4 ms·

> If users want personalized ads, then let them opt in. Let's be honest, if you're using Facebook you've basically agreed to personalised ads on some level. We

> If users want personalized ads, then let them opt in. Let's be honest, if you're using Facebook you've basically agreed to personalised ads on some level. We all know their business model. Try convincing random joe that Facebook don't read their messages for ad purposes and you'll probably find most won't believe you. With that being said, Facebook also knows if their users are given a choice most will choose not to get personalised ads. That's why they fight so hard againist any privacy move.

cratermoon 6y ago
> if you're using Facebook you've basically agreed to personalised ads on some level Yes, but no. Someone who joined Facebook in 2007 would have had very different expectations than someone joining in 2017. And there's a difference between "sure, send me personalized ads" and "sell everything you know about to me malicious actors"
MaxBarraclough 6y ago
> if you're using Facebook you've basically agreed to personalised ads on some level The GDPR quite explicitly rejects the idea that this constitutes consent.
- that_guy_iain 6y ago
  Actually, I believe it explictly includes this idea of consent. For example, they state that when you use a cart system you consent to the cookie because you knew it would be needed. But my point was more about the basic idea that people know Facebook is data mining them and use it anyways therefore the idea that you haven't opt'd into it is a bit silly. I wasn't talking about the legal point of view.
  - MaxBarraclough 6y ago
    Consent requires a positive opt-in [0] but there are conditions that permit use of cookies without consent [1]. It seems clear to me that it was written with the intent of excluding advertising cookies while allowing shopping baskets to work even without consent, as you say. Facebook is contesting that its use of cookies falls under the processing is necessary for a contract you have with the individual category, and so doesn't require consent. Of course, if that's the case, the GDPR is truly toothless regarding tracking cookies. > my point was more about the basic idea that people know Facebook is data mining them and use it anyways therefore the idea that you haven't opt'd into it is a bit silly Another relevant point here is that we seem to keep focusing on cookies, but that's just a small part of the equation. [0] https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/ https://ico.org.uk/for-organisations/guide-to-data-protectio... [1] https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ https://ico.org.uk/for-organisations/guide-to-data-protectio...
    - jdlshore 6y ago
      The GDPR doesn’t discuss cookies, IIRC. It discusses the collection and use of personally identifiable information. The cookie law is a different law.
      - MaxBarraclough 6y ago
        You're right, got my wires crossed :P It's not directly relevant, but regarding exceptions to the consent requirements of the cookie law, apparently there are two: [0][1] > - the cookie is for the sole purpose of carrying out the transmission of a communication over an electronic communications network > - the cookie is strictly necessary to provide an ‘information society service’ (eg a service over the internet) requested by the subscriber or user. Note that it must be essential to fulfil their request – cookies that are helpful or convenient but not essential, or that are only essential for your own purposes, will still require consent. Unlike the GDPR, there's no necessary for the performance of a contract exemption. [0] https://en.wikipedia.org/wiki/HTTP_cookie#EU_cookie_directive https://en.wikipedia.org/wiki/HTTP_cookie#EU_cookie_directiv... [1] https://ico.org.uk/for-organisations/guide-to-pecr/cookies-and-similar-technologies/#exemptions https://ico.org.uk/for-organisations/guide-to-pecr/cookies-a...
reaperducer 6y ago
if you're using Facebook you've basically agreed to personalised ads on some level You don't have to join Facebook to be part of its data collection octopus.

cratermoon 6y ago

> if you're using Facebook you've basically agreed to personalised ads on some level Yes, but no. Someone who joined Facebook in 2007 would have had very different expectations than someone joining in 2017. And there's a difference between "sure, send me personalized ads" and "sell everything you know about to me malicious actors"

MaxBarraclough 6y ago

> if you're using Facebook you've basically agreed to personalised ads on some level The GDPR quite explicitly rejects the idea that this constitutes consent.

that_guy_iain 6y ago
Actually, I believe it explictly includes this idea of consent. For example, they state that when you use a cart system you consent to the cookie because you knew it would be needed. But my point was more about the basic idea that people know Facebook is data mining them and use it anyways therefore the idea that you haven't opt'd into it is a bit silly. I wasn't talking about the legal point of view.
- MaxBarraclough 6y ago
  Consent requires a positive opt-in [0] but there are conditions that permit use of cookies without consent [1]. It seems clear to me that it was written with the intent of excluding advertising cookies while allowing shopping baskets to work even without consent, as you say. Facebook is contesting that its use of cookies falls under the processing is necessary for a contract you have with the individual category, and so doesn't require consent. Of course, if that's the case, the GDPR is truly toothless regarding tracking cookies. > my point was more about the basic idea that people know Facebook is data mining them and use it anyways therefore the idea that you haven't opt'd into it is a bit silly Another relevant point here is that we seem to keep focusing on cookies, but that's just a small part of the equation. [0] https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/ https://ico.org.uk/for-organisations/guide-to-data-protectio... [1] https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ https://ico.org.uk/for-organisations/guide-to-data-protectio...
  - jdlshore 6y ago
    The GDPR doesn’t discuss cookies, IIRC. It discusses the collection and use of personally identifiable information. The cookie law is a different law.
    - MaxBarraclough 6y ago
      You're right, got my wires crossed :P It's not directly relevant, but regarding exceptions to the consent requirements of the cookie law, apparently there are two: [0][1] > - the cookie is for the sole purpose of carrying out the transmission of a communication over an electronic communications network > - the cookie is strictly necessary to provide an ‘information society service’ (eg a service over the internet) requested by the subscriber or user. Note that it must be essential to fulfil their request – cookies that are helpful or convenient but not essential, or that are only essential for your own purposes, will still require consent. Unlike the GDPR, there's no necessary for the performance of a contract exemption. [0] https://en.wikipedia.org/wiki/HTTP_cookie#EU_cookie_directive https://en.wikipedia.org/wiki/HTTP_cookie#EU_cookie_directiv... [1] https://ico.org.uk/for-organisations/guide-to-pecr/cookies-and-similar-technologies/#exemptions https://ico.org.uk/for-organisations/guide-to-pecr/cookies-a...

reaperducer 6y ago

if you're using Facebook you've basically agreed to personalised ads on some level You don't have to join Facebook to be part of its data collection octopus.