> - deny is the default: one button to deny everything but one accept button for every partner
Yes, that's in the law. I you do not click on consent, the default is deny everything, and a button to refuse everything should be easy to access.
> - making payments for non-tracking illegal
In the law too.
> - remove or rephrase "legitimate interest" ruling, because providers use that as an excuse to enable everything
True, this loophole was introduced by UK/US lobbyists at the time if I remember correctly. My (very small, 3 dev) company at the time worked on health data and managed to find itself in the arcanes of Brussels because anything related to PII security was good news for us.
- and probably: prohibit any other dark pattern, or at least make it extremely hard to implement
This is the courts who can judge that.
The main issue with the gdpr law is local enforcement. It is honestly well written and easy to understand, which is why you have so much legal loopholes, but EU courts are RAI rather than RAW (our fast americanisation is changing that though).
> and a button to refuse everything should be easy to access.
Part of the problem with this is the website operators who maliciously interpret this to mean "also refuse the cookie that says what I selected", so you have to select it every time you visit. (I even hit a site a few weeks ago that required it on every page when I refused.)
Respecting Do Not Track is the most important thing here. They absolutely could have forced all browser vendors to implement that feature, and force website owners to honor it. Instead, we got cookie banners.
This keeps surfacing in discussions about tracking. I'm wondering how do you propose for b2c software companies to make money if they can't either properly advertise or require you to pay to opt-out? Is this just an entitled leftie thing ("Elon Musk should pay for my Instagram!") or is there a genuine though-out plan for another reasonable business model?
Why the hell are people defending 24/7 monitoring at scale that would make even Stasi or Stalin pause and think "are we going too far?"? 1984 wasn't an instruction manual.
> Advertising does not require invasive and pervasive tracking.
Why are you so opposed to pay for a tier without tracking? I'm still not following.
> Why the hell are people defending 24/7 monitoring at scale that would make even Stasi or Stalin pause and think "are we going too far?"? 1984 wasn't an instruction manual.
Stasi or KGB weren't "opt in" for their citizens while social networks definitely are. For example, Twitter won't allow me to access the images in the post you linked because I deleted my account as soon as Musk completely enshittified it and I'm doing just fine without it.
> Why are you so opposed to pay for a tier without tracking? I'm still not following.
Because advertising does not require invasive and pervasive tracking.
The better question is: why are you so happy defending 24/7 surveillance of everything you do?
> Stasi or KGB weren't "opt in" for their citizens
What you're proposing isn't opt in either. You're proposing "pervasive and invasive tracking, or pay an arbitrary sum randomly defined by the tracking industry". That is, literally pay for access to internet without tracking, or else. All based on a completely unproven assumption that tracking is required for ads to function. It's not.
> while social networks definitely are.
Indeed. Because tracking is happening only on social networks.
> For example, Twitter won't allow me to access the images
> Because advertising does not require invasive and pervasive tracking.
Okay, so just ignore tracking-advertisement supported option and sign up for payed account. What is your issue with this again?
> What you're proposing isn't opt in either. You're proposing "pervasive and invasive tracking, or pay an arbitrary sum randomly defined by the tracking industry". That is, literally pay for access to internet without tracking, or else.
This is incorrect. GDPR already forbids tracking without consent, so services you didn't sign up for (the whole internet) can't legally track you. Obviously, then everything would cost you actual money not just social networks.
This has nothing to do with the topic of this thread. GDPR already forbids random sites and ad networks from tracking you without your explicit consent.
> entitled leftie thing ("Elon Musk should pay for my Instagram!")
At least ever since Musk syphoned billions of dollars from the government, then illegally intervened in elections at home and abroad, then went on to destroy USAID, then went after pension funds I believe it would be just fair if he was made to pay personally for some expenses of private people, yes. You don't have to be particularly left to find that.
People aren’t rational. They want to have less regulations so there’s more freedom to do what you want and then in the same sentence complain about enshittification.
- deny is the default: one button to deny everything but one accept button for every partner
- respect DO NOT TRACK, and force software/hardware providers to enable it by default
- making payments for non-tracking illegal
- remove or rephrase "legitimate interest" ruling, because providers use that as an excuse to enable everything
- and probably: prohibit any other dark pattern, or at least make it extremely hard to implement