> All it requires is "informed consent" (i.e a click or a tap on a button) from the "data subject"

Correct. Clear, opt-in informed consent to use personal data is the fundamental principle of the GDPR. As it should be. I'm puzzled why you think this is a negative.

> and people can evade privacy with impunity.

Certainly not. The GDPR does not permit data trawling or allowing data controllers to do what they like with your personal data once they have it. It must only be used for the purpose it was requested for.

> ugly cookie banners

Once again, there is no requirement for 'cookie banners'. You are free to use whatever cookies you want to run your site. HOWEVER, if you are using those cookies to track me (advertisers take a bow) then you need my clear, opt-in informed consent to do so. And so you should!

I continue to be astounded at the ignorance some people have of such a vital privacy law; one that is fundamental to modern data use and respect for the customer.

▲

woadwarrior01 3 days ago | parent [-]

> Certainly not. The GDPR does not permit data trawling or allowing data controllers to do what they like with your personal data once they have it. It must only be used for the purpose it was requested for.

You might want to read the privacy policies of some of the European fintech and ad-tech companies (nb: I've worked at some of them). They cast a wide blanket over all purposes.

At best, the GDPR only introduces a minor indirection, the problem of hoodwinking the "data subject" into clicking the accept button. At worst, it gives them false sense of privacy, where there isn't much.

	▲	GJim 3 days ago \| parent [-]
		> At best, the GDPR only introduces a minor indirection, the problem of hoodwinking the "data subject" into clicking the accept button True. Some people are daft enough to opt-in and click the "accept cookies" and "give my personal and location data to strangers" buttons. These people don't care about privacy and are beyond help. > At worst, it gives them false sense of privacy, where there isn't much. Those of us who bother to understand and use privacy law have very good protection thankyouverymuch.