3 ms·

Isn't that a pretty straightforward violation of the GDPR? Consent to track somebody's personal information requires the data subject to be informed as to the

• srcreigh 5y ago
  The consent Google requests could be very broad. I wonder does GDPR specify different categories of consent which must be specifically and separately requested?
  • dessant 5y ago
    They did not ask for consent to set up a payments profile during age verification. Though what you're describing would also be illegal. GDPR does not allow requesting consent for such broad data processing just to fulfill a legal requirement to verify the user's age, and then denying access to the service if the user understandably refuses to give consent.
• justinclift 5y ago
  There's "the law", and there's "what big corporations will attempt to get away with anyway". Because whatever happens in court (if it gets that far), they'll have years of appeals to go, and that'll be some future Google employee's problem not the current people.
  • IMTDb 5y ago
    And there is "the law" and "the other law", often times the two being incompatible, so you're kinda left in the middle trying to kinda please both sides. Like when governments agencies ask to both "disable all tracking of what their employees do on the platform", to ensure private data and GDPR like stuff are ok. They also ask to specifically "enable full logging of all access to their data" for security reasons. So: "sed -i 's/tracker/logger/g' codebase" and everyone is perfectly happy.