Hacker News new | ask | show | jobs
by Nurw 2855 days ago
If the popups were actually following GDPR then people wouldn't accept. But 90% of these popups are not. It is clearly stated in GDPR that it should be as easy to opt-out as opt-in, and it is my firm belief that if this was implemented a lot more people would probably opt out. Oh well, the fines will hopefully start rolling out and maybe we get less asshole design.
3 comments
mrep 2854 days ago
> It is clearly stated in GDPR that it should be as easy to opt-out as opt-in

Can you point to which article of the 99 [0] that you are referring to because I have heard this claim multiple times and yet I cannot seem to find it on my own.

[0]: https://gdpr-info.eu/

link
kruczek 2854 days ago
The most "clearly stated" is I think the following:

> Art. 7, paragraph 3: "It shall be as easy to withdraw as to give consent."

Although it sounds like this is about withdrawing previously given consent, not rejecting the request for consent at all.

> Recital 32: "If the data subject’s consent is to be given following a request by electronic means, the request must be clear, concise and not unnecessarily disruptive to the use of the service for which it is provided."

Perhaps it could be argued that having to click through multiple menus to reject the request is not concise and is disruptive to the use of the service?

> Recital 42: "In accordance with Council Directive 93/13/EEC a declaration of consent pre-formulated by the controller should be provided in an intelligible and easily accessible form, using clear and plain language and it should not contain unfair terms."

Again, I'd argue that having to click through multiple menus isn't exactly "easily accessible form".

link
privateSFacct 2853 days ago
You can opt out usually, but then you can't access the website. I'm not sure GDPR says that you must be allowed to access site if you reject terms?

Could you cite that - this seems to be a false claim that comes up a lot.

link
helthanatos 2855 days ago
>It is clearly stated in GDPR that it should be as easy to opt-out as opt-in The opt-out being leaving the site. Fines to companies outside the EU are probably going to be fruitless.
link