Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR enforcer rules that IAB Europe’s consent popups are unlawful

iccl.ie

Post reply on HN
Print view View original

181–190 of 433 posts

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#181

Post by cowl »

jeroenhd wrote: post #39
iqanq wrote: post #7

Quoted post unavailable.

The industry should really get together and set up something like P3PP but good. These settings should be set in the browser, not in the client. Of course the ad and web stalking people don't want that, because that means users can easily opt out. With Google's misguided attempt to force FLOC down everyone's throats we may see them join forces with Apple, Microsoft and Mozilla at some point to develop a consent proto…

How would the browser be able to enforce what the Actual server does with the data? This would work only for those binary track everything/don't track anything scenarios. Those are rare cases. What the the majority of us want and the whole purpose of the GDPR is, is the "informed consent" part. A detailed list of what information is gathered and how it is going to be used. A browser can not really enforce "I give you consent to use my data for "Use-case" in this site but don't use it for advertising or sell it". And since the potential uses are thousands, a generic form can not be used as a real consent form. The only way is the planned way. Every site/App Declares what/how they are using the collected data and take legal responsibility in case of infraction.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#182

Post by kmlx »

marcus_holmes wrote: post #117
colechristensen wrote: post #104

Earlier quoted context omitted.

Europe is obviously walking very slowly towards federalism without saying it too loudly.

Germany and France are saying it fairly loudly - they've never hidden their intent to make the EU a federal, unified, state. And with Brexit, the biggest obstacle to that has been removed - the UK never wanted to be part of a Federal EU (because we always considered ourselves part of the British Empire/Commonwealth). There are other EU countries who aren't wildly enthusiastic about a Federal EU too, but it was always…

> And with Brexit, the biggest obstacle to that has been removed

this is false. very few european countries want a federal, unified state.

so nothing of meaning will happen until a lot of things change.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#183

Post by endisneigh »

Jensson wrote: post #161
endisneigh wrote: post #149

Earlier quoted context omitted.

What you're saying is literally illogical in the case of IAB acting as an intermediary... Not sure you know what you're talking about in this case. The entire point of the original article is that the user's data is being fed through via IAB to tracking companies. This isn't a normal GDPR situation where the user's data directly is being stored in a way that's accessible to the user as well. Obviously in that scenari…

If you keep data about a person in the EU that data is protected by GDPR regardless where or how you got it, having an intermediary doesn't matter. > how will the Council know if the end-tracking companies deleted their data? That doesn't matter, all they need is to ask the companies and the companies to say that they deleted the data. That is how everything else works with GDPR. When you ask a company to delete your…

yeah you're not understanding what I'm saying. cheers.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#184

Post by riddleronroof »

bajtos wrote: post #2

Google, Amazon, and the entire tracking industry relies on IAB Europe’s consent system, which has now been found to be illegal following complaints coordinated by ICCL. EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.

Ok but I don’t get how this consent system ran for years? How can one get pre approved? The issue here isn’t that they collected data (it’s own problems), but they they didn’t use the right language! Does this mean it will be a long term of conditions like apple does every time we use a website? ICCL might have made internet worse with this. Not better.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#185

Post by jpambrun »

rkagerer wrote: post #123

To be frank, the practical result of GDPR is that it made my browsing experience worse. Nearly every website opens with an annoying cookie popup, often blocking the content (or reducing it to a fraction of my screen on mobile). I've never once clicked "Yes, track everything", except by accident when tricked into it by deceptive UI (eg. a button designed to look more inviting than its less invasive counterpart). I get…

This is those companies successfully instrumenting you to lobby on their behalf. It is purposely and spitefully made to be annoying. Let's not reward that.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#186

Post by Nbox9 »

notreallyserio wrote: post #98
buran77 wrote: post #51

Earlier quoted context omitted.

> All data collected through the TCF must now be deleted At best the companies will have to delete months of data, the rest being stale or already fed through some ML loop that extracted any useful value from it.

Would they need to delete derived ML data as well?

My understanding is that as long as there is no PII is in the ML model (there’s not) then any existing models do not need to be deleted.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#187

Post by foxfluff »

jimmaswell wrote: post #115
phh wrote: post #6

My favorite part is: > All data collected through the TCF must now be deleted by the more than 1,000 companies that pay IAB Europe to use the TCF. This includes Google’s, Amazon’s and Microsoft’s online advertising businesses. It's not just that they need to find new ways to screw users. It's that since they screwed users, they also must lose their ill-gained data. Which will probably be a nice deterrent against them…

How are they screwing users? By showing them relevant ads?

I gave them two decades and they never figured out how to show ads that are relevant. They never figured it out and I don't believe they ever will, I'm done sharing data with them and I'm done watching ads.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#188

Post by Isinlor »

rkagerer wrote: post #123

To be frank, the practical result of GDPR is that it made my browsing experience worse. Nearly every website opens with an annoying cookie popup, often blocking the content (or reducing it to a fraction of my screen on mobile). I've never once clicked "Yes, track everything", except by accident when tricked into it by deceptive UI (eg. a button designed to look more inviting than its less invasive counterpart). I get…

There should be some separate law that would oblige companies to accept "do-not-track" HTTP header.

Then we could just set it in our browser settings.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#189

Post by iamacyborg »

Macha wrote: post #165
iamacyborg wrote: post #156

Earlier quoted context omitted.

How were you auditing where the data went for advertisers that lost the auction though?

We were on the advertiser side of the equation - we just wouldn't bid on european IPs with ads that hadn't yet been audited or failed the audit.

Ah okay, that makes more sense that way.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#190

Post by dane-pgp »

Nextgrid wrote: post #167
Rygian wrote: post #99

Earlier quoted context omitted.

> How is it spying when the people are freely giving away their data? The ruling has proved that no, people are not freely giving away their data. One of the infringing issues is that the system "Fails to properly request consent."

When consent is enforced by a system that can't be bypassed via dark patterns such as Apple's App Tracking Transparency, the actual opt-in rate is around 4%, suggesting that when given a proper choice users don't actually want to give away their data.

> around 4%

Which, coincidentally, happens to be Lizardman’s Constant.

https://slatestarcodex.com/2013/04/12/noisy-poll-results-and...

Post reply on HN