5 ms·

If you look just to the right of that statement, there's a button labeled Personalize that lets you set which 3rd party services you consent to. Correct me if I

If you look just to the right of that statement, there's a button labeled Personalize that lets you set which 3rd party services you consent to. Correct me if I'm wrong, but that appears compliant...

michaelmrose 8y ago
Why can't we just set a single setting and have every website obey it?
- amaccuish 8y ago
  It's called Do-Not-Track and was ignored...
  - mehrdadn 8y ago
    If GDPR required websites to obey DNT would it still be ignored?
    - jgtrosh 8y ago
      GDPR requires active consent (or so I have repeatedly seen on HN), and that was clearly ignored
      - mehrdadn 8y ago
        Yeah, very true. :\
    - ATsch 8y ago
      From what I understand, DNT is in fact shrined into law in the upcoming ePrivacy law though.
- fgandiya 8y ago
  We can set the single setting (Do not track), but websites can ignore it.
- beaconstudios 8y ago
  Why are third party cookies allowed at all?
  - Animats 8y ago
    I've had them disabled for years, and everything works fine.
    - ddebernardy 8y ago
      So have I, but for some reason my browser cache is cluttered with 3rd party content I never asked for. The feature is evidently broken.
      - tatersolid 8y ago
        Turning-off third party cookies doesn’t prevent third-party images, CSS, JS, or fonts from being loaded. Your browser just doesn’t save or send cookies while doing so. These third-party things should be in your cache.
- lozenge 8y ago
  We had that in 2002, it was called P3P. Maybe it's time we came full circle...
tgsovlerkhgsel 8y ago
AFAIK active consent is required. Not clicking a button is not active consent.
Klathmon 8y ago
I'm not trying to bait a fight here, I'm genuinely curious. Why is that okay but the way google is doing it isn't? From the linked article: > The relevant information is accessible after several steps only, implying sometimes up to 5 or 6 actions. For instance, this is the case when a user wants to have a complete information on his or her data collected for the personalization purposes or for the geo-tracking service. How is that different than the banner on cnil.fr? When you click personalize, you are brought to a page where you have a list of services they share your information with. Clicking on "read more" for any of the video sites near the bottom shows a pretty nonsensical page [1] which tells you an "Activation rate" and how many cookies it sets (which in the case of the "facebook" option says "this service does not use cookie". Then clicking on the "view the official website" sends you to [2] which states how they use cookies. I genuinely don't understand why they are allowed to put the information in a menu that is behind a "personalize" button in a menu, and then only explain how the data is shared by clicking on several other links to understand, but google is getting fined for doing what seems like the same thing. Even if you click the "view the official website" for YouTube on the permissions screen on cnil.fr, you are sent to [3], which seems like a VERY comprehensive screen that details all the information they collect, what they do with it, and how to stop it. And if Google or cnil.fr can't get this right, what hope do I have of getting it right? [1] https://opt-out.ferank.eu/en/service/facebook/ https://opt-out.ferank.eu/en/service/facebook/ [2] https://www.facebook.com/policies/cookies/ https://www.facebook.com/policies/cookies/ [3] https://policies.google.com/privacy?hl=en&gl=en https://policies.google.com/privacy?hl=en&gl=en
- zrobotics 8y ago
  Because, to opt out for Google requires settings that are hard to find (and seem like they are intentionally hard to find) and set across multiple pages, where it is difficult to know that you have opted out of all data collection. Furthermore, with the distribution and obfuscation of the settings it is difficult for anyone to know how much data Google has, and one of the provisions of GDPR is that companies allow consumers to access their personal data. In this regard Google is even worse than Facebook. I expect that, if cnil.fr is compliant, then clicking deny all stops all data collection.

If you look just to the right of that statement, there's a button labeled Personalize that lets you set which 3rd party services you consent to. Correct me if I'm wrong, but that appears compliant...

michaelmrose 8y ago

Why can't we just set a single setting and have every website obey it?

amaccuish 8y ago
It's called Do-Not-Track and was ignored...
- mehrdadn 8y ago
  If GDPR required websites to obey DNT would it still be ignored?
  - jgtrosh 8y ago
    GDPR requires active consent (or so I have repeatedly seen on HN), and that was clearly ignored
    - mehrdadn 8y ago
      Yeah, very true. :\
  - ATsch 8y ago
    From what I understand, DNT is in fact shrined into law in the upcoming ePrivacy law though.
fgandiya 8y ago
We can set the single setting (Do not track), but websites can ignore it.
beaconstudios 8y ago
Why are third party cookies allowed at all?
- Animats 8y ago
  I've had them disabled for years, and everything works fine.
  - ddebernardy 8y ago
    So have I, but for some reason my browser cache is cluttered with 3rd party content I never asked for. The feature is evidently broken.
    - tatersolid 8y ago
      Turning-off third party cookies doesn’t prevent third-party images, CSS, JS, or fonts from being loaded. Your browser just doesn’t save or send cookies while doing so. These third-party things should be in your cache.
lozenge 8y ago
We had that in 2002, it was called P3P. Maybe it's time we came full circle...

tgsovlerkhgsel 8y ago

AFAIK active consent is required. Not clicking a button is not active consent.

Klathmon 8y ago

I'm not trying to bait a fight here, I'm genuinely curious. Why is that okay but the way google is doing it isn't? From the linked article: > The relevant information is accessible after several steps only, implying sometimes up to 5 or 6 actions. For instance, this is the case when a user wants to have a complete information on his or her data collected for the personalization purposes or for the geo-tracking service. How is that different than the banner on cnil.fr? When you click personalize, you are brought to a page where you have a list of services they share your information with. Clicking on "read more" for any of the video sites near the bottom shows a pretty nonsensical page [1] which tells you an "Activation rate" and how many cookies it sets (which in the case of the "facebook" option says "this service does not use cookie". Then clicking on the "view the official website" sends you to [2] which states how they use cookies. I genuinely don't understand why they are allowed to put the information in a menu that is behind a "personalize" button in a menu, and then only explain how the data is shared by clicking on several other links to understand, but google is getting fined for doing what seems like the same thing. Even if you click the "view the official website" for YouTube on the permissions screen on cnil.fr, you are sent to [3], which seems like a VERY comprehensive screen that details all the information they collect, what they do with it, and how to stop it. And if Google or cnil.fr can't get this right, what hope do I have of getting it right? [1] https://opt-out.ferank.eu/en/service/facebook/ https://opt-out.ferank.eu/en/service/facebook/ [2] https://www.facebook.com/policies/cookies/ https://www.facebook.com/policies/cookies/ [3] https://policies.google.com/privacy?hl=en&gl=en https://policies.google.com/privacy?hl=en&gl=en

zrobotics 8y ago
Because, to opt out for Google requires settings that are hard to find (and seem like they are intentionally hard to find) and set across multiple pages, where it is difficult to know that you have opted out of all data collection. Furthermore, with the distribution and obfuscation of the settings it is difficult for anyone to know how much data Google has, and one of the provisions of GDPR is that companies allow consumers to access their personal data. In this regard Google is even worse than Facebook. I expect that, if cnil.fr is compliant, then clicking deny all stops all data collection.