new | show | ask | jobs Github

tempestn 3 hours ago

"I didn't read it," sure. But, "A reasonable person would not read it?"

▲

ChadNauseam 2 hours ago | parent [-]

Why would a reasonable person not read it?

I just visited theguardian.com to see their cookie banner. The banner says this:

> Your Privacy (`x` button to close the tab)

> US residents have certain rights with regard to the sale or sharing of personal information to third parties.

> Guardian News and Media and our partners use information collected through cookies or in other forms to improve experience on our site and pages, analyze how it is used and show personalized advertising.

> You can opt out of the sale of all of your personal information by pressing

> <button>Do not sell or share my personal information</button>

It's 3 sentences, plus a button that says "Do not sell or share my personal information". I actually don't even think this is GDPR compliant, because my layman's understanding says that GDPR consent must be presented as opt-in, rather than opt-out. (I guess they are going for CCPA/CPRA compliance?) But anyway, I would think that a reasonable person could be expected to notice a button that says "Do not sell or share my personal information" and then click it, especially when it's portrayed prominently at the bottom of the page.

▲

preg_match 2 hours ago | parent | next [-]

> Why would a reasonable person not read it?

Because this is there 1 millionth cookie banner, because every site and their momma has one.

Also, 90% of cookie banners are not this good. They tell you nothing, hide the "reject" button behind multiple screens, etc. At that point the consumer is trained to click accept.

▲

troupo 2 hours ago | parent | prev [-]

This is indeed a rather good implementation of ehat GDPR requires: clear unambiguous language, an opt-out available immediately.

This is the definition of informed consent

	▲	jkaplowitz 8 minutes ago \| parent [-]
		The GDPR doesn’t allow opt-out consent to count as consent. The only consent it recognizes as valid consent is opt-in. However, since we are discussing the banner that The Guardian website shows to US viewers, I assume they’re trying to comply with California privacy law, which does allow opt-out regarding the sale of personal information.