4 ms·

Indeed, hence "on compliant websites". I wish the EU's enforcement wasn't so lacklustre. Would be interesting if they hired 2-3 reverse engineers and had them g

Indeed, hence "on compliant websites". I wish the EU's enforcement wasn't so lacklustre. Would be interesting if they hired 2-3 reverse engineers and had them go down Alexa top 10k and verify that consent banners are implemented correctly, handing out fines if not. One can dream I guess. Fundamentally, the problem with the GDPR isn't that the law is problematic, it's the lack of enforcement, this is the true cause of the consent banner proliferation.

Macha 4y ago
Side note: The alexa top sites list is defunct since May: https://www.alexa.com/topsites/ https://www.alexa.com/topsites/
philipwhiuk 4y ago
EU's enforcement is based on the country the site is hosted in's regulator. Which is a faff because it means the Irish regulator actively looking at what sites are hosted in the Ireland, rather than an EU regulator looking at all EU accessible sites. Which is non trivial to search for. (Also the Irish regulator struggles with regulatory capture).
junofan 4y ago
A sweeping, sector-wide law with extraterritoriality is fundamentally problematic. 2 or 3 people “handing out fines” to top-10k sites is extremely unlikely to deliver positive results. EU agenda would be better served I think by going for wins, not ambitions.
digitalengineer 4y ago
it is enforced, see https://www.enforcementtracker.com https://www.enforcementtracker.com And yes, there's talk amongst some of my GDPR friends about creating a bot. If they did, it would basically a money printing machine. (At least in the first month or so until companies catch up). This site can help you get it right: https://webbkoll.dataskydd.net https://webbkoll.dataskydd.net
- Nextgrid 4y ago
  > it is enforced, see https://www.enforcementtracker.com https://www.enforcementtracker.com Your link basically disproves your assertion. The total amount fined across all countries and companies is still less than what the biggest offender (Google or Facebook) make in a single year. Regarding scraping bots, Noyb (a pro-privacy non-profit) has done so and sent out automated notices to the offenders. The problem as far as I understand is that the best you can do is complain to your local DPA (which is useless), it doesn't give you the right to sue directly (nor provides a way to estimate monetary damages), so suing directly is not an option.
- elwebmaster 4y ago
  All the examples I looked at were about installing cameras or video surveillance. I have not looked through the full list but it certainly is not what it’s being presented to be, i.e. GDPR tracking enforcement.

Macha 4y ago

Side note: The alexa top sites list is defunct since May: https://www.alexa.com/topsites/ https://www.alexa.com/topsites/

philipwhiuk 4y ago

EU's enforcement is based on the country the site is hosted in's regulator. Which is a faff because it means the Irish regulator actively looking at what sites are hosted in the Ireland, rather than an EU regulator looking at all EU accessible sites. Which is non trivial to search for. (Also the Irish regulator struggles with regulatory capture).

junofan 4y ago

A sweeping, sector-wide law with extraterritoriality is fundamentally problematic. 2 or 3 people “handing out fines” to top-10k sites is extremely unlikely to deliver positive results. EU agenda would be better served I think by going for wins, not ambitions.

digitalengineer 4y ago

it is enforced, see https://www.enforcementtracker.com https://www.enforcementtracker.com And yes, there's talk amongst some of my GDPR friends about creating a bot. If they did, it would basically a money printing machine. (At least in the first month or so until companies catch up). This site can help you get it right: https://webbkoll.dataskydd.net https://webbkoll.dataskydd.net

Nextgrid 4y ago
> it is enforced, see https://www.enforcementtracker.com https://www.enforcementtracker.com Your link basically disproves your assertion. The total amount fined across all countries and companies is still less than what the biggest offender (Google or Facebook) make in a single year. Regarding scraping bots, Noyb (a pro-privacy non-profit) has done so and sent out automated notices to the offenders. The problem as far as I understand is that the best you can do is complain to your local DPA (which is useless), it doesn't give you the right to sue directly (nor provides a way to estimate monetary damages), so suing directly is not an option.
elwebmaster 4y ago
All the examples I looked at were about installing cameras or video surveillance. I have not looked through the full list but it certainly is not what it’s being presented to be, i.e. GDPR tracking enforcement.