3 ms·

Even if one wasn't strictly necessary, I know a lot of companies throw one in there regardless. The reasoning being that it's better to have it and cover your b

by worble 5y ago

Even if one wasn't strictly necessary, I know a lot of companies throw one in there regardless. The reasoning being that it's better to have it and cover your bases, then not have it and get hit with GDPR.

mattmanser 5y ago
AFAIK, that's not necessarily GDPR, you still need to have a cookie notice for third-party cookies, even if your third-party cookies don't collect PII. But as others have said, you don't need a cookie notice of all you're using is necessary cookies. Plus in the UK the ICO is underfunded, has a low enforcement record and is now sending menacing, misleading, letters demanding £40 from every UK business even though 90% of them don't actually need to pay the fee.
- mikeodds 5y ago
  I take it you are referring to their data protection fee: https://ico.org.uk/for-organisations/data-protection-fee/ https://ico.org.uk/for-organisations/data-protection-fee/ I agree it’s a complete joke, they demand you pay, then you pay £40 annually to basically click yes on 3 questions saying you are holding consumers personal information correctly with zero verification.
  - denton-scratch 5y ago
    Ghod, I'd never heard of that. "It should take about 15 minutes to complete this form." Really? 15m to make a 40-quid payment? Please fix that (or better, don't charge a fee unless you're providing a service).
noduerme 5y ago
Since all the clients I maintain these days are smaller, American-facing companies, I've never been asked to add this popup and I've never suggested it because none does business in the EU. No third party tracking cookies are involved, but some of my platforms do quite a bit of fingerprinting and store hashes of those fingerprints in cookies or local storage, and try to match those later with fingerprints polled for device authentication. This is perhaps less "obvious" a need for a site's internal purposes. None of it is shared, but I had assumed if I were to build anything like that EU-facing that the notice would be required.

by worble 5y ago

mattmanser 5y ago

AFAIK, that's not necessarily GDPR, you still need to have a cookie notice for third-party cookies, even if your third-party cookies don't collect PII. But as others have said, you don't need a cookie notice of all you're using is necessary cookies. Plus in the UK the ICO is underfunded, has a low enforcement record and is now sending menacing, misleading, letters demanding £40 from every UK business even though 90% of them don't actually need to pay the fee.

mikeodds 5y ago
I take it you are referring to their data protection fee: https://ico.org.uk/for-organisations/data-protection-fee/ https://ico.org.uk/for-organisations/data-protection-fee/ I agree it’s a complete joke, they demand you pay, then you pay £40 annually to basically click yes on 3 questions saying you are holding consumers personal information correctly with zero verification.
- denton-scratch 5y ago
  Ghod, I'd never heard of that. "It should take about 15 minutes to complete this form." Really? 15m to make a 40-quid payment? Please fix that (or better, don't charge a fee unless you're providing a service).

noduerme 5y ago

Since all the clients I maintain these days are smaller, American-facing companies, I've never been asked to add this popup and I've never suggested it because none does business in the EU. No third party tracking cookies are involved, but some of my platforms do quite a bit of fingerprinting and store hashes of those fingerprints in cookies or local storage, and try to match those later with fingerprints polled for device authentication. This is perhaps less "obvious" a need for a site's internal purposes. None of it is shared, but I had assumed if I were to build anything like that EU-facing that the notice would be required.