Consent-O-Matic: Automatic handling of GDPR consent forms

Post by FreeHugs » Thu, Mar 10, 2022, 5:08 PM UTC

andylynch wrote: post #66

FreeHugs wrote: post #58

Earlier quoted context omitted.

"Accept all" and the "Deny all" must be both be the same level of "easy-ness" I think this is not clear until it has been tested in court. Many websites now have two offers: Free with 3rd part ads and paid. Surely paying is much less easy than clicking "Ok, show me the content with 3rd party ads". It will be very interesting, how courts see this.

I think it's pretty clear, GDPR literally says 'It shall be as easy to withdraw as to give consent'. The really problem is enforcement has been lacking, this is what NOYB are co. are working to fix.

Post by pmontra » Thu, Mar 10, 2022, 5:16 PM UTC

pydry wrote: post #51

pmontra wrote: post #36

Earlier quoted context omitted.

That's not informed consent but if you decide to accept everything without reading anything, it's your right to do it. You won't be able to complain in case of "surprises". So yes, a browser could come with an "Accept all" setting, probably disabled by default, but which browser vendor is going to go through the trouble of implementing that, proposing an API and above all getting every Privacy Agency of the world to…

Clicking a checkbox that says "accept all tracking/cookies purpose from any website" and having the browser accept for you absolutely is informed consent. A court would look at this and a person who mindlessly clicked "accept all" on every website as equivalent. Browsers could propose an API for this functionality and no doubt some websites would implement it. They havent but they could. Whether there's any point is…

Post by Apocryphon » Thu, Mar 10, 2022, 6:14 PM UTC

renewiltord wrote: post #100

Nextgrid wrote: post #34

Earlier quoted context omitted.

We had something like that called DNT, and not only did nobody honor it, but it was used as an extra fingerprinting vector, totally defeating its purpose. According to the GDPR, all non-essential tracking should be off by default, so "decline" is already the default if companies were compliant with the regulation (which is a big "if").

I was in ad tech once. We obeyed it. Lots of traffic went through us. No one cared that we obeyed it and our competitors didn’t. Left the code in anyway but that’s the thing about these things: consumer behavior reveals that they don’t actually give a fuck about whether anyone obeys this or not except for the time when they want to be outraged.

Post by Nextgrid » Thu, Mar 10, 2022, 6:19 PM UTC

renewiltord wrote: post #100

Nextgrid wrote: post #34

Earlier quoted context omitted.

We had something like that called DNT, and not only did nobody honor it, but it was used as an extra fingerprinting vector, totally defeating its purpose. According to the GDPR, all non-essential tracking should be off by default, so "decline" is already the default if companies were compliant with the regulation (which is a big "if").

I was in ad tech once. We obeyed it. Lots of traffic went through us. No one cared that we obeyed it and our competitors didn’t. Left the code in anyway but that’s the thing about these things: consumer behavior reveals that they don’t actually give a fuck about whether anyone obeys this or not except for the time when they want to be outraged.

Post by elevatortrim » Thu, Mar 10, 2022, 7:31 PM UTC

FreeHugs wrote: post #43

I wish there was an open source project for developers to implement those darn consent forms. Adsense offers an automatic consent modal. But the problem with that one is that it not only displays the consent modal but also injects a smaller widget into the site. It looks like the widget only pops up when the user scrolls down to the bottom of the page. Unfortunately, that also makes it pop up when the page is not lon…