alt Hacker NewsAnd then you open the details mentioned in those cookie banners and see literally 600, 700 entities that get data about you shared by the website.
Malicious compliance is not the law-maker's fault.
Replies
Is too. They could have thought through the law they were writing and predicted malicious compliance. Or written a stronger law. Or revised the law when they spotted malicious compliance.
I don’t understand why that’s considered legal under GDPR. How can consent be express and informed when it would take 30 minutes just to identify each entity your data is being shared with?
In fact the law even specifies “no pre-ticked boxes” but every banner always has “accept all”. And it’s 50/50 to see “reject all” even though it is a requirement that denying must be as easy as accepting.
They should pay a bounty for reporting non-compliance.
It's not even compliance. You're required to make consent and decline require equal effort. A large percentage of them make it much easier to consent.
Not to mention the large number of "legitimate interest" exceptions that are absolutely not justifiable.
The main problem with the legislation is its lack of teeth and enforcement.