6 ms·

Once again, shouldn't that be controlled by the browser? The users browser is making the request, not the website.

leobg 5y ago
Of course. Any engineer would solve it that way. And it ran just fine as a browser setting since the 1990s. But the EU isn’t run by engineers. It’s run by bureaucrats who try to save the web without understanding it. They’ve heard nothing of Chesterton’s Fence.
- pojzon 5y ago
  Im pretty sure EU passed GDPR as a response to brexit figgling and facebook/google avoiding paying taxes.” Hurting EU market immensly. Politics dont understand the web but noticed its dengerous if left unregulated.
  - _abox 5y ago
    Not really. GDPR preparations predated the Brexit vote. It was even completed and passed several months before the vote even happened (back when everyone still expected it to fail, even Cameron who initiated it has no expectation it would pass) And EU tax avoidance is mainly done through Ireland and the Netherlands which are still member states.
- zuzun 5y ago
  The GDPR is a sensible legislation and no amount of FUD can change that. If you can't explain what you are doing with personal data, you shouldn't be allowed to handle it. You are also confusing legislation with rulings. GDPR says your business interests cannot outweigh my rights. That's it. Now courts find that leaking my IP address to third countries is something that harms me more than it does your business good. I can live with that.
heavenlyblue 5y ago
How does the web browser know if the website is under EU or US jurisdiction?
- Joeri 5y ago
  GDPR applies to the data subject (the person visiting the site). It doesn’t matter where the website is hosted, it matters who visits it.
sofixa 5y ago
The website is making the browser make that request, and the user has not had the opportunity to accept or deny the data transfer to the destination. That's it.
- VBprogrammer 5y ago
  I don't believe it makes sense to have every website in the world implement this in a half arsed JavaScript implementation when it could be done once per major browser. Same with the cookie nonsense.
  - jakear 5y ago
    The only real explanation is that the cookie laws were explicitly designed to wear users down into blindly accepting whatever prompts get thrown at them on website load. Anyone with half a brain and a real intent to reduce tracking would have mandated websites abide by the existing Do not Track toggle. Unfortunately the law was instead introduced by politicians with strong lobbying from media industry. So no brain, and no intent to reduce tracking.
    - sofixa 5y ago
      The GDPR isn't a "don't track" law, it's a "tell me what data you collect on me, what you're going to do with it, who are you going to share it with, and allow me to refuse that, retroactively if need be" law. Vastly more nuance than an on/off toggle.
      - jakear 5y ago
        On paper, sure. In practice, it’s a quick path to “yeah whatever I accept all your stuff just show me the damn content I came here for”. The web would be much better off if the law was implanted with normal consumers and sane defaults in mind.
        munk-a 5y ago

Of course. Any engineer would solve it that way. And it ran just fine as a browser setting since the 1990s. But the EU isn’t run by engineers. It’s run by bureaucrats who try to save the web without understanding it. They’ve heard nothing of Chesterton’s Fence.

pojzon 5y ago
Im pretty sure EU passed GDPR as a response to brexit figgling and facebook/google avoiding paying taxes.” Hurting EU market immensly. Politics dont understand the web but noticed its dengerous if left unregulated.
- _abox 5y ago
  Not really. GDPR preparations predated the Brexit vote. It was even completed and passed several months before the vote even happened (back when everyone still expected it to fail, even Cameron who initiated it has no expectation it would pass) And EU tax avoidance is mainly done through Ireland and the Netherlands which are still member states.
zuzun 5y ago
The GDPR is a sensible legislation and no amount of FUD can change that. If you can't explain what you are doing with personal data, you shouldn't be allowed to handle it. You are also confusing legislation with rulings. GDPR says your business interests cannot outweigh my rights. That's it. Now courts find that leaking my IP address to third countries is something that harms me more than it does your business good. I can live with that.

heavenlyblue 5y ago

How does the web browser know if the website is under EU or US jurisdiction?

Joeri 5y ago
GDPR applies to the data subject (the person visiting the site). It doesn’t matter where the website is hosted, it matters who visits it.

sofixa 5y ago

The website is making the browser make that request, and the user has not had the opportunity to accept or deny the data transfer to the destination. That's it.

VBprogrammer 5y ago
I don't believe it makes sense to have every website in the world implement this in a half arsed JavaScript implementation when it could be done once per major browser. Same with the cookie nonsense.
- jakear 5y ago
  The only real explanation is that the cookie laws were explicitly designed to wear users down into blindly accepting whatever prompts get thrown at them on website load. Anyone with half a brain and a real intent to reduce tracking would have mandated websites abide by the existing Do not Track toggle. Unfortunately the law was instead introduced by politicians with strong lobbying from media industry. So no brain, and no intent to reduce tracking.
  - sofixa 5y ago
    The GDPR isn't a "don't track" law, it's a "tell me what data you collect on me, what you're going to do with it, who are you going to share it with, and allow me to refuse that, retroactively if need be" law. Vastly more nuance than an on/off toggle.
    - jakear 5y ago
      On paper, sure. In practice, it’s a quick path to “yeah whatever I accept all your stuff just show me the damn content I came here for”. The web would be much better off if the law was implanted with normal consumers and sane defaults in mind.
      - munk-a 5y ago