3 ms·

> So far they seem to be correct. Not really. Just recently: GDPR enforcer rules that IAB Europe’s consent popups are unlawful https://news.ycombinator.com

> So far they seem to be correct. Not really. Just recently: GDPR enforcer rules that IAB Europe’s consent popups are unlawful https://news.ycombinator.com/item?id=30176712 https://news.ycombinator.com/item?id=30176712 This is going to require some time, and thus some patience.

jjoonathan 5y ago
Nice! Hopefully they keep up the pressure.
Nextgrid 5y ago
I don't agree with the approach for obvious reasons, but he's not entirely wrong either. Even that ruling doesn't change anything - the IAB was fined a token amount, the others get off scot-free and can keep the profits earned over 4 years of illicit data processing.
- mpweiher 5y ago
  Quite the opposite, the ruling made clear that trying to outsource the risk to a third party doesn't work. "All data collected through the TCF must now be deleted by the more than 1,000 companies that pay IAB Europe to use the TCF. This includes Google’s, Amazon’s and Microsoft’s online advertising businesses." And if they don't comply with that...
  - Nextgrid 5y ago
    > And if they don't comply with that... How are they going to find out? Are they mandating source code & database audits? If it took them 4 years to take action on something that was pushed in every web user's face several times per day, you're probably looking for a few millennia for them to take action on something only a few hundred company insiders are aware of.
tick_tock_tick 5y ago
I mean this clearly is still being worked out as consent popups are a requirement of the law but the enforcers and courts don't seem to like that fact and are getting very creative in there interpretations to avoid the explicit requirements of the law.
- MauranKilom 5y ago
  > consent popups are a requirement of the law but the enforcers and courts don't seem to like that fact I don't think you could misrepresent the situation any more if you tried. IAB did not even have a data protection officer. As a massive advertising body. How you go from the very specific and clear list of violations [1] to "the courts don't like consent popups" is entirely beyond me. That's like a car manufacturer stating the authorities don't like cars after failing a crash test for not having airbags. [1]: https://www.iccl.ie/news/gdpr-enforcer-rules-that-iab-europes-consent-popups-are-unlawful/ https://www.iccl.ie/news/gdpr-enforcer-rules-that-iab-europe...
- mpweiher 5y ago
  Consent popups are not a requirement. Not needlessly processing personal data is a requirement.

jjoonathan 5y ago

Nice! Hopefully they keep up the pressure.

Nextgrid 5y ago

I don't agree with the approach for obvious reasons, but he's not entirely wrong either. Even that ruling doesn't change anything - the IAB was fined a token amount, the others get off scot-free and can keep the profits earned over 4 years of illicit data processing.

mpweiher 5y ago
Quite the opposite, the ruling made clear that trying to outsource the risk to a third party doesn't work. "All data collected through the TCF must now be deleted by the more than 1,000 companies that pay IAB Europe to use the TCF. This includes Google’s, Amazon’s and Microsoft’s online advertising businesses." And if they don't comply with that...
- Nextgrid 5y ago
  > And if they don't comply with that... How are they going to find out? Are they mandating source code & database audits? If it took them 4 years to take action on something that was pushed in every web user's face several times per day, you're probably looking for a few millennia for them to take action on something only a few hundred company insiders are aware of.

tick_tock_tick 5y ago

I mean this clearly is still being worked out as consent popups are a requirement of the law but the enforcers and courts don't seem to like that fact and are getting very creative in there interpretations to avoid the explicit requirements of the law.

MauranKilom 5y ago
> consent popups are a requirement of the law but the enforcers and courts don't seem to like that fact I don't think you could misrepresent the situation any more if you tried. IAB did not even have a data protection officer. As a massive advertising body. How you go from the very specific and clear list of violations [1] to "the courts don't like consent popups" is entirely beyond me. That's like a car manufacturer stating the authorities don't like cars after failing a crash test for not having airbags. [1]: https://www.iccl.ie/news/gdpr-enforcer-rules-that-iab-europes-consent-popups-are-unlawful/ https://www.iccl.ie/news/gdpr-enforcer-rules-that-iab-europe...
mpweiher 5y ago
Consent popups are not a requirement. Not needlessly processing personal data is a requirement.