Hacker News new | past | comments | ask | show | jobs | submit login

This, again if it is correct, is disgusting and might easily be a huge GDPR issue despite how many cookie warnings anyone adds.

Indeed, remember that warnings here a not enough to comply with the GDPR. IANAL, but GDPR requires opt-in rather than opt out, there should be a clear choice, permission should be asked for specific purposes. Also, it should be possible to withdraw permissions, one should be able to retrieve all the stored data, and the data has to be removed on request.




> but GDPR requires opt-in rather than opt out, there should be a clear choice,

My understanding as well. And the way it has been presented to me is that clear choice means easy to understand (and notice).


No, it has to be more than that. From Recital 43 of the GDPR:

Consent should be given by a clear affirmative act (...) such as by a written statement, including by electronic means, or an oral statement. This could include ticking a box when visiting an internet website, choosing technical settings for information society services or another statement or conduct which clearly indicates in this context the data subject’s acceptance of the proposed processing of his or her personal data. Silence, pre-ticked boxes or inactivity should not therefore constitute consent.


So basically: yes, including but not limited to what I what wrote above?


Maybe, sorry. I understood "clear choice means easy to understand (and notice)" to mean that a simple banner would be enough to count as "choice", even if it didn't have an explicit action.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: