4 ms·
> For some context on why: consider those "cookie" notices you see on every site now. That's the 'cookie law'[1], not the GDPR. As I understand it, you don't h
by stordoff 8y ago
> For some context on why: consider those "cookie" notices you see on every site now.
That's the 'cookie law'[1], not the GDPR. As I understand it, you don't have to provide a way to say no. You just have to notify people before doing it.
[1] Privacy and Electronic Communications Directive 2002
- munchbunny 8y agoThat's correct, if you don't collect or use that data in the first place, you don't have to ask. Keeping email addresses and placing cookies for account creation doesn't by itself require a notice, just due care in handling. It's when you want to use it for advertising or other "off label" purposes that these messages become mandatory.
- merijnv 8y ago> That's the 'cookie law'[1], not the GDPR. As I understand it, you don't have to provide a way to say no. You just have to notify people before doing it. Not even that, the "cookie law" is grossly misunderstood, since it already allowed things like "session cookies" and other account related settings/preferences without any sort of banner. What it banned/didn't allow (at least not without warning) is 3rd party/ad tracking cookies. Some companies just added blanket warnings "to be safe", everyone started mimicing that and now we have the insanity that is modern web publishing...