Hacker News new | ask | show | jobs
by SkySkimmer 1629 days ago
>Since March 31, 2021, when the deadline set for websites and mobile applications to comply with the new rules on cookies expired, the CNIL has adopted nearly 100 corrective measures (orders and sanctions) related to non-compliance with the legislation on cookies.

I didn't realize there was that delay, I thought the rule was supposed to be enforced years ago.

3 comments

There's multiple delays, arguably for a good reason. First, the law has to be ratified by each member state, which will also mean another delay state-side until legally enforceable. Institutions usually have a warm-up period too until they start enforcing new laws, preferring warnings beforehand.

It might seem inefficient but generally this is the only sane way to roll out changes across a society. Having people coordinate and "change habits" (as deplorable as the present habits may be) is best done gently. Providing ample time and warning for people to find a good course forwards.

One might even argue it's still too fast, given how many cookie walls we see. People are not aware that any site with such a banner is shady and that it's usually not required, and by now everyone has it fixed in their mind that it's the politicians that are stupid and don't understand technology. If we had done a better warmup with better communication, we might have had better-informed people (at least the techies, I understand that not every grandma is going to know the details here).
My understanding is EU member states have some freedom to implement the “cookie law” (ePrivacy Directive) in different ways, and this deadline is linked to some updates to the legislation in France which took effect from Oct 2020.
But this is (also?) in breach of the GDPR which was supposed to go into effect in 2018.
That's the delay set by the French DPO (Cnil). At that date, most French websites finally introduced an option to directly refuse (often a simple link saying "Continue without accepting").