4 ms·

Ironic that scmagazine.com has the exact same issue with their cookie banner as what Microsoft is now being fined for.

wongarsu 4y ago
GDPR enforcement so far is one of these rare examples where the bigger fish are fined and prosecuted first. (Yes, fines against smaller players happen, but are less likely on a per-company basis).
- wmeredith 4y ago
  It would be nice if everything worked that way. When it works the opposite way, it's a vicious cycle of letting the biggest fish grow and making them even harder to go after.
  - r00fus 4y ago
    That’s the expected outcome if you let the big players capture [1] the regulatory regime. [1] https://en.wikipedia.org/wiki/Regulatory_capture https://en.wikipedia.org/wiki/Regulatory_capture
- johndhi 4y ago
  Agreed. Jfyi if curious, cookie law technically isn't part of GDPR. It's from an older law that was ignored for many years called the e-privacy directive.
- Semaphor 4y ago
  The (very small) company I work at got a warning from our DPA (Germany, SH, so the relevant one is the ULD). I had a nice discussion with our caseworker there, where he also said that for small companies, they are extremely lenient and very happy to work with them to improve things.
  - _0w8t 4y ago
    I was at presentation about GDPR in Norway and the implied message was similar. It can be tricky to implement GDPR correctly, but if a small company will mistake on that, authorities will simply point to it with a reasonable timeline to fix it before any talk about fines. Bigger companies is supposed to have resources to implement GDPR properly the first time.
- slowwriter 4y ago
  GDPR is not the EU regulation on cookies. GDPR only has a single direct mention of cookies. The ePrivacy Directive is what's known as the "cookie law" (https://gdpr.eu/cookies/ https://gdpr.eu/cookies/)
  - loeg 4y ago
    The ePD dates to 2002 but stupid cookie banners only came into being around the same time as the GDPR in 2018. I think you can say the cookie banners are in some technical legal sense ePD's fault, but to laypeople it certainly seems that the GDPR is why every website is less usable and more annoying than it was just a few years ago.
    - meowface 4y ago
      Haven't those annoying banners been prevalent long before 2018? Maybe GPDR made them more popular, but I'm not sure.
      - loeg 4y ago
        The short answer is no. They are a very recent phenomenon.
        corney91 4y ago
        I don't think that's right, I remember joking about cookie banners in the late 00s. Since GDPR they now have buttons and categories though, whereas previously we never had a choice, just a notice that cookies were in use.
        loeg 4y ago
        There were banner shaped popovers in the 00s, but to my memory they weren't for cookies. Any chance you're a European? We may have been visiting different slices of the internet in that period.

GDPR enforcement so far is one of these rare examples where the bigger fish are fined and prosecuted first. (Yes, fines against smaller players happen, but are less likely on a per-company basis).

wmeredith 4y ago
It would be nice if everything worked that way. When it works the opposite way, it's a vicious cycle of letting the biggest fish grow and making them even harder to go after.
- r00fus 4y ago
  That’s the expected outcome if you let the big players capture [1] the regulatory regime. [1] https://en.wikipedia.org/wiki/Regulatory_capture https://en.wikipedia.org/wiki/Regulatory_capture
johndhi 4y ago
Agreed. Jfyi if curious, cookie law technically isn't part of GDPR. It's from an older law that was ignored for many years called the e-privacy directive.
Semaphor 4y ago
The (very small) company I work at got a warning from our DPA (Germany, SH, so the relevant one is the ULD). I had a nice discussion with our caseworker there, where he also said that for small companies, they are extremely lenient and very happy to work with them to improve things.
- _0w8t 4y ago
  I was at presentation about GDPR in Norway and the implied message was similar. It can be tricky to implement GDPR correctly, but if a small company will mistake on that, authorities will simply point to it with a reasonable timeline to fix it before any talk about fines. Bigger companies is supposed to have resources to implement GDPR properly the first time.
slowwriter 4y ago
GDPR is not the EU regulation on cookies. GDPR only has a single direct mention of cookies. The ePrivacy Directive is what's known as the "cookie law" (https://gdpr.eu/cookies/ https://gdpr.eu/cookies/)
- loeg 4y ago
  The ePD dates to 2002 but stupid cookie banners only came into being around the same time as the GDPR in 2018. I think you can say the cookie banners are in some technical legal sense ePD's fault, but to laypeople it certainly seems that the GDPR is why every website is less usable and more annoying than it was just a few years ago.
  - meowface 4y ago
    Haven't those annoying banners been prevalent long before 2018? Maybe GPDR made them more popular, but I'm not sure.
    - loeg 4y ago
      The short answer is no. They are a very recent phenomenon.
      - corney91 4y ago
        I don't think that's right, I remember joking about cookie banners in the late 00s. Since GDPR they now have buttons and categories though, whereas previously we never had a choice, just a notice that cookies were in use.
        loeg 4y ago
        There were banner shaped popovers in the 00s, but to my memory they weren't for cookies. Any chance you're a European? We may have been visiting different slices of the internet in that period.