Periodic reminder that EU did not mandate cookie popups.
Cookie popups are yet another example of malicious complience by an industry that wants to use and abuse data about us all.
@borup How, exactly, did you expect websites to ask for consent, then? Such a silly assertion to make.

@hrbrmstr @borup opt in

Longer answer: people seem to forget that you don't need user consent to set basic cookies needed for the basic operation of a website, because you're providing a service the user has requested (ie., render the content on this website please). You only need a cookie pop-up thing if your default is to set unrelated / marketing cookies. If you don't do that, then you don't need a consent banner and you can have an opt in somewhere for people who want to be tracked for some fucking reason. That's why websites that aren't designed by utter bastards don't have those daft pop-ups even if you access them in europe.

In other words the burden should only be on people who make shit websites that gobble up data for marketing. But as the op said, because of malicious compliance by piece of shit companies and marketers, it's shifted to being the user's problem. The regulations should be tightened to prevent this kind of bullshit behavior imo, not relaxed or removed as you seem to be (?) implying.

@dumpsterqueer @hrbrmstr @borup afaik there were a few rulings already where judge said "lol this is not how it's intended"

@dumpsterqueer @hrbrmstr @borup i think the only valid criticism of GDPR is that it's not tight enough tbh. they could've mandated sites respect a

X-GDPR-Cookie-Consent: { reject-nonessential | ask | allow }

header in all HTTP requests, or at least mandate that the UI for the preference be provided by the browser and websites got to acquire the answer either as a header or thru a JS function

I don't get why they skipped something so obvious

@cadadr @dumpsterqueer @hrbrmstr @borup

I'm guessing that the bad actors forced a "compromise"