> I wish people would stop confusing cookie-consent laws and GDPR I wish (computer-savvy) people would stop talking about "cookie laws" altogether, since there

> I wish people would stop confusing cookie-consent laws and GDPR I wish (computer-savvy) people would stop talking about "cookie laws" altogether, since there's no such thing. When people say "the cookie law", they're usually referring to two EU regulations: - PECD: https://en.wikipedia.org/wiki/Privacy_and_Electronic_Communications_Directive_2002#Cookies https://en.wikipedia.org/wiki/Privacy_and_Electronic_Communi... - GDPR: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation#Principles https://en.wikipedia.org/wiki/General_Data_Protection_Regula... However, neither of these is a "cookie law". In particular: - The laws cover much more than "cookies"; e.g. they're just as applicable to browser fingerprinting, Flash "supercookies", etc. - Cookies which perform a requested job have implied consent: users visit an online store because they want to use the shopping cart functionality; if they don't agree to having a shopping cart cookie, they can leave the online store. (In contrast, users don't visit online stores in order to be tracked by advertisers; so separate, explicit consent is required)