3 ms·

Sadly they are not enforcing it for european websites (maybe by design?), a lot of accept cookies or pay nowadays.

• hnbad 3y ago
  I'd say that's a gray area. Several of these schemes have been found in violation (Heise's implementation of it got them sued for example and they had to modify it). The bigger point here is that ONLY European websites have been going that route whereas American websites mostly just try to circumvent the GDPR by being clever (e.g. abusing the legal term "legitimate interest" to add a tedious layer of opt-outs), which hilariously backfires because it demonstrates that the violation is intentional. Note that the point with the compliant "accept or pay" ones is that they still can't coerce you to "accept all" - they still have to only bundle the minimum necessary and justify it, and they then have to opt out paying users from those. Keep in mind that the ePrivacy Directive explicitly requires having an "refuse all" (or in this case "accept minimum necessary") button with equal weight and visibility as an "accept all" if the latter exists. Most consent dialogs are still in violation of this as they didn't update since the GDPR initially came into effect.