> If the legislation had been written correctly then the current nightmare wouldn’t exist. It was written correctly. Because it's a General Data Protection Reg

> If the legislation had been written correctly then the current nightmare wouldn’t exist. It was written correctly. Because it's a General Data Protection Regulation. It applies in equal measure to websites, apps, paper records, SaaS, shops, government entities etc. And it says: "do not get more data than is required for your business. If you want more data, the user must give consent, where opting out is the default, and must be as easy as opting in". Now, what exactly is badly written in the law? You can start with quoting exactly where it requires existing cookie popups. For example, GitHub found out they need exactly none: https://github.blog/2020-12-17-no-cookie-for-you/ https://github.blog/2020-12-17-no-cookie-for-you/ > Should have been a browser level setting the sites are forced to comply with. It's called the Do Not Track header, and at one point Safari removed it because the companies you think are blameless used it to track users