3 ms·
That cost should be paid by the companies forcing pop-ups onto users. Popups in no way GDPR's fault. The law does not mandates them. Instead, it's a form of m
by goodpoint 5y ago
That cost should be paid by the companies forcing pop-ups onto users.
Popups in no way GDPR's fault. The law does not mandates them.
Instead, it's a form of malicious compliance. Companies pester visitors with popup banners that are almost always unnecessary.
E.g. GDPR allows essential cookies e.g. a login cookie containing an encrypted token without any popup. If you want to notify users about it for extra safety you can show a little privacy notice on the login form. No need for popups.
- lbriner 5y agoI'm not sure it's malicious compliance. When you are threatened with massive fines for non-compliance but you aren't told explicitly about how to solve it other than, "A cookie notice would be a way of complying", everyone will use a cookie notice.
- Nextgrid 5y agoBad news: those notices will do nothing to mitigate the fines, and might in fact even increase them if those notices pressure or trick users. Good news (for the companies): GDPR enforcement has and continues being laughable, so you don't have to worry either way.
- ratww 5y agoModern cookie banners definitely are malicious compliance and most certainly are also violations of the GDPR. All those companies could use less invasive methods of asking for consent, such as optional checkboxes in signup forms. Or a non-intrusive "click here to opt-in to tracking". The reason they don't do it like this is because they prefer forcing users to click "Accept All" using dark patterns. Anyone complaining about shitty cookie banners is actually complaining about companies breaking GDPR.