Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> see also the GDPR whose only consequence is a bunch of cookie pop ups.

well that's just wrong.



So exactly what did it accomplish? Did it affect Facebook or Google at all or any adTech company?

When ATT was implemented by Apple, many ad tech companies announced it impacted them. You didn’t hear a whisper after the GDPR. Websites just started putting up annoying cookie banners and life continued.


What do you want exactly? Make tracking illegal? Make advertising illegal?

The law demands you ask the user for consent, if it made tracking illegal people would complain about their freedom to sell their private data for cat pictures.

There are consequences for GDPR, maybe you did not see any but I can assure you that there were news about fines and you can Google for that. I can also inform you that at my work place GDPR also had an effect.

What you need is browser makers to get involved and improve the situation, I am sure you would have hated EU to tell you how to implement a ""do not tack" in your browser. The main issue is that Chrome is controlled by Google and they don't want to help with privacy. But who knows maybe your favorite company Apple will push and implement a consent for tracking API .

Btw here in EU GDPR also has effect in real world, just an example before GDPR you would get exam results published publicly with names, now you get a serial number and instead of names the results will ahve this serial number, nobody will know what your results are. Same if you go to a clinic to do a blood tests, they need to give you a paper and specify exactly what they will do with your data.

Big tech is trying to avoid doing the right thing as much as possible but they will pay larger and larger fines until they will have to respect the users.


> Btw here in EU GDPR also has effect in real world, just an example before GDPR you would get exam results published publicly with names,

In the US, for decades not even parents could know about their college students without the students signing paperwork.

> Same if you go to a clinic to do a blood tests, they need to give you a paper and specify exactly what they will do with your data.

HIPAA in the US never required cookie pop ups and has been the law for decades.

Its not exactly making a strong argument that there is one really complicated 11 chapter 99 section law that tries and failed badly to address different goals.


Yes, but HIPA is like EXTREMELY limited, GDPR apples to everything not only websites, mI attempted to clarify this since many confuse GDPR with "cookie law", so GDPR can't tell web-developers how to implement the popups or buttons since is a generic thing, the law specify that accepting and rejecting should be similarly easy , if it is not then you will need to report this bussiness and it takes time for them to get fined.

I am not sure why you guys in US see those popups, the websites could just continue tracking you and sell your data.


> So exactly what did it accomplish?

https://www.privacyaffairs.com/gdpr-fines/

> Total Amount of GDPR Fines: €2,040,213,207

> Largest Fine: €746,000,000 Amazon Europe Core S.a.r.l. on July 22 , 2021 - Luxembourg


And now compare those fines to the market cap and revenue of the large tech companies.

Did it change any behaviors?

And all indications that Amazon appealed the fine and hasn’t paid it yet.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: