3 ms·

I keep seeing this misinformation going around, and it has been going around since almost day 1 of when the directive became known. I'm not sure where it's comi

by diggan 2y ago

I keep seeing this misinformation going around, and it has been going around since almost day 1 of when the directive became known. I'm not sure where it's coming from, or who initially thought it worked like that, but judging by the comments in this submission it seems like a ton of people are very misinformed about how these things actually work.

azinman2 2y ago
So how to these things actually work?
- 6510 2y ago
  Anything goes as long as it is useful for the user. Funny example: If they chose not to accept your spying cookies you get to set a cookie to store that choice.
  - dkarras 2y ago
    Someone might think: surely seeing ads targeted for them instead of random ads must be useful / beneficial for the user!
    - hnbad 2y ago
      The first step is data minimization. The second step is informed and revokable consent. Everything else follows from there. Do targeted ads increase the amount of personal data that needs to be stored and processed and the number of entities that will access it? Yes they do. Are they required for the site to serve its stated purpose? No, unless the site is marketing itself as literally a curated stream of targeted ads. So they require informed and revokable consent (i.e. opt-in). Even if you think they're beneficial to the user. It's not about what's beneficial. It's about what's required. That's why most sites try to group services by categories like "functional", "analytics", etc. If you want to embed a Google Maps view to help people find your physical store, that's beneficial but still requires consent because it shares their data with a third party (i.e. Google) when the browser loads that map. Of course in this case you don't even need a banner, you could just have a placeholder (often called "content blocker") instead of the map with the option to consent to loading the map and storing that decision so the user doesn't have to see the placeholder again.
      - 6510 2y ago
        I think you could also link to google maps.
pessimizer 2y ago
If this is true, you have not helped them to understand in any way.

by diggan 2y ago

azinman2 2y ago

So how to these things actually work?

6510 2y ago
Anything goes as long as it is useful for the user. Funny example: If they chose not to accept your spying cookies you get to set a cookie to store that choice.
- dkarras 2y ago
  Someone might think: surely seeing ads targeted for them instead of random ads must be useful / beneficial for the user!
  - hnbad 2y ago
    The first step is data minimization. The second step is informed and revokable consent. Everything else follows from there. Do targeted ads increase the amount of personal data that needs to be stored and processed and the number of entities that will access it? Yes they do. Are they required for the site to serve its stated purpose? No, unless the site is marketing itself as literally a curated stream of targeted ads. So they require informed and revokable consent (i.e. opt-in). Even if you think they're beneficial to the user. It's not about what's beneficial. It's about what's required. That's why most sites try to group services by categories like "functional", "analytics", etc. If you want to embed a Google Maps view to help people find your physical store, that's beneficial but still requires consent because it shares their data with a third party (i.e. Google) when the browser loads that map. Of course in this case you don't even need a banner, you could just have a placeholder (often called "content blocker") instead of the map with the option to consent to loading the map and storing that decision so the user doesn't have to see the placeholder again.
    - 6510 2y ago
      I think you could also link to google maps.

pessimizer 2y ago

If this is true, you have not helped them to understand in any way.