Something that's also illegal. National regulators don't seem to care though, which is a shame as a couple of fines and operators would mysteriously, simultaneously and suddenly realise there _was_ a way to make rejection at least as easy as acceptance all along.
[1] https://noyb.eu/en/226-complaints-lodged-against-deceptive-c...
However, if OneTrust are selling the software under the promise that if the customers configure it that way, then it's compliant, then that's some kind of misrepresentation (which is illegal, software or not). Just as if I sell a USB flash drive as an anti-5G-field dongle, that's illegal, but it'll not illegal to just sell the flash drive.
On the French web you can see the evolution on newspaper websites, which used to have these popups with an easy accept button and difficult, hidden paths for refusal, which eventually moved to a simpler "reject" button with subdued colours or a "reject and read the article" a bit less visible than accept, but still easy enough to spot, and now many have two equal buttons... but "reject" leads to a page that says "you can reject cookies but then you can't read the newspaper, you can pay instead".
You can really see how they try to go as far as they think they can, and adjust their behaviour even without having been targeted themselves. I have good expectations that everything will eventually get better even if it will take time.
The law should outlaw that behavior so that people can continue to conveniently block cookies. Google is an ad network and controls chrome. They could come up with a universal opt out (like X-DO-NOT-TRACK) that works with such a law.
That always seems like such a cop out. Ooohhh, I'm government, I'm so poor I can't enforce the law! Maybe let regular people help. If every time I found a web site that didn't follow cookie rules or GDPR or whatever, I could one-click sue them and get $1,000 or so, I would probably quit my job and just browse the web all day. There are so many naughty sites that count on toothless enforcement, people could make a fortune AND the law would get enforced.
[1] https://www.eff.org/deeplinks/2017/10/do-not-track-implement...
[2] https://help.medium.com/hc/en-us/articles/213690167-Medium-s...
https://soccerwhizz.com/if-i-speak-i-am-in-big-trouble-meani...
Many people would click No when asked "Can we track you?". Yet, fewer people would click No when asked "Can we show you ads that are closely related to your interests"? Likely even more people would agree with "Are you willing to share some data so we can improve our product?". And maybe most people would actually be ok with websites including Google Fonts [1].
Of course, when too many people agree with the proposition, then the question must be legally mandated to be more scary.
The truth is that "people" are fundamentally not on the side of the privacy advocates. This is the whole reason for the GDPR. People are perfectly happy to share their data in exchange for using those services. Fundamentally, GDPR advocates are claiming that people just don't get it, and should not be allowed to make this choice. Which is why websites are not allowed to make their service conditioned on consent to tracking.
> So if I have DNT=1 set in my browser, pop a quick non modal notification saying "we wants to track you but but we won't because you said not to. Click here if you want to change that". Solved.
This is still an annoying banner somewhere. Please no.
[1] https://www.theregister.com/2022/01/31/website_fine_google_f...
"Can we show you ads that are closely related to your interests" and "Are you willing to share some data so we can improve our product?" are not facts, they are excuses like "fight terrorist" and "protect the children". And not as good, because nobody would object protecting children while some people do for the former.
The reality is rather "can we get enough data so we can manipulate you better in order to make more money?", "can we create a knowledge graph powerful enough to kill all our competition and influence democracy in our favor?" and "can we follow you everywhere to prey on you once we know enough to find a way in your life?"
You think those sentences don't reflect reality? I think they are as realistic as yours.
So the law finds a middle ground and use facts: "do you accept tracking?". Simple. Objective.
> This is still an annoying banner somewhere.
A non modal notification, just like stated in the original comment, is not a banner. It can be safely ignored, doesn't prevent you from getting to the content, nor require you to act or take a decision to progress.
I mean, you just stated that tons of people are ready to accept obnoxious interruptions in the form of ads that benefit corporations, and you think a small notification on the bottom right on the screen to benefit the consumer is unacceptable?
I'm answering your comment for the sake of other readers, but given how much bad faith I felt in it, I'm expecting any answer would be of the same caliber and will just ignore them.
Sometimes people just want to know which buttons users click because, yes, (gasp) it helps their business (the one that is employing people).
> I mean, you just stated that tons of people are ready to accept obnoxious interruptions in the form of ads that benefit corporations,
There aren't any fewer ads. We now have the same amount of ads + 3 privacy popups on every page you visit. I don't want any popups. EU regulation / the GDPR is clearly to blame for the popup. Supporters have to take responsibility for the internet experience they have wrought. Complaining about "bad actors" is an excuse. This is our reality today. It's because of these rules. Own it up.
Analytics can be done in a privacy-friendly way, but the vast majority of them aren't, and as a user there's no way to know whether that's the case, so the default "safe" option is to reject.
Also, it's not the GDPR that's to blame for the popups, it's the non-enforcement of it. GDPR explicitly outlaws annoying consent flows - here's the guidelines one of the regulators suggests, which 90% of implementations out there don't comply with: https://ico.org.uk/for-organisations/guide-to-data-protectio....
A distinction without a difference. This is the result of the law. If you think this can be improved by better enforcement, maybe the EU should give this a try. But this comes in a package. You can't pass a law and then say, "sure we ruined the internet, but its just because the law is scary enough that companies add terrible popups, but not scary enough to make them actually compliant.
Also, to be clear, I personally don't care about dark patterns in those consent popups. I click whatever is the biggest button (like lots of people), the one that hopefully gets me the quickest to the content I want to see. The popup itself is the annoying thing. Because it appears on every. single. link you click.
Is that clear yet? Because most bigger newspapers in Germany do exactly that, try Spiegel.de
But yeah, it's debatable whether "my business model depends on showing you ads from services that harvest your data via those ads" is a legitimate interest. If it is, that sets a bad precedent IMO.
That's the same thing as a cookie banner. I don't care what the words say; don't show it to me at all.
- don't require action or decision on you
- can be put at the bottom right on the corner
- don't prevent accessing the main content
It's the same thing as a cookie banner in the way a HN comment and a double blind study are the same thing.
This solves nothing.
Well unless you don't consider free access to video streaming (YouTube) or free access to news a benefit.
My honest opinion on all this has always been that the majority of people, if properly explained to that 'tracking' is never even viewed by a human, and even if it was, your identified as user 563758, would consider this a fair trade.
People largely think you can remove the tracking and access all the same content for free. But when the ads pay 90% less, it becomes much more difficult for the free content to survive.
However, IMHO the answer here is to find a different model for funding online software/services. Letting advertising firms run the internet does not really seem to be taking software in a user/consumer-friendly direction.
To some degree that is how ads worked in print: In a magazine about horseback riding you will find ads about riding equipment, as readers are into that while reading.
And yet whenever I buy anything online I'm inundated with ads for said item. In fact I almost wish there were an officially sanctioned/ standardised way of updating your status as a tracked user on various products you might be interested in or have in fact now purchased with no need to buy another soon. As it is I still see ads for baby formula on YouTube despite having had no need to purchase it for over 16 years (and I honestly would expect Google should know that about me, though when I ask Google Assist how old my children are it refuses to tell me...)
Google don't need to follow local law and regulations.
Google don't need to employ people to verify content or take legal responsibility.
Google can track users and thus categorize users in much more fine details than television and news papers ever could. A magazine about horseback riding might have a vague idea about who their readers are, but google can find out that a pregnant teenage girl has yet to tell her parents.
News was hit or miss. They did a lot of serious investigative reporting, but newspapers where simply a better medium for personalized in depth coverage.
Case in point: Here's Jay Leno interviewing Elon Musk about SpaceX Starship for network television [1] vs YouTuber Tim Dodd [2]. Leno's program is okay for people who don't follow space. For my niche Dodd is vastly better, but he can't draw a wide enough audience to make money on non-targeted ads like Leno can.
And the thing is, everyone has their niches. There is no large population of people out there who are average in every way and need the network television version of everything. The average person doesn't exist.
Now, you can quibble about how much targeting increase revenue but the funny thing about total advertising is it’s fairly consistent through time. Tracking failed to significantly increase worldwide advertising spend, it only redirects it.
Dodd simply couldn't have a network television show with this kind of content. It wouldn't come close to making sense. If he did a network television show it would have to be a lot different, almost certainly in a direction that would make it less interesting for me personally.
My argument has nothing to do with global ad spend, that's a red herring. The key is how those ad dollars get distributed. Targeted advertising makes niche content viable in a way that non-targeted advertising can't match.
The only difference is relative pricing, but again the global population and global advertising spend doesn’t depend on tracking so if it was banned little would actually change.
> The only difference is relative pricing
... the relative pricing difference is the whole difference I'm talking about. Without targeted advertising niche content makes less money, general audience content makes more. So you agree with me that this is true. Then you say that this is a small change. I say it has enormous effects on the content that gets produced. Honestly, this is transparently obvious.
Just look at how much YouTube content is sponsored via an Ad inside the video. That isn’t tied to your personal history.
If I manufacture say jigsaw puzzles and I can’t target individuals then I want to link to show up on a YouTuber with puzzle related content. But with tracking I shouldn’t care about the videos content as much and should be happy to show up on cat videos as long as tracking supports the association. That same logic would seemingly extend to any activity with associated products which is basically everything.
On the other hand soda manufactures are presumably less picky and could advertise on both.
We could continue to make up just-so stories about the effects of targeting on niche content. But I doubt we would convince each other. Is there any research on this topic?
These banners start with "your privacy is important to us", but they omit the next part of the phrase, but we'd like you to allow our partners to invade it.
The banners are there because the process is so abusive they need your consent to make 90% more.
The banners are there because if you take away 90% of their revenue, they cease to exist. Imagine your salary reduced by 90% tomorrow unless you beg your boss daily for your full pay.
>If you think a human never sees your information, you're sadly ill informed
Are you under the impression ads are manually targeted? The only time someone at Google has ever laid eyes on your profile would be if somehow your profile bugged out and caused something to crash. And even if they did look at a single user's data, it would be meaningless without having the name attached. And even if the name was attached, it'd still be meaningless, because there's 300 million people in the US alone.
You have to strawman the absolutely perfect situation for it to even remotely matter.
I accept these conditions
It's just so irresponsible to take extremes like this, ignoring the amount of information and entertainment available on the internet.
Do you know how many people get access to my search data? One. But your news article is worth 100x. How many get access to my streaming preferences? One. But your news article needs to violate my privacy 100x more.
Your arguments are sound in an imaginary world where six seconds of attention is worth being followed around for years. No.
Imagine that I went to a hospital and asked to get a copy of all the patients records. The contract I sign will say that no record should ever be viewed by a human, and if any human did read a record, patients would be identified by patient ID like 563758. In return patients would get services worth ~50 cent.
How many patients would consider this a fair trade?
In addition, drugs would get targeted advertisement, and the funds for advertisements would be raised through the profits of said drugs (ie, patients would be paying for it, by an average of $1 more per patient). Still, patients would get free services that costs the advertisement network ~50 cent per patient.
This is one of the reason I don't use a cookie banner blocker. I would rather close the page upon seeing one, or circumventing it manually using ublock origin's element zapper.
Generally, I think these discussions are poisoned by disingenuous web developers who pretend to be extremely annoyed by the banners as users, but really they're annoyed at the banners as website operators. They are the aforementioned 'bad players' who feel outed and targeted by the EU's regulations. Why are supposed user complaints about cookie banners so prevalent on this site, but virtually unheard of in 'normie' spheres of discussion?
The "informed consent" framing of this issue is quite ridiculous. When someone is asked to pay for an item at the store, we don't say that they should also have the choice to take the item for free, and only pay for it if they want to. We recognize that, individually, most people would rather pay less, but that we collectively benefit when businesses are profitable. The situation with cookies is even worse, because unlike with money, most people have no idea what a website even uses their data for.
Th EU trying to rewrite the issue as concerning "consent" is thus idiotic, and innevitably lead to the cookie banner issue. If you think tracking is bad, then ban it, and let websites figure out how to target ads and improve their product without it. If you recognize tracking as overall beneficial, then permit it, and throw out this charade of informed consent. The EU can't make this decision themselves, so they expect every single individual to make this decision for themselves, every time they visit a website. This despite the average individual having no idea what their data is even being used for.
The issue is existential for websites, since it concerns their ability to remain profitable. As such, the website that stays in business longest is the one that can coax the most people to hand over their data. It is entirely inevitable that websites would go up to and beyond the letter of the law in pursuing this.
Consumers are informed, and they say “no” when given the choice. Respect their “no”.
Tracking builds a massive, exploitative, dangerous information asymmetry. You claim the cost to consumers is small; the aggregate cost is very clearly not small.
This should be an existential issue for websites, and it should force the closure of websites that can only exist through exploitative abuse of consumers.
No, they are not. They have no clue what they are not consenting to.
>the aggregate cost is very clearly not small.
$0 is small.
That's the point. If your position is that consumers don't want tracking and that it's harmful on balance, then just ban it altogether rather than incentivizing sites to use dark patterns to trick users into "agreeing".
But sure. Do tell me how it's the law that is the problem, and not the greedy leeches that present these dark patterns.
Don't worry though. A ban on dark patterns isn't far away. Once it's in effect I guess you'll blame the law for something else.
Exactly right. It reminds me of the Wells Fargo scandal where branch managers were given unattainable quotas and resorted to fraud to meet them. Incentives matter.
Tracking can make sites better because it gives them data to improve the site.
Just FYI, a banner that tries to skew a choice by using pre-ticked checkboxes, making one option more prominent than the other or makes it more difficult to decline than to accept is not "legally allowed". It's merely tolerated because nobody gives a shit about enforcing the GDPR, but it's not actually compliant with the regulation in any way.
Some? I don't think I've seen a single banner where "accept only necessary cookies" was an obvious/upfront choice.
https://termsandconditions.game/
(SSL warning)
These shenanigans are not required, they are very much designed on purpose.
Indeed, corporations can follow the "Do Not Track" header. There is nothing in the EU law that requires a banner, only informed consent.
So if I have DNT=1 set in my browser, pop a quick non modal notification saying "we wants to track you but but we won't because you said not to. Click here if you want to change that". Solved.
I'm informed. I made my choice.
But that's not what it's about.
Because the vast majority of people would not consent. Who are you kidding? This tracking is not benefiting us. It's like when politician says it's "for the children" or "to fight terrorists". Everybody knows there are full of it.
So the banner is just the most annoying way that is legally allowed to try to get people to force-accept tracking. In fact, some banner are crafted to make rejection the hardest path for this very reason.
Those corps chose to make the web terrible a little bit more every day: tracking, auto play, scroll hijacking, dark patters, cookie banners...
We should thank the UE a 1000 times to reveal who are the bad players.