Skip to main content
Removed paragraphs about GDPR application for EU citizens outside GDPR areas added note
Source Link
Catija
  • 116.3k
  • 47
  • 309
  • 444

With this update, new users and site visitors outside of the EEA/UK will now be automatically opted in to having non-essential cookies deployed on their browsers.

This is not only about "new users" though - I get these popups frequently on my phone (iPhone), even when logged in - and in browsers on new machines/devices. What does this mean for me? If I ignore this popup on my phone, will my stored settings be overridden to allow non-essential cookies?

Considering that I get these popups frequently when I've already set my preferences, that implies that the system doesn't adequately communicate my selections to the browser, leaving me worried that they will be overridden at any time. Can you say anything that will allay these concerns?

Additionally - not a lawyer but... - my understanding is that the GDPR rules apply more broadly than this change seems to recognize - including specifically anyone in the EEA/UK and requires active consent - meaning the user can't grant permission through inaction.

  • anyone in the EEA/UK
  • EEA/UK citizens outside the EEA/UK

While IP-based checks may cover the formerhelp - though it doesn't express how you'll address cases of non-EEA/UK people visiting(assuming IP is sufficient for determining location), what happens if someone from outside the EU - this change seems to ignore that second group entirely! Surely you understand that EEA/UK citizens live outsidemoves to the EEA/UK regionsfor work? Will they be shown the EU variation of the form when their IP change is recognized?

  • What happens if an American goes to Germany? Will they be shown the EU variation of the form so you can be compliant?
  • What about EEA/UK citizens outside their home countries? How will you even know they need to be shown the EEA/UK variation?

This "simplification" seems to actually make things significantlysomewhat more complicated for you all andwhile your existing verification system seems to put youexisting users at significant risk from GDPR compliance failures. I doubt the ad money you earn will offsetof having their settings changed when simply dismissing the finesform. Is


An earlier version of this reallyincorrectly indicated my flawed understanding that EEA/UK citizens are covered by GDPR when abroad but further research has shown that's not the route youcase. I do want to follow? Maybe your lawyers can explain why I'm wrong - I'd appreciaterecognize that here rather than just editing it because I honestly like learning about GDPRout. Apologies for the error.

With this update, new users and site visitors outside of the EEA/UK will now be automatically opted in to having non-essential cookies deployed on their browsers.

This is not only about "new users" though - I get these popups frequently on my phone (iPhone), even when logged in - and in browsers on new machines/devices. What does this mean for me? If I ignore this popup on my phone, will my stored settings be overridden to allow non-essential cookies?

Considering that I get these popups frequently when I've already set my preferences, that implies that the system doesn't adequately communicate my selections to the browser, leaving me worried that they will be overridden at any time. Can you say anything that will allay these concerns?

Additionally - not a lawyer but... - my understanding is that the GDPR rules apply more broadly than this change seems to recognize - including specifically

  • anyone in the EEA/UK
  • EEA/UK citizens outside the EEA/UK

While IP-based checks may cover the former - though it doesn't express how you'll address cases of non-EEA/UK people visiting the EU - this change seems to ignore that second group entirely! Surely you understand that EEA/UK citizens live outside EEA/UK regions?

  • What happens if an American goes to Germany? Will they be shown the EU variation of the form so you can be compliant?
  • What about EEA/UK citizens outside their home countries? How will you even know they need to be shown the EEA/UK variation?

This "simplification" seems to actually make things significantly more complicated for you all and put you at significant risk from GDPR compliance failures. I doubt the ad money you earn will offset the fines. Is this really the route you want to follow? Maybe your lawyers can explain why I'm wrong - I'd appreciate it because I honestly like learning about GDPR.

With this update, new users and site visitors outside of the EEA/UK will now be automatically opted in to having non-essential cookies deployed on their browsers.

This is not only about "new users" though - I get these popups frequently on my phone (iPhone), even when logged in - and in browsers on new machines/devices. What does this mean for me? If I ignore this popup on my phone, will my stored settings be overridden to allow non-essential cookies?

Considering that I get these popups frequently when I've already set my preferences, that implies that the system doesn't adequately communicate my selections to the browser, leaving me worried that they will be overridden at any time. Can you say anything that will allay these concerns?

Additionally - not a lawyer but... - my understanding is that the GDPR rules apply more broadly than this change seems to recognize - including specifically anyone in the EEA/UK and requires active consent - meaning the user can't grant permission through inaction.

While IP-based checks may help (assuming IP is sufficient for determining location), what happens if someone from outside the EEA/UK moves to the EEA/UK for work? Will they be shown the EU variation of the form when their IP change is recognized?

This "simplification" seems to actually make things somewhat more complicated while your existing verification system seems to put existing users at risk of having their settings changed when simply dismissing the form.


An earlier version of this incorrectly indicated my flawed understanding that EEA/UK citizens are covered by GDPR when abroad but further research has shown that's not the case. I do want to recognize that here rather than just editing it out. Apologies for the error.

Source Link
Catija
  • 116.3k
  • 47
  • 309
  • 444

With this update, new users and site visitors outside of the EEA/UK will now be automatically opted in to having non-essential cookies deployed on their browsers.

This is not only about "new users" though - I get these popups frequently on my phone (iPhone), even when logged in - and in browsers on new machines/devices. What does this mean for me? If I ignore this popup on my phone, will my stored settings be overridden to allow non-essential cookies?

Considering that I get these popups frequently when I've already set my preferences, that implies that the system doesn't adequately communicate my selections to the browser, leaving me worried that they will be overridden at any time. Can you say anything that will allay these concerns?

Additionally - not a lawyer but... - my understanding is that the GDPR rules apply more broadly than this change seems to recognize - including specifically

  • anyone in the EEA/UK
  • EEA/UK citizens outside the EEA/UK

While IP-based checks may cover the former - though it doesn't express how you'll address cases of non-EEA/UK people visiting the EU - this change seems to ignore that second group entirely! Surely you understand that EEA/UK citizens live outside EEA/UK regions?

  • What happens if an American goes to Germany? Will they be shown the EU variation of the form so you can be compliant?
  • What about EEA/UK citizens outside their home countries? How will you even know they need to be shown the EEA/UK variation?

This "simplification" seems to actually make things significantly more complicated for you all and put you at significant risk from GDPR compliance failures. I doubt the ad money you earn will offset the fines. Is this really the route you want to follow? Maybe your lawyers can explain why I'm wrong - I'd appreciate it because I honestly like learning about GDPR.