5 ms·

Well, who do you folks think should be fined next? Also, can't we just agree that "Legitimate interest" is noncompliance and fine BBC too while at it?

by zibzab 5y ago

t0mas88 5y ago
Facebook, they're refusing the right to access your data: https://ruben.verborgh.org/facebook/ https://ruben.verborgh.org/facebook/ And Google for the whole Doubleclick Ad Exchange, they're sharing lots of user details with hundreds of bidders on every pageview that has ads. As well as storing all of that information in Google Cloud as part of their Ads Data Hub product. All without permission.
tgsovlerkhgsel 5y ago
1. Every single web site that uses dark patterns that make not saying yes impractical. Start with the ones that required more than 3 clicks, then clarify that "the request must be clear, concise and not unnecessarily disruptive" means "equally sized, equally highlighted buttons for 'accept all' and 'reject all'". 2. Every single company that knowingly processed data based on such invalid consent. 3. Every single website and company that processed data for advertising based on "legitimate interest"
- sofixa 5y ago
  > 1. Every single web site that uses dark patterns that make not saying yes impractical. Start with the ones that required more than 3 clicks, then clarify that "the request must be clear, concise and not unnecessarily disruptive" means "equally sized, equally highlighted buttons for 'accept all' and 'reject all'". The French ICO, CNIL, just announced that refusing should be as easy as accepting, so they agree
alkonaut 5y ago
The largest site (by revenue) that currently uses a a two button consent dialog with “accept and continue” vs “manage options”. That’s not making opt-out the default choice. If multimillion fines were given to just a few hundred of these sites things would change pretty quickly.
alephu5 5y ago
Can they fine organisations outside the EU?
- L0stRegulator 5y ago
  Yes, if the organizations are targeting consumers in the EEA (EU + a few extra countries). It's part of the reason why these companies are required to have an Article 27 EU Rep resident in the EU: to interact with regulators.

Well, who do you folks think should be fined next? Also, can't we just agree that "Legitimate interest" is noncompliance and fine BBC too while at it?

by zibzab 5y ago

Well, who do you folks think should be fined next? Also, can't we just agree that "Legitimate interest" is noncompliance and fine BBC too while at it?

t0mas88 5y ago

Facebook, they're refusing the right to access your data: https://ruben.verborgh.org/facebook/ https://ruben.verborgh.org/facebook/ And Google for the whole Doubleclick Ad Exchange, they're sharing lots of user details with hundreds of bidders on every pageview that has ads. As well as storing all of that information in Google Cloud as part of their Ads Data Hub product. All without permission.

tgsovlerkhgsel 5y ago

1. Every single web site that uses dark patterns that make not saying yes impractical. Start with the ones that required more than 3 clicks, then clarify that "the request must be clear, concise and not unnecessarily disruptive" means "equally sized, equally highlighted buttons for 'accept all' and 'reject all'". 2. Every single company that knowingly processed data based on such invalid consent. 3. Every single website and company that processed data for advertising based on "legitimate interest"

sofixa 5y ago
> 1. Every single web site that uses dark patterns that make not saying yes impractical. Start with the ones that required more than 3 clicks, then clarify that "the request must be clear, concise and not unnecessarily disruptive" means "equally sized, equally highlighted buttons for 'accept all' and 'reject all'". The French ICO, CNIL, just announced that refusing should be as easy as accepting, so they agree

alkonaut 5y ago

The largest site (by revenue) that currently uses a a two button consent dialog with “accept and continue” vs “manage options”. That’s not making opt-out the default choice. If multimillion fines were given to just a few hundred of these sites things would change pretty quickly.

alephu5 5y ago

Can they fine organisations outside the EU?

L0stRegulator 5y ago
Yes, if the organizations are targeting consumers in the EEA (EU + a few extra countries). It's part of the reason why these companies are required to have an Article 27 EU Rep resident in the EU: to interact with regulators.