Re:UK to depart from GDPR
by dheera on Friday March 12, 2021 @12:06PM
(#26437978)
Not sure GP's meaning, but just guessing here, maybe it trains people to hit "I agree" to everything without understanding, so when they get an actually security warning they just click right past it.
[ Parent
| on HN ]
Gdpr means you need to have a disagree button. Just click it for everything
Or just avoid the site completely. xkcd doesn't shower me with such popups, neither does hackernews.
(a) not everyone has a disagree button today
(b) many people make the disagree button small, hard to see, or require clicking through multiple screens to get to
GDPR really should have dictated "agree" and "disagree" be of equal visual weight and button styling and dictated disagreeing to be a 1-click action.
GDPR doesn't dictate anything about styling or anything, it just says you have to ask for consent, you're not allowed to bundle consent with anything else (eg you can't say that I have to give consent for me to be able to use the site) and IIRC it does even have a clause about consent having to be asked for in a clear understandable form.
I'm pretty sure that everyone doing our (b) is not compliant at all. The problem is that GDPR isn't being enforced very well.
> GDPR really should have dictated "agree" and "disagree" be of equal visual weight and button styling and dictated disagreeing to be a 1-click action.
It does mandate something to that effect: the user should not have to spend more effort to disagree than to agree.