a filter list for uBlock that removes most of those popups. Can't remember it's name off the top of my head though.
Post reply on HN