5 ms·

Cookie pop-ups are incredibly annoying and greatly harm the usability of the web. Either GDPR should be updated to ban consent pop-ups and simply make “REJECT”

Cookie pop-ups are incredibly annoying and greatly harm the usability of the web. Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere, or the consent UI should be moved to the browser where defaults (accept/reject/ask) can be set for all websites.

Eisenstein 4y ago
The nightly build of Brave will automatically manage the banners for you.
- Reason077 4y ago
  Great! I hope all browsers get this feature.
dmitriid 4y ago
> Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere That is literally in the law. Article 7.3 https://gdpr.eu/article-7-how-to-get-consent-to-collect-personal-data/ https://gdpr.eu/article-7-how-to-get-consent-to-collect-pers... --- start quote, emphasis mine --- The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent. --- end quote --- Also, Recital 32: https://gdpr.eu/Recital-32-Conditions-for-consent https://gdpr.eu/Recital-32-Conditions-for-consent And also. GDPR isn't just about browsers or cookies. It's about data in general. Which includes all other situations, including offline interactions, gaming, and communication with governments.
- Reason077 4y ago
  > "That is literally in the law." No, the law does the opposite. It effectively requires the use of pop-ups to "gain consent", it doesn't ban them. At least, that's how it's been interpreted in practice. > "And also. GDPR isn't just about browsers or cookies. It's about data in general. Which includes all other situations, including offline interactions, gaming, and communication with governments." Absolutely. In general the GDPR is a good thing. But it needs a rework to fix the cookie consent situation.
  - dmitriid 4y ago
    > It effectively requires the use of pop-ups to "gain consent", it doesn't ban them. Once again: the law isn't about cookie banners. The law is about user data. That is: if you want to collect more data that is strictly required for the functioning of your business, then you must ask user for consent. Note: the law doesn't care if your business is online, or offline, or a combination thereof. If you set up a corner shop selling bread, and start asking customers for their name and address, you will be subject to the same GDPR provisions as a website. How difficult is that? Literally nothing in the law requires cookie banners. The only reason these obnoxious cookie banners exist is because the greedy leeches in our industry cannot live without siphoning your data en masse and selling it to the highest bidder, consequences be damned. Now. Here's what you said: "Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere" The law already clearly states: REJECT has to be as simple as giving consent. And the entire industry said: yes, of course, here's a default "accept" with hundreds of pre-checked boxes, and you have to go through every single one of them one by one to reject. How is that the law's fault? They cannot ban people from asking users for consent to collect data. However, the law is rather explicit: any person has the right to reject this, the rejecton has to be as easy and clear as accepting, and people cannot be denied service just because they rejected collection of non-necessary data. As the article above states: once the law started to be enforced, sites started obeying the law, and not flaunting it. Well, they still flaunt it with their "legitimate uses" bullshit, but the tide is ever so slowly turning. Too bad, even developers are so gullible as to have been tricked into parroting the "law is bad" and "law requires obnoxious cookie banners" nonsense. No, it isn't. No, it doesn't.
    - Reason077 4y ago
      > ”They cannot ban people from asking users for consent to collect data.” Why not? This is exactly what needs to happen. Either that, or allow cookie consent to be granted/declined globally in the browser settings, not with a bespoke, intrusive UI on every. single. damn. website. Let’s ban cookie pop ups!
      - dmitriid 4y ago
tpush 4y ago
Reject is the default! That's the point of the law in the first place. If you, for example, blocked every consent dialog from appearing, no website would have legal grounds to track you (except for legitime purposes yada-yada).
- Reason077 4y ago
  > "Reject is the default!" I wish that was true. > "If you, for example, blocked every consent dialog from appearing, no website would have legal grounds to track you (except for legitime purposes yada-yada)." Sounds good to me!
  - 93po 4y ago
    > I wish that was true. Is it? He just said it was and he's right.
    - Reason077 4y ago
      If reject was the default (or it could be set globally, in the browser) then we wouldn't need pop-ups.
      - ketzu 4y ago
        > Either GDPR should be updated [...] simply make “REJECT” the default The point people are making in response to your post is that GDPRs default is reject. Not necessarily the implementations used on a website default.
ketzu 4y ago
> Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere If you ban asking for consent, "reject" is not the default, it is the only option left. If you specifically ban "pop-ups" (or modals), I believe websites will use a standalone page instead of a modal to ask for consent. Same but different.

Eisenstein 4y ago

The nightly build of Brave will automatically manage the banners for you.

Reason077 4y ago
Great! I hope all browsers get this feature.

dmitriid 4y ago

> Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere That is literally in the law. Article 7.3 https://gdpr.eu/article-7-how-to-get-consent-to-collect-personal-data/ https://gdpr.eu/article-7-how-to-get-consent-to-collect-pers... --- start quote, emphasis mine --- The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent. --- end quote --- Also, Recital 32: https://gdpr.eu/Recital-32-Conditions-for-consent https://gdpr.eu/Recital-32-Conditions-for-consent And also. GDPR isn't just about browsers or cookies. It's about data in general. Which includes all other situations, including offline interactions, gaming, and communication with governments.

Reason077 4y ago
> "That is literally in the law." No, the law does the opposite. It effectively requires the use of pop-ups to "gain consent", it doesn't ban them. At least, that's how it's been interpreted in practice. > "And also. GDPR isn't just about browsers or cookies. It's about data in general. Which includes all other situations, including offline interactions, gaming, and communication with governments." Absolutely. In general the GDPR is a good thing. But it needs a rework to fix the cookie consent situation.
- dmitriid 4y ago
  > It effectively requires the use of pop-ups to "gain consent", it doesn't ban them. Once again: the law isn't about cookie banners. The law is about user data. That is: if you want to collect more data that is strictly required for the functioning of your business, then you must ask user for consent. Note: the law doesn't care if your business is online, or offline, or a combination thereof. If you set up a corner shop selling bread, and start asking customers for their name and address, you will be subject to the same GDPR provisions as a website. How difficult is that? Literally nothing in the law requires cookie banners. The only reason these obnoxious cookie banners exist is because the greedy leeches in our industry cannot live without siphoning your data en masse and selling it to the highest bidder, consequences be damned. Now. Here's what you said: "Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere" The law already clearly states: REJECT has to be as simple as giving consent. And the entire industry said: yes, of course, here's a default "accept" with hundreds of pre-checked boxes, and you have to go through every single one of them one by one to reject. How is that the law's fault? They cannot ban people from asking users for consent to collect data. However, the law is rather explicit: any person has the right to reject this, the rejecton has to be as easy and clear as accepting, and people cannot be denied service just because they rejected collection of non-necessary data. As the article above states: once the law started to be enforced, sites started obeying the law, and not flaunting it. Well, they still flaunt it with their "legitimate uses" bullshit, but the tide is ever so slowly turning. Too bad, even developers are so gullible as to have been tricked into parroting the "law is bad" and "law requires obnoxious cookie banners" nonsense. No, it isn't. No, it doesn't.
  - Reason077 4y ago
    > ”They cannot ban people from asking users for consent to collect data.” Why not? This is exactly what needs to happen. Either that, or allow cookie consent to be granted/declined globally in the browser settings, not with a bespoke, intrusive UI on every. single. damn. website. Let’s ban cookie pop ups!
    - dmitriid 4y ago

tpush 4y ago

Reject is the default! That's the point of the law in the first place. If you, for example, blocked every consent dialog from appearing, no website would have legal grounds to track you (except for legitime purposes yada-yada).

Reason077 4y ago
> "Reject is the default!" I wish that was true. > "If you, for example, blocked every consent dialog from appearing, no website would have legal grounds to track you (except for legitime purposes yada-yada)." Sounds good to me!
- 93po 4y ago
  > I wish that was true. Is it? He just said it was and he's right.
  - Reason077 4y ago
    If reject was the default (or it could be set globally, in the browser) then we wouldn't need pop-ups.
    - ketzu 4y ago
      > Either GDPR should be updated [...] simply make “REJECT” the default The point people are making in response to your post is that GDPRs default is reject. Not necessarily the implementations used on a website default.

ketzu 4y ago

> Either GDPR should be updated to ban consent pop-ups and simply make “REJECT” the default everywhere If you ban asking for consent, "reject" is not the default, it is the only option left. If you specifically ban "pop-ups" (or modals), I believe websites will use a standalone page instead of a modal to ask for consent. Same but different.