Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR enforcer rules that IAB Europe’s consent popups are unlawful

iccl.ie

Post reply on HN
Print view View original

151–160 of 433 posts

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#151

Post by jusssi »

jimmaswell wrote: post #115
phh wrote: post #6

My favorite part is: > All data collected through the TCF must now be deleted by the more than 1,000 companies that pay IAB Europe to use the TCF. This includes Google’s, Amazon’s and Microsoft’s online advertising businesses. It's not just that they need to find new ways to screw users. It's that since they screwed users, they also must lose their ill-gained data. Which will probably be a nice deterrent against them…

How are they screwing users? By showing them relevant ads?

> By showing them relevant ads?

If only. Generally they just manage to show me ads to buy more of the stuff I just bought. Or something I looked at and decided not to buy.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#152

Post by Nextgrid »

shadowgovt wrote: post #26
phh wrote: post #6

My favorite part is: > All data collected through the TCF must now be deleted by the more than 1,000 companies that pay IAB Europe to use the TCF. This includes Google’s, Amazon’s and Microsoft’s online advertising businesses. It's not just that they need to find new ways to screw users. It's that since they screwed users, they also must lose their ill-gained data. Which will probably be a nice deterrent against them…

> Which will probably be a nice deterrent against them pulling the same shit again. Unfortunately, there are reasons they want these cookies on there so badly that justify the cost to figure out how to comply with the policy and try again.

My understanding is that they did not comply to begin with. However, enforcement is still lacking as I don't see a monetary fine, so effectively they got away with it.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#153

Post by [deleted] »

gilrain wrote: post #11
bajtos wrote: post #2

Google, Amazon, and the entire tracking industry relies on IAB Europe’s consent system, which has now been found to be illegal following complaints coordinated by ICCL. EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.

I wish my government looked out for me like this.

[deleted]

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#154

Post by petercooper »

iqanq wrote: post #7

Quoted post unavailable.

I understand the frustration and would probably have said similar till recently. I'm now starting to think these companies can't be trusted to keep pushing things beyond the spirit of the law and that we should simply outlaw certain forms of data collection so that even asking for consent isn't required.

I have no problem with a Web site owner monitoring my progress around their site, timing my interactions, recording what things I was interested in, and then using that data to "optimize" my experience. But do I think having Facebook track me around hundreds of non-Facebook sites is OK? Or an ad network doing the same? Not really. I would be quite happy if they fully legalised first party data collection and outlawed third party collection entirely (including proxying first party data to a third party automatically - to close that loophole), to be honest, and then we wouldn't need consent buttons or banners, perhaps.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#155

Post by jdrc »

Good, but i 'd like to see someone going after the root perpetrators of this racket, the advertisers themselves. That industry is surprisingly immune from scrutiny despite the fact that they 've wholesale sold their soul to google which is now both the buyer and seller of billions of advertiser money. They re just enabling the monopoly

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#156

Post by iamacyborg »

Macha wrote: post #54
donohoe wrote: post #41

Earlier quoted context omitted.

Also, in loading ads from these vendors, many often included external JS to whatever flavor-of-the-month adtech vendors or trackers they were using. These were often not even listed in the framework. There was little-to-no compliance/auditing that I am aware. It was business as usual for many ad networks.

A former employer in the adtech space did audit that the ads were only including vendors from the list, but I don't know how many of our competitors did the same.

How were you auditing where the data went for advertisers that lost the auction though?

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#157

Post by donohoe »

Tomte wrote: post #114
donohoe wrote: post #52

Earlier quoted context omitted.

You are right. I also believe many publishers knew this too but the IAB provides a shield of sorts and buys time when it is inevitably (as in now) ruled illegal. Most ad-tech, and programatic advertising, is not compatible with GDPR. I think that is intentional on part of the EU - and something I am a fan of personally. The industry needs to shift - contextual ads or other innovations - others have done this. They re…

It's hard to start doing this when your competitors keep playing by the old rules. My hope is that ever more aggressive enforcement will finally lead us to the point where the dams break and everyone scrambles to get compliant at once. The sooner, the better. But I realize that the legal system needs to ramp up the pressure, they cannot start with company-destroying fines on day one. These rulings and fines keep me i…

True, but the months ahead of GDR directive coming in was one of those potential moments.

Google kept promising us their own framework and consent system. They kept pushing the date to unveil it and as we ran out of time I had to build my own, and many others jumped into the IAB framework because of so few options (and it came down to the wire there too despite knowing for years this was in the works).

>> they cannot start with company-destroying fines on day one

I think they can - and the GDPR fines are linked to revenue - and I think they have no choice. Companies need to take this seriously.

>> Slowly, but still

I'll take slowly over backwards.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#158

Post by andylynch »

Scarblac wrote: post #34
gilrain wrote: post #11

Earlier quoted context omitted.

I wish my government looked out for me like this.

The scary thing is that it's the EU doing this. Our national elected governments are not interested in actually fixing things like this because it doesn't immediately win votes, and there is only a limited number of national civil servants so nobody is working on this kind of thing on a national scale. But put those civil servants in a committee in Brussels with not as much short term pressure, and they can work out…

Remember you have MEPs representing you as well. European elections too often play a distant second fiddle to domestic ones but this really should not be the case.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#159

Post by marketingtech »

endisneigh wrote: post #14

> EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses. How much data is being collected through these pop-ups?

The data being collected is a random identifier and a consent opt-in for tracking/cookies. These businesses use this framework as their source-of-truth declaring whether an internet user consented to cookies or tracking, and their ad systems behave according to the user's preferences.

So now they're being asked to delete their records of who opted in or out, because that data was illegitimately acquired.

[edit] This could also have implications regarding data collected through other systems based on the assumption that an opt-in was valid.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#160

Post by ncallaway »

endisneigh wrote: post #120
parkingrift wrote: post #116

Earlier quoted context omitted.

Transparency. People are overwhelmingly unaware of the volume and types of data that is collected on them. And at this point the free market can’t resolve this. The spyware model has absolutely ruined the internet economy. There is no way to compete against a spyware company with a paid product.

If people are choosing "spyware" over a "paid" product, perhaps they just don't care about data collection that much. Isn't that the logical conclusion? Objectively ads have added more money into the internet economy than ever before. Curious where you're getting your numbers. 20 years ago "YouTuber" wasn't even a profession. The idea some rando with a microphone and a camera could make millions was unheard of. It's…

Suppose there are two products on the market.

One, a children’s toy that sells for $9.99. The other a very similar children’s toy that uses lead paint, instead of a safer paint, but is otherwise very similar. It is not clearly labeled as having lead paint. The lead paint toy sells for $4.99.

If people buy the cheaper toy, does that mean people are “choosing” lead paint over the more expensive toy? No! It means people are unaware of the lead paint, or are unaware of the dangers of lead to children.

Post reply on HN