undefined | Better HN

0 pointsGekkePrutser4y ago0 comments

No it's required for all types of tracking including but not exclusively cookies. Only days collection that is absolutely required to provide the service may be collected without consent and for that purpose only.

0 comments

beebeepka4y ago

Law is reasonable then. You track your user, you notify them . I fail to see the problem.

Then again, I am not running shady websites and selling user data

kortilla4y ago

Yes, very reasonable. Gdpr pop ups on nearly every site with dark patterns making it annoying to opt out. A resounding success.

dmitriid4y ago

Once again, those popups are illegal under GDPR. So yes, it's a failure of law enforcement, but doesn't make the law itself unreasonable.

1 more reply

_abox4y ago

It should be opt in actually as per GDPR. But I agree they should police that a lot more.

Beldin4y ago

To put that slightly differently: warnings/popups are never needed unless you're taking data from your visitor which has nothing to do with the function(s) your offering the visitor.

The GDPR spells out when you're allowed to collect data; asking for consent is basically its emergency escape hatch. You only need to do that if there is absolutely no (functional) reason to get that data, but you want it anyway.

nickpp4y ago

GDPR doesn't spell out anything. It's the most vague f-ing BS I have ever seen. There are no definitions, no guidelines.

6 years later there is no consensus on simple questions like website analytics which is probably the most common usage scenario for the kind of data GDPR covers.

This law is beyond bad.

dmitriid4y ago

> There are no definitions, no guidelines.

There are both definitions and guidelines. You just didn't even care to read it.

For example, cookies: https://gdpr.eu/cookies/

Popups: https://gdpr.eu/recital-32-conditions-for-consent/

=== start quote ===

Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data

...

Silence, pre-ticked boxes or inactivity should not therefore constitute consent.

=== end quote ===

> there is no consensus on simple questions like website analytics which is probably the most common usage scenario for the kind of data GDPR covers.

The consensus is there. And it's spelled clearly in the law.

1 more reply

j / k navigate · click thread line to collapse

0 comments

beebeepka4y ago

Law is reasonable then. You track your user, you notify them . I fail to see the problem.

Then again, I am not running shady websites and selling user data

kortilla4y ago

Yes, very reasonable. Gdpr pop ups on nearly every site with dark patterns making it annoying to opt out. A resounding success.

dmitriid4y ago

Once again, those popups are illegal under GDPR. So yes, it's a failure of law enforcement, but doesn't make the law itself unreasonable.

1 more reply

_abox4y ago

It should be opt in actually as per GDPR. But I agree they should police that a lot more.

Beldin4y ago

To put that slightly differently: warnings/popups are never needed unless you're taking data from your visitor which has nothing to do with the function(s) your offering the visitor.

nickpp4y ago

GDPR doesn't spell out anything. It's the most vague f-ing BS I have ever seen. There are no definitions, no guidelines.

6 years later there is no consensus on simple questions like website analytics which is probably the most common usage scenario for the kind of data GDPR covers.

This law is beyond bad.

dmitriid4y ago

> There are no definitions, no guidelines.

There are both definitions and guidelines. You just didn't even care to read it.

For example, cookies: https://gdpr.eu/cookies/

Popups: https://gdpr.eu/recital-32-conditions-for-consent/

=== start quote ===

Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data

...

Silence, pre-ticked boxes or inactivity should not therefore constitute consent.

=== end quote ===

> there is no consensus on simple questions like website analytics which is probably the most common usage scenario for the kind of data GDPR covers.

The consensus is there. And it's spelled clearly in the law.

1 more reply

j / k navigate · click thread line to collapse