Re:Google Tag Manager, the new anti-adblock weapon (2020)
by shadowgovt on Monday February 21, 2022 @06:15AM
(#30414439)
> which is worded very clearly
Hard disagree. I've been racking my brain as of late trying to decide if default apache access logs violate the GDPR, and stackexchange searches on the topic seem to confirm the confusion.
If the legality of data collection hinges on what is considered necessary for service maintenance in the eye of a judge, the law is not clear.
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by formerly_proven on Monday February 21, 2022 @06:25AM
(#30414514)
You can keep such logs under article 6.1.f if the retention period is 30 days or less (causing self-fulfillment of article 17) or indefinitely if you remove/anonymize PII from them. Of course article 17.3 gives you an exemption for various purposes, e.g. if you had a breach you don't need to delete the logs from that period while investigating it.
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by shadowgovt on Monday February 21, 2022 @06:49AM
(#30414734)
I fail to see how a 30-day or fewer retention policy impinges on article 17 one way or the other, nor do I see how article 6.1 gives any protection on the topic of the default Apache HTTP access logs (which include IP addresses).
Most of these banners violate the GDPR even before they're showing up, because the GDPR actually restricts your ability to embed non-first-party content without consent. That's why Google Fonts violates the GDPR, for example. Arguably every vanilla Wordpress install violates the GDPR because Wordpress embeds something from s.w.org on every page (presumably for install count / analytics reasons).
This kinda sounds like a bad thing but it's not. It's actually a huge boon, because it's an excellent legal excuse to get rid of embedding stuff from 213789 origins and CDNs, which only has negative performance effects since caches have been origin-segregated for years, meaning that even if another page uses the same jQuery version from cdnjs, it will be downloaded again anyway.