Hacker News new | ask | show | jobs
by bettercallsalad 1050 days ago
I have doubts on how effective these type of consent based system are. I for one always click “accept all” and move on for most websites I am on. Average layman has very little time the effort needed to understand and customize the consents are quite high. Not to say they purposely make the UI hostile in those consent popups. For me anyway GDPR has been largely a waste of bureaucracy, a better effort would be to educate populous about what cookies are and how tracking works and the extent of the trackings etc - these stuff should be in High School curriculum already by now.
1 comments

Any site that uses a dark pattern like only having "Allow all" and "Show purposes" is in clear violation of the GDPR, and they could just as well have just ignored showing anything! The regulation is clear that opting out should be as easy as opting in. A conforming consient dialog has a "reject all" as well as an "allow" button.

And when they do, I always click "reject all". I think most people would - which is why I guess some sites still try to use those dark patterns. I'm still waiting for a big regulatory fine to make an example. If a known company is fined almost out of existence due to lack of a reject button, I think there would be instant self-regulation here.

> For me anyway GDPR has been largely a waste of bureaucracy, a better effort would be to educate populous about what cookies are and how tracking works and the extent of the trackings etc - these stuff should be in High School curriculum already by now.

Don't confuse the GDPR with "cookie banners" though. That's the end user visible tip of the iceberg. The biggest premise (and in my opinion the genius of the regulation) is that the end user is not required to know or understand anything. Instead, the people handling their data should. And if nothing else, it really has forced everyone (often even outside the EU) to think twice about how their data is stored and retained. And that's huge positive even if cookies were never a thing in gdpr.

> how their data is stored and retained

Didn’t the EU recently cut a deal where the data from EU can be transferred to US without any legal ramifications [1]? So then this just goes to show it’s just about adding another layer of bureaucracy instead of caring about protecting user data.

[1] https://www.politico.eu/article/eu-signs-off-on-data-transfe...