4 ms·
> Companies can advertise all they want, just not collect personal information without their consent. Honest question, what's an acceptable way to get consent?
by jsvlnlvee 3y ago
> Companies can advertise all they want, just not collect personal information without their consent.
Honest question, what's an acceptable way to get consent?
Companies need the user to accept their terms before using their services but I presume that's not sufficient/acceptable way since its arguably too long/complicated for a user etc. App specific permissions on your phone can be restricted e.g. turn off location data access for an app, but users generally create accounts and provide more detailed information, so that's likely not sufficient? A prompt on every bit of data collected seems like a bad user experience e.g. notifying the user on every http request that the ip is collected/sent to the server which can provide their rough geo location.
What's an acceptable way to do this?
- jampekka 3y agoThe GDPR way (in spirit) is quite good IMHO. The user needs to know at least roughly who, how and why their personal information is used. If it's obviously needed to provide the service the user wants, no explicit consent is usually needed. E.g. asking for an address without explicit consent is fine if you are sending them a package they have ordered. Asking for the address to sell it to someone sending mail ads is not. It's not about the data itself, it's about how it's used. Of course very few actually want their information to be used like e.g. ad companies use it, so the "consent" is tricked with dark patterns. And this trickery (and lack of enforcement) makes the law look bad.
- Yujf 3y agoYou show a small banner on the page, with 3 options: accept, reject optional and configure. Configure explains each thing and lets the user opt in to specific things. It is quite simple really. And if you only track necessary information, you do not need a banner at all