Live data from Hacker News

1,741 "informed" consents with one click? GDPR complaint filed

noyb.eu

31–40 of 110 posts

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#31

Is the issue here a lack of “Reject All” button? Or strictly the number of partners?

It's the definition of "informed consent". Can I actually go through a couple of thousand 3rd parties and confirm that their policies all conform to my data handling requirements?

Can you with even a single 3rd party? It's a huge waste of your time.

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#32
post #17

My Samsung TV which I bought 8 years ago now suddenly asks me if it's okay they share data with their over 200 partners. They have the nerves to headline this with "protect your privacy". Generally not a big fan of EU policing but I wish somebody sued them over this. > Improving Your Experience and Protecting Your Privacy on Samsung TV Plus > Samsung and our 264 partners use information about you and your device in o…

Do you have a better system fix than what EU is trying to do?

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#33
post #7

Is the issue here a lack of “Reject All” button? Or strictly the number of partners?

The issue is that even if you click "Accept" there is no reasonable way to infer that the user has given informed consent, because becoming informed would likely take days or weeks. As such the conditions for data sharing are not met and it is likely to be illegal.

> becoming informed would likely take days or weeks.

Then it is basically impossible to consent to any kind of tracking, because users cannot become informed for any number of 3rd parties -- even a single one.

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#34
post #8

Still wondering how "freely given, informed, specific and unambiguous" is fulfilled by "sure you can opt-out of tracking - by buying a premium subscription. Also, here are our 589 'partners' that all claim legitimate interest" but here we are.

Europe doesn’t enforce the law. Cookie banners are similarly pointless.

€6.3B cumulative fines says that they’re enforcing the law to at least some extent: https://www.enforcementtracker.com/statistics

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#35
post #10
post #6

I've seen similar on some android apps I think, where it will ask you if you consent to sharing data with partners or something similar. When you say no there's a huge list of partners you have to disable one by one, it's probably 15 minutes of work to go through them all. I can't think of an example app right now, but usually it's on first install or something like that. Not sure GDPR applies to apps though.

> Not sure GDPR applies to apps though. GDPR applies to we the people and the organizations who hold our data. Doesn't matter if it's morse code on paper strips. If we can dictate warnings on tobacco packages, we can dictate the wording on consent banners to not be "We care about your privacy" but instead "We want to track you for profit".

> we can dictate the wording on consent banners to not be "We care about your privacy" but instead "We want to track you for profit".

At least the banners that say "we value your privacy" are honest about it

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#36
post #14
post #8

Still wondering how "freely given, informed, specific and unambiguous" is fulfilled by "sure you can opt-out of tracking - by buying a premium subscription. Also, here are our 589 'partners' that all claim legitimate interest" but here we are.

Legitimate interest does not exist and is a loophole in the law which should be killed. You can challenge it but the authorities who should handle that are grossly underfunded.

Even if they were well-funded, I suspect the history of regulatory capture, at least in the U.S., shows that meaningful pro-consumer reforms get slow-walked until the underlying bills dilute and/or die in committee.

Or, if reforms do pass, they get reversed the next time the counter-party gains enough power in Congress to roll back the progress.

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#37
post #18

Can someone who works in commercial web dev explain how companies even end up with this much crap pulled into their websites?

When you try to maximize ad revenue, you add multiple advertising SDKs to your website, each of which can often do live bidding with hundreds of ad/data brokers

You can usually check the ads.txt file on a website to see which companies are allowed to bid for ad space on there. For example, for dict.cc, the website in question:

https://dict.cc/ads.txt

The ones labelled "RESELLER" will probably share your data with even more ad companies.

Re: 1,741 "informed" consents with one click? GDPR complaint filed

#40
post #14
post #8

Still wondering how "freely given, informed, specific and unambiguous" is fulfilled by "sure you can opt-out of tracking - by buying a premium subscription. Also, here are our 589 'partners' that all claim legitimate interest" but here we are.

Legitimate interest does not exist and is a loophole in the law which should be killed. You can challenge it but the authorities who should handle that are grossly underfunded.

It does exist, but the allowable use cases that third parties can claim "legitimate interest" for need to be severely restricted. At present, it's a joke - a single site can have dozens or even hundreds of companies claiming "legitimate" interests, but which are anything but legitimate.
Post reply on HN