Of course, still a good strategy to name/shame a well known party that may care more about their public image than "TrustArc" does.
Blocking the notice (or ignoring it) is technically equivalent to opting in. Of course, if you're using a competent ad blocker it's likely that the trackers themselves were also blocked, making this a non-issue.
* it's hard/impossible to prove - given how many factors go into ad targeting there isn't a conclusive way to prove whether an ad was targeted because of illicitly-collected data.
* as you see here even blatant GDPR breaches and acting in bad faith doesn't actually land you in trouble, so although it's "illegal", the law isn't enforced. Experian (or Equifax) got caught by the ICO knowingly misusing people's credit data for marketing purposes and all they got was a warning, so clearly the message is that "breaching the GDPR does pay".
Then, also enable uBlock origin's "annoyances" filter.
It does appear (from their website) like the aforementioned Stardust can auto-decline everything, but I haven't tried it myself.
One problem you run into when declining cookies is that on many sites you won't be able to view embedded YouTube videos, tweets, etc. unless you go back in and allow social media cookies.
You could argue that the artificial delay is implemented as a way to dissuade people from declining which would fail the idea that data processing consent should be freely given (you can’t force people to opt-in).
You could also argue that even if there was a legitimate technical reason for the delay then it wouldn't be compliant because it would prove that data processing is enabled by default before the user opts-in (otherwise the delay should be on opt-in and opt-out should be instant as it's essentially a no-op).
Here are the ICO’s guidelines on the subject - you’ll see that this TrustArc trash fails on multiple points: https://ico.org.uk/for-organisations/guide-to-data-protectio...
TrustArc essentially provides "breaching the GDPR as a service" and their continued existence proves the incompetence of the data/privacy regulators in all EU countries.
Or maybe it shows that they are underfunded relative to the task set them. Which is actually true of many government departments.
Surely there is a way to get this "machine" started and use the money from previous fines to fund future enforcement?
I suppose the counter-argument would be that passing legislation is cheap, but enforcing it costs money, and governments have other priorities, but, for example, in the UK there can be fines of up to £500,000 for breaches of the e-Privacy Directive[0], which should be more than enough to cover the cost of the investigation.
[0] https://www.pinsentmasons.com/out-law/news/gdpr-e-privacy-br...
I don't want to live in a world where the criminalization of everything that ever happened that you didn't like means that I'm always breaking the law.
On the flip side, this particular dark pattern was caused by regulation. As usual, shades of gray
Regulation is a possible cure.
Call me crazy, but if some place would be weary of going straight up for the “let’s ban things with lawyers ” approach, I would think is HN.
You'll be fine as long as you're not in the habit of doing things like this that are clearly outwardly hostile to everyone you come into contact with.
How many people not liking gaslighting personal-data-theft dark patterns will it take to make it into a law?
We're transitioning from purely physical beings to having a more virtual presence. Virtual crimes are much less visible and have much greater impact at scale than their physical counterparts, identity theft by Equifax breach or a hack, VS physical force or pickpocketing, for example.
The impact of violating privacy is neither increased nor decreased by the impact of theft and/or murder. If we compare theft and murder, theft «in general» is less impactful than murder, as I'm deprived of property and potentially physically injured with theft, with murder I am deprived of life itself.
That murder is generally more impactful doesn't make theft more acceptable/less bad; we should have laws for both.
Thankfully, I haven't had to deal with any of these stupid pop-ups since installing the 'I don't care about cookies' add-on. [1]
Related question: Does anyone have experience using 'Stardust Cookie Cutter'? [2] Is it better than 'I don't care about cookies' or does it do the same thing?
[1] https://www.i-dont-care-about-cookies.eu/
[2] https://get.stardust.today/