Live data from Hacker News

Largest GDPR fines surpass $1.3B

transcend.io

1–10 of 45 posts

Re: Largest GDPR fines surpass $1.3B

#2
The section on “ How to avoid GDPR fines in 2022” is naïve to a fault.

My personal opinion is that after recent rulings startups need to be very careful. GDPR compliance is practically a nightmare for any entity that even so much implements visitor counter with default http logging turned on.

It will be interesting to see how solutions and landscape evolves once GDPR fines come to smaller companies and startups.

Re: Largest GDPR fines surpass $1.3B

#3
"According to France’s privacy watchdog CNIL, Youtube users only had to click once to accept cookies, whereas refusing cookies took multiple clicks.

CNIL’s complaint stated that Google purposefully made the consent mechanisms more complex to push consumers to accept cookies––a clear violation of the GDPR’s requirement that companies provide equally simple ways to opt into or out of data collection."

So these dark patterns are officially violating GDPR. However there are still tons of websites implementing this.

Re: Largest GDPR fines surpass $1.3B

#4
post #3

"According to France’s privacy watchdog CNIL, Youtube users only had to click once to accept cookies, whereas refusing cookies took multiple clicks. CNIL’s complaint stated that Google purposefully made the consent mechanisms more complex to push consumers to accept cookies––a clear violation of the GDPR’s requirement that companies provide equally simple ways to opt into or out of data collection." So these dark pat…

They were from the start and this was abundantly clear, but given the complete lack of enforcement, people just did whatever the big websites were doing. If these don't get caught, why would they go for random cooking blogs?

Re: Largest GDPR fines surpass $1.3B

#5
post #2

The section on “ How to avoid GDPR fines in 2022” is naïve to a fault. My personal opinion is that after recent rulings startups need to be very careful. GDPR compliance is practically a nightmare for any entity that even so much implements visitor counter with default http logging turned on. It will be interesting to see how solutions and landscape evolves once GDPR fines come to smaller companies and startups.

Maybe defaults should not be designed to capture personal information.

This indicates a massive need for GDPR or something like it, as opposed to the opposite.

The lack of disincentives to collect personal information is why so many softwares default to collecting it. GDPR flips the equation completely, where GDPR aware software (and lots of software now market their GDPR compatibility) will default to not collecting personal information.

Re: Largest GDPR fines surpass $1.3B

#6
post #2

The section on “ How to avoid GDPR fines in 2022” is naïve to a fault. My personal opinion is that after recent rulings startups need to be very careful. GDPR compliance is practically a nightmare for any entity that even so much implements visitor counter with default http logging turned on. It will be interesting to see how solutions and landscape evolves once GDPR fines come to smaller companies and startups.

just embedding a tweet from Twitter's official embed code makes you violate GDPR (e.g. if you have a blog and want to reference a tweet).

Twitter injects a ton of cookies and there's not much you can do about it

Re: Largest GDPR fines surpass $1.3B

#7
post #6
post #2

The section on “ How to avoid GDPR fines in 2022” is naïve to a fault. My personal opinion is that after recent rulings startups need to be very careful. GDPR compliance is practically a nightmare for any entity that even so much implements visitor counter with default http logging turned on. It will be interesting to see how solutions and landscape evolves once GDPR fines come to smaller companies and startups.

just embedding a tweet from Twitter's official embed code makes you violate GDPR (e.g. if you have a blog and want to reference a tweet). Twitter injects a ton of cookies and there's not much you can do about it

Using Google fonts is a violation now. It's a nightmare for web developers.

Re: Largest GDPR fines surpass $1.3B

#8
post #7
post #6

Earlier quoted context omitted.

just embedding a tweet from Twitter's official embed code makes you violate GDPR (e.g. if you have a blog and want to reference a tweet). Twitter injects a ton of cookies and there's not much you can do about it

Using Google fonts is a violation now. It's a nightmare for web developers.

Maybe web devs should more carefully consider how much crap third party scripts and resources inject into their sites, rather than caring about a tiny bit of convenience.

Re: Largest GDPR fines surpass $1.3B

#9
post #7

Earlier quoted context omitted.

Using Google fonts is a violation now. It's a nightmare for web developers.

Maybe web devs should more carefully consider how much crap third party scripts and resources inject into their sites, rather than caring about a tiny bit of convenience.

Maybe users should be responsible for what they intentionally run on their machines.

Re: Largest GDPR fines surpass $1.3B

#10

Earlier quoted context omitted.

Maybe web devs should more carefully consider how much crap third party scripts and resources inject into their sites, rather than caring about a tiny bit of convenience.

Maybe users should be responsible for what they intentionally run on their machines.

Nobody in their right mind is going to carefully peruse the cookies and injected JS scripts of every page they visit.

No, the onus is clearly on the developers, who are the ones with the professional responsibility to make software that abides by the laws.

Post reply on HN