Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

politico.eu

Post reply on HN
Print view View original

121–130 of 190 posts

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#121

Post by cbeach »

alextingle wrote: post #105
cbeach wrote: post #57

Earlier quoted context omitted.

The cookie banners don't make companies less "careless" They just introduce a needless bit of friction in the UX. If the EU wanted to prevent digital identity triangulation or cross-domain advertising data gathering, it should have banned it outright. Rather than getting all users to click a stupid banner every time they visit a website.

The EU didn't mandate that annoying UI. That's malicious compliance from businesses who are trying to undermine the law.

You're suggesting that companies ruin their own UX to "undermine a law?"

That this is all a big conspiracy by nearly every company on the web against our precious overlords in the European Commission?

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#122

Post by cbeach »

vkou wrote: post #93
cbeach wrote: post #57

Earlier quoted context omitted.

The cookie banners don't make companies less "careless" They just introduce a needless bit of friction in the UX. If the EU wanted to prevent digital identity triangulation or cross-domain advertising data gathering, it should have banned it outright. Rather than getting all users to click a stupid banner every time they visit a website.

You can eliminate friction in your UX by not collecting data you don't need. It's way less work to, you know, not collect that data. I'm not sure why the government is needed to solve a problem that you've gone out of the way to inflict on yourself.

Let's say I want to improve my site by recording basic user analytics like unique user counts, to produce actionable data. I'm not nefariously collecting their social security number. I'm just putting some uuid in a harmless cookie in their browser so I can track which requests are from a unique browser.

Thanks to the GDPR I cannot do this without the stupid cookie warning popup.

In this regard, the GDPR is clumsy lawmaking that results in companies having to behave defensively, hoping that users will accept a damaged UX in order that the company is not fined by the EU.

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#123

Post by phatfish »

cbmask wrote: post #5

The politicians cite competitiveness as the motivator for relaxing the GDPR. The real reason for the EU lagging behind the US in "big tech" is of course the lack of venture capital and the red tape in registering corporations. The GDPR does not prevent US big tech from operating in the EU. As it stands, this is just another attack on EU citizens' rights. It is also the least of the EU's current problems. De-industria…

> De-industrialization due to high energy prices is, but of course von der Leyen will not mention that.

Europe needs to let Putin finish off Ukraine so he can turn the gas on again, amiright?

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#124

Post by cbeach »

Gud wrote: post #86
tzs wrote: post #84

Earlier quoted context omitted.

> The websites presenting cookie banners either don't know the law, or are engaged in spyware shit. You don't need a cookie banner if you need it to provide a service that the user expects (e.g., saving settings, login). There's quite a lot between "engaged in spyware shit" and "service that the user expects". For example if I want to add first party analytics to my site, the data from which I will use solely interna…

Are cookie banners really a requirement in that case? I think as long as you don’t share the data with a third party you’re in the clear?

Yes. For example, if you want to track unique users (for the most rudimentary analytics), you'll need to put a uuid in a cookie on their browser, and you'll need to damage your UX with a stupid cookie consent popup, thanks to EU Directives.

This is not nefarious data collection, and it shouldn't need user consent - but it does, because EU lawmakers were overzealous and careless when designing their regulation.

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#125

Post by milesrout »

bad_user wrote: post #50
terminalbraid wrote: post #4

At the minimum I'd hope they a) do away with the worthless cookie banners requirement b) cut some generous but reasonable slack to small organizations. Interesting timing with the digital sovereignty movement.

The cookie banners aren't worthless. The websites presenting cookie banners either don't know the law, or are engaged in spyware shit. You don't need a cookie banner if you need it to provide a service that the user expects (e.g., saving settings, login). As an EU citizen, I'm not concerned about your need to observe my behaviour or to prevent ad-click fraud. What I care about is websites sharing my navigation histor…

Cookies aren't spyware. If you want to disable them, disable them in your browser. It is something you send to the server. Not something they do on their end.

Surely people here are aware of that?

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#126

Post by milesrout »

Hojojo wrote: post #35
terminalbraid wrote: post #4

At the minimum I'd hope they a) do away with the worthless cookie banners requirement b) cut some generous but reasonable slack to small organizations. Interesting timing with the digital sovereignty movement.

I don't see why small organizations should get to be more careless with my personal data than anybody else. The value of my privacy doesn't change just because of the size of the company.

It isn't "your data". Which pages you have viewed on my website is my data. It relates to you but is does not belong to you.

You don't have any privacy right to control data that belongs to other people and happens to relate to you. Privacy is about the state needing a warrant to enter your home and search it or to wiretap you. The idea it has anything to do with information you GIVE to websites by visiting them is a complete delusion.

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#127

Post by milesrout »

pabs3 wrote: post #61
terminalbraid wrote: post #4

At the minimum I'd hope they a) do away with the worthless cookie banners requirement b) cut some generous but reasonable slack to small organizations. Interesting timing with the digital sovereignty movement.

Browsers should be the things handling cookies, not websites.

They already are.

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#128

Post by awiesenhofer »

terminalbraid wrote: post #4

At the minimum I'd hope they a) do away with the worthless cookie banners requirement b) cut some generous but reasonable slack to small organizations. Interesting timing with the digital sovereignty movement.

> do away with the worthless cookie banners requirement

They wont, since they were never "required" nor are they part of the GDPR

> cut some generous but reasonable slack to small organizations

They will, thats the whole reason they are changing it!

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#129

Post by addicted »

cbeach wrote: post #124
Gud wrote: post #86

Earlier quoted context omitted.

Are cookie banners really a requirement in that case? I think as long as you don’t share the data with a third party you’re in the clear?

Yes. For example, if you want to track unique users (for the most rudimentary analytics), you'll need to put a uuid in a cookie on their browser, and you'll need to damage your UX with a stupid cookie consent popup, thanks to EU Directives. This is not nefarious data collection, and it shouldn't need user consent - but it does, because EU lawmakers were overzealous and careless when designing their regulation.

The website can also choose not to track me on an individual basis.

Re: Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'

#130

Post by cbeach »

addicted wrote: post #129
cbeach wrote: post #124

Earlier quoted context omitted.

Yes. For example, if you want to track unique users (for the most rudimentary analytics), you'll need to put a uuid in a cookie on their browser, and you'll need to damage your UX with a stupid cookie consent popup, thanks to EU Directives. This is not nefarious data collection, and it shouldn't need user consent - but it does, because EU lawmakers were overzealous and careless when designing their regulation.

The website can also choose not to track me on an individual basis.

I'm talking about rudimentary analytics with no harmful consequences for you as an individual
Post reply on HN