[blagie]

> But then, by standards of two decades ago, every website that cannot legally avoid showing a GDPR popup would be classified as malware. As it should be today. Alas, standards have changed.

I don't think you've read GDPR. In Europe (at least my part), *every* organization has a GDPR policy you need to agree to. Your child's school. Summer camps. Etc. Most are also conservative and reasonable.

What's broken is the GDPR popup with a dozen "legitimate interest" toggles for spying on you.

[matthewmacleod]

That was exactly the point OP was making.

[mrguyorama]

That pop up is not required by GDPR

You only need explicit consent from the user for tracking you do not require for valid business purposes

It's like complaining that OSHA sucks because every time you visit the grocery store you have to sign a waver that if they throw you in a wood chipper, you cant sue them.

That problem is not with liability wavers!

What feels really crummy to me is how many people don't seem to know that websites cannot really prevent you from using them if you reject optional cookies, so average people are afraid that if they say no, they can't use websites.