Remix.run Logo
terabytest 14 hours ago

Is the issue here a lack of “Reject All” button? Or strictly the number of partners?

Superleroy 14 hours ago | parent | next [-]

I read the complaint and it seems to have nothing to do with the reject all button and is only about transparency and informed consent. They state that you cannot reasonably read all those privacy policies and thus you also cannot give informed consent.

At least that is how I understood it

mschild 14 hours ago | parent | prev | next [-]

Probably both.

If I understand it correctly giving informed consent for over 1700 tracking partners of a single page isn't realistic. You as a single person cannot be expected to truly understand what it is you are agreeing to when you click accept.

swiftcoder 14 hours ago | parent | prev | next [-]

It's the definition of "informed consent". Can I actually go through a couple of thousand 3rd parties and confirm that their policies all conform to my data handling requirements?

loeg 14 hours ago | parent [-]

Can you with even a single 3rd party? It's a huge waste of your time.

Nursie 14 hours ago | parent | prev [-]

The issue is that even if you click "Accept" there is no reasonable way to infer that the user has given informed consent, because becoming informed would likely take days or weeks.

As such the conditions for data sharing are not met and it is likely to be illegal.

loeg 14 hours ago | parent [-]

> becoming informed would likely take days or weeks.

Then it is basically impossible to consent to any kind of tracking, because users cannot become informed for any number of 3rd parties -- even a single one.

Barbing 13 hours ago | parent | next [-]

A simple diagram of them opening a user’s mouth and cramming 200 logos down our throats would inform pretty well, especially if (this being the greater fantasy) the corresponding opt-in was buried deep at the bottom of a list in an obscure settings menu.

Nursie 12 hours ago | parent | prev [-]

I'm not sure I agree that you couldn't become informed about a single one. I think one is probably reasonable.

Presumably, if your service was important enough to the user and the third party tracking integration important enough to you that you're willing to ask the user to spend a few hours reviewing their 'contract' with the third party, then such a thing could be done. I imagine a lot of people would click the “I’m not reading all that” button though.

You could even envision a simplified sort of 'tracking declaration' as is done with (for example) insurance products here in Australia, where a sort of statutory precis gives the reader a good, bullet-pointed outline of the policy

I would wager that with a well formatted precis like that, it may even be possible to consent to as many as half a dozen 3rd parties. I doubt many people would though, if it was spelled out that blatantly and clearly what it's all about.

And isn't that the point? Hide what's really happening in so many walls of text nobody could ever conceivably bother with them?

So I think the person filing this suit is correct. The behaviour on show here is an end-run around even the idea of informed consent, and needs to be squashed.

(Edit - instead of all these cold GDPR compliance boxes and walls of text, sites should be honest: letting advertisers track you is how we make money, please click yes and we can get paid for your visit”, but of course it’s much more effective just to confuse people into ignorant acquiescence, or try to get people riled up about “stupid gdpr compliance nonsense”)

troupo 23 minutes ago | parent [-]

> if your service was important enough to the user and the third party tracking integration important enough to you that you're willing to ask the user to spend a few hours reviewing their 'contract' with the third party,

I've now bought two apartments and sold one. The whole process including reading the contract almost in its entirety out loud for both parties, and signing by the parties, and confirmation of the bank took less than an hour.

There's almost no service important enough to spend a few hours reading through a contract. And those that are? They should not have contracts of that length.

> letting advertisers track you is how we make money, please click yes and we can get paid for your visit”

Ads don't require pervasive and invasive tracking. No one needs to store my precise geolocation for 12 years to serve me an ad: https://pbs.twimg.com/media/GTe23o5WwAACyNJ.png?name=orig