News for hackers. Stuff that matters.
Re:3 years of GDPR: The biggest fines so far by dmayle on Monday May 24, 2021 @05:17PM (#27269829)
In France, we're starting to see sites where they give you two options:

1) accept advertising/tracking cookies

2) pay a monthly subscription

I've seen this on AlloCiné (French IMDB), and "aufeminen" which is a random forum that a Google search led me to.

Re:3 years of GDPR: The biggest fines so far by tomcooks on Tuesday May 25, 2021 @11:50AM (#27278397)
I ban the domains that do these kinds of things, and forget about them forever. It's at the cost of my experience online and convenience, but freedom is never convenient.
Re:3 years of GDPR: The biggest fines so far by kybernetikos on Monday May 24, 2021 @05:28PM (#27269943)
I believe that this is likely not GDPR compliant, although this view doesn't seem to be shared by many. My basis for saying it's not is https://www.privacy-regulation.eu/en/recital-43-GDPR.htm

> Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance.

I take this to mean that you cannot rely on consent that a user has given you to process their personally identifiable information if they did it in order to access a service you wouldn't let them have access to otherwise.

Re:3 years of GDPR: The biggest fines so far by toffi-fee on Monday May 24, 2021 @06:38PM (#27270506)
But the provision of the service is not made dependent on the consent if you can alternatively pay the monthly subscription. So I would assume, “accept all cookies or enter paid subscription” is Gdpr compliant.
Re:3 years of GDPR: The biggest fines so far by kybernetikos on Tuesday May 25, 2021 @03:42AM (#27274015)
> Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.

https://gdpr.eu/Recital-42-Burden-of-proof-and-requirements-...

I think having to pay a monthly subscription, or losing access to a service when you withdraw consent and don't pay a subscription should be regarded as a detriment.