Live data from Hacker News

GDPR enforcer rules that IAB Europe’s consent popups are unlawful

iccl.ie

401–410 of 433 posts

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#401

> EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. Plagued Europeans? Are they seeing additional consent pop ups beyond the ones all the rest of us are tortured with?

I'm under the impression that some sites have created an especially annoying cookie wall for the EU, while serving their baseline annoying cookie wall to the rest of the world. Most of the sites can't be bother to make the distinction though.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#402

Earlier quoted context omitted.

Most large companies have ethics hotlines you are expected to call when there is something questionable ethically or legally going on that might be difficult to bring up to a superior. Personally I'd refuse to add a dark pattern cookie dialog, but I'm in the privileged position of being able to switch jobs. But regardless, I'd probably send the ethics hotline an email saying that regulations are violated. Perhaps I'd…

Weird— I haven't worked for a big software development organization in some time but I've never heard of that. That's a positive thing if the company has good corporate culture and uses the information well instead of just calling your boss and asking them to consider being more ethical because you complained.

These things are there so that investor's money are safe. In my case the ethics hotline is above the company, in the owning company (Berkshire). They don't want massive lawsuits, or tarnished brands because of things like VW dieselgate or things like that. And I think a lot of times even minor things can get pretty big consequences if it's actually illegal and not just "well it's a matter if interpretation".

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#403

Earlier quoted context omitted.

If those companies extend their business beyond the US' jurisdiction, why do you feel they shouldn't be subject to some form of control where they operate? I'm legitimately asking. This is about something that was done within the EU to EU citizens. Why shouldn't the EU have a say?

I don’t feel that, actually. I’m not sure where you got that impression - maybe straw men are easier to debate? There are laws and then are how laws are enacted. Hint: pay attention to how homegrown EU companies are treated. EDIT: https://www.enforcementtracker.com/ Look here specifically. Sort by fine amount. Look at the companies that are being fined the hardest. It's not just the US that is being targeted. There's…

Or maybe the problem is that the US and UK also happen to be places that foster an attitude in their people that everyone else should just bow to them and do things the way they want...?

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#404

Earlier quoted context omitted.

My understanding so far is that the TCF allows providers to accept 'legitimate interest' (instead of direct user consent) as a valid legal basis to store or process user data. This is commonly used for user tracking and advertisement / profiling, meaning you'll get tracked even if you clicked the 'Reject All' button.

My understanding is that Legitimate Interest is something defined by the GDPR lawmakers, not the IAB. If so, and now it appears that LI is not a valid legal basis, then every business operating in Europe needs to be concerned with this ruling, not just adtech. For example, HN probably collects my IP address under LI. Now it may be illegal for it to do that.

It's defined in GDPR as something that 'can be reasonably expected for the business' and has 'little risk of infringing on privacy'. They specifically list fraud prevention, information security, dealing with employee data, as valid use cases. Marketing most definitely is not.

This move is basically clarifying that you can't simply claim legitimate interest for most advertising purposes, which the TCF was encouraging/facilitating.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#405

Earlier quoted context omitted.

I don't really have a MEP that's "mine", it's proportional representation,not a district system.

No districts? Is this a national "party list" system? Where is that (pardon my inquisitiveness, and feel free not to answer)? Instinctively it feels wrong not to be able to vote for a representative you can identify; but I can't formulate a coherent reason why it's wrong.

In the Netherlands, in my case. Party lists, yes. Most European countries have that as far as I know, I thought the UK was an outlier.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#406
post #296

Earlier quoted context omitted.

>According to who, you? Spyware is illegal. So it’s just a matter of defining the data collection practices of internet companies as spyware. >How is it spying when the people are freely giving away their data? It’s not “freely given away” when you need a team of attorneys to understand what you’ve agreed to and you have no audit rights. Point me to the public FB page where they clearly and easily define all points o…

> Spyware is illegal. So it’s just a matter of defining the data collection practices of internet companies as spyware. I’ve seen this phenomenon before but never so explicitly. When you can’t convince someone that something is bad, you re-define it as something they do consider bad. Some examples I’ve seen: - Some speech is so hateful and racist that its opponents wish to define it as “violence”. - Facebook offers a…

Don't act like the term "spyware" is nebulous and undefined. Spyware is collection of information without consent of users. It's well defined, well understood, and illegal.

The only thing people are hiding behind here is that users agree to it in some novel length TOS that they don't read and don't understand.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#407

Earlier quoted context omitted.

>Though I'd agree that most internet users don't like ads, what's true is that most internet users don't like paying for things. Using YouTube as an example, the most popular site on the internet, the vast majority of people do not pay for YouTube premium even though it's available. This is a bit circular. People would rather use a free service than a paid service. So long as free services exist it will be hard or im…

> This is a bit circular. People would rather use a free service than a paid service. So long as free services exist it will be hard or impossible for paid services to exist or thrive. Of course. If a paid product wants to thrive it needs to be better. People do use paid search engines, email, maps, etc. most people don’t because most people don’t value it that much. > There's no reason that we should have to make th…

Let's flip it. How about you continue with the spyware dystopia and the rest of us regulate away spyware businesses?

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#408

Earlier quoted context omitted.

The same way ads work in every other industry. Have you ever been to Times Square?

You mean the same ad industry that was easily supplanted by internet ads? So you want a regression, why exactly? If you don’t want to be tracked stop using sites that track you and install ad block.

Regression for... who? The ad industry? Woe is me. They'll be fine just as they were fine for literally the inception of commerce until about 20 years ago.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#409

Earlier quoted context omitted.

No districts? Is this a national "party list" system? Where is that (pardon my inquisitiveness, and feel free not to answer)? Instinctively it feels wrong not to be able to vote for a representative you can identify; but I can't formulate a coherent reason why it's wrong.

In the Netherlands, in my case. Party lists, yes. Most European countries have that as far as I know, I thought the UK was an outlier.

I see. I wasn't aware that the UK EU constituencies were an idiosyncratic deviation.

Of course, we no longer have MEPs! I often forget this - that's how much difference the MEPs made to my life.

Re: GDPR enforcer rules that IAB Europe’s consent popups are unlawful

#410
post #84

Earlier quoted context omitted.

Because voting doesn’t matter when your choices are corporate stooge A and corporate stooge B.

I always think of South Park. It's always a choice between a giant douche or a turd sandwich.

More like if it was a choice between two, shitty giant douches and one was painted orange and the other was painted with a rainbow. They’re both the same thing with a different color paint.
Post reply on HN