“Do Not Track” is a legally binding order, German Court tells LinkedIn::Landgericht Berlin gibt Klage des vzbv gegen die LinkedIn Ireland Unlimited Company weitgehend statt
“Do Not Track” is a legally binding order, German Court tells LinkedIn::Landgericht Berlin gibt Klage des vzbv gegen die LinkedIn Ireland Unlimited Company weitgehend statt
GDPR was designed around the “Do not Track” browser flag, so that websites can get a semblance of consent using those annoying cookie prompts, with dark patterns like hiding the “Decline All cookies” inside the second page of the prompt, or using very small fonts and gray colors + very confusing language. and they have carried on with complete impunity for 5 years now.
Luckily in Germany the law states that at least the “Decline all cookies” button has to be in the same place as the “Accept all cookies” one. So at least the local sites are kind of easy to navigate.
Only problem at the moment are “Accept all cookies or buy a subscription” banners. But as far as I know the courts are inclined to side with the customers on this one as well.
I mean, most companies still don’t abide by it tho. There’s lots of sites where you can accept all cookies or you have to jump through a few hoops to decline the non essential ones.
I just open any site with one of those cookie-banners in a private window so that any cookie it creates will be deleted as soon as the window is closed.
Am I supposed to trust the company to correctly define ‘essential?’ Seems easy to weasel around and makes me nervous.
It’s almost certainly going to be litigated at some point, so a court is going to define “essential”… eventually.
Totally. If we’re going make real change with this we need hard enforcement that says “you must provide a default setting that can be set per browser” or something that avoids the entire need for sifting through their cookie menu to find out I left one turned on. But this is peak example of ineffective laws to govern the internet made by people who don’t have any experience in computer science. I’m sure we will continue to see “do not track is just a suggestion” messages continuously. Or the requirement for each individual website to specify what type of tracking in absurd detail.