1033
submitted 11 months ago by neme@lemm.ee to c/technology@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] dacookingsenpai@lemme.discus.sh 25 points 11 months ago

A serious law would be like (but in legalese):

  • By default you CANNOT use tracking cookies
  • If you want to use them you should have a Table that classify them based on how much fingerprint do they take
  • Then you have to explicitly ask the user in the most clear and unintrusive way possible if you can track them
  • And the consent should last 30 days max
[-] Holli25@slrpnk.net 36 points 11 months ago

That is actually really close to what is present now. The EU never said "use cookie banners" but rather "if you really want to track people, they have to say yes". And most commercial websites decided to make it hard to say no, now everyone blames the EU for doing so. Your second point is not yet implemented, this would be really good for consumers.

[-] nybble41@programming.dev 1 points 11 months ago* (last edited 11 months ago)

They never should have made opt-in an option in the first place. All the legitimate reasons to store data are already permitted without asking permission (required for the site to function, or storing data the user specifically asked the site to store such as settings). All that's left is things no one would reasonably choose to consent to if they fully understood the question, so they should have just legislated that the answer is always "no". That plus a bit more skepticism about what sites really "need" to perform their function properly. (As that function is understood by the user—advertising is not a primary function of most sites, or desired by their users, so "needed for advertising to work" does not make a cookie "functional" in nature. Likewise for "we need this ad revenue to offer the site for free"; you could use that line to justify any kind of monetization of private user data.)

[-] Holli25@slrpnk.net 2 points 11 months ago

There is a fine and impossible to hit line that businesses have their own interest of surviving and should be able to use data. Like making better suggestions or tracking whether certain changes in their homepage work. This is not required for functioning but vital to companies for succeeding and giving you a better product. However, this should only be done on one site at a time, cross-site tracking oe fingerprinting is what sucks and allows data brokers to exist in the first place.

No lawyer can hammer into law, what a site needs to function, as it differs by site and is flexible in what people think is necessary. But your examples are good in that they show how sites go way too far to justify their over-the-top tracking. Maybe there really is an easy way to write it in "legalese", but I don't see it yet. But I am fully on your site, the current behaviour and practices are bad and unclear for customers.

[-] Sheeple@lemmy.world 12 points 11 months ago

Seriously I hate how disabling cookies is a hassle that you have to do on a seperate settings site... Where you get another cookie banner obstructing half of the settings

[-] TheEntity@kbin.social 10 points 11 months ago

Sounds like the current law, except for the last point. The problem is with enforcing compliance.

this post was submitted on 08 Jan 2024
1033 points (99.3% liked)

Technology

59982 readers
2161 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS