4 ms·
>All sites need to implement a nag screen for unknown users It wasn't all sites though, it was just sites that use third-party tracking and things like that, y
by corney91 9y ago
>All sites need to implement a nag screen for unknown users
It wasn't all sites though, it was just sites that use third-party tracking and things like that, you didn't need a nag screen if the cookie was part of the functionality of the site eg a website with a login screen[1].
Everyone just copied everyone else with adding a nag screen for all sites because nobody actually read the rules.
[1] http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm
- rimliu 9y agoWhat you say is true only for session cookies. From the linked document: > first‑party persistent cookies DO require informed consent.
- corney91 9y agoTrue, but the "remember me" checkbox is sufficient consent: > Persistent login cookies which store an authentication token across browser sessions are not exempted under CRITERION B. This is an important distinction because the user may not be immediately aware of the fact that closing the browser will not clear their authentication settings. They may return to the website under the assumption that they are anonymous whilst in fact they are still logged in to the service. The commonly seen method of using a checkbox and a simple information note such as “remember me (uses cookies)” next to the submit form would be an appropriate means of gaining consent therefore negating the need to apply an exemption in this case.