4 ms·
Where is it written that it applies only to third party cookies? AFAIK the old cookie law only allowed cookies without permission, first party or third party, w
by guy98238710 9y ago
Where is it written that it applies only to third party cookies? AFAIK the old cookie law only allowed cookies without permission, first party or third party, where they were required for website to function, e.g. shopping cart cookies. I interpret this as banning even those cookies that improved user experience, but that weren't strictly required for the website to function.
- pjc50 9y agoSee http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm which lists various examples. I've got to admit that I'm struggling to come up with an example that "improves user experience" that would genuinely not be allowed.
- guy98238710 9y agoActually coming up with an example is quite easy. Consider website with huge catalog that customizes recommendations based on your previous activity on the website. This makes user experience better, but it is not strictly required for the site to function. None of the exceptions on the page you linked apply to this case.
- pjc50 9y agoIf the user has an account cookie that would be subsumed in there, along with the consent notice that the site was storing your activity. If there is no other cookie, then it gets interesting - you're storing a chunk of their browser history, which if you can identify it to a particular user becomes personal data. Then you need their permission to store this - and that's the intent of the GDPR.
- TheCoelacanth 9y agoYou could easily do that for logged in users without using anything more than a session cookie to track that they are logged (which was allowed). Tracking non-logged in users across multiple sessions is obviously not allowed without consent, but that is exactly the type of non-consensual privacy invasion that the law is intended to prevent.