Hacker News Reader

Comment by scaryclam | Hacker News Reader

I've seen various sites in compliance, mostly smaller companies TBH. It seems to be mostly US companies who seem to be getting it completely wrong (maybe that's biased by the sites I frequent), which has perplexed me a little as it would have been cheaper to just do nothing about it at all.

I'm also wondering if the cookies thing is actually just the other law, but now we're all having to look at the old "we use cookies" notifications in a GDPR light.

View on HN

The irony is that the rules about annoying cookie notifications were supposed to be fixed by some additional changes that came into effect with the GDPR, but those changes weren't ready in time.

Interesting, do you have a link where I can learn mire about the fix?

https://en.wikipedia.org/wiki/EPrivacy_Regulation_(European_...

That Wikipedia page seems out of date, and there's only that one and a Dutch version of it, it seems. ePR should get in effect in 2019, correct?

ePR should get in effect in 2019, correct?

Yes, that seems to be what they're aiming for now. It was originally supposed to come into effect alongside the GDPR last month, repealing the analogous ePrivacy Directive that was (and for now remains) in force, and therefore allowing member states to update their national laws to remove the annoying cookie notification requirements. Sadly, it wasn't ready in time.

The cookie banners are required by the ePrivacy Directive, not the GDPR or its predecessor, the Data Protection Directive. ePrivacy has been around for years. Directives are EU-wide “directives” to each member state (country) to enact their own version of it. Therefore, both ePrivacy Directive and the old Data Protection Directive resulted in varied laws from country to country making compliance a challenge. Part of the purpose of the GDPR was to create consistency by replacing a directive with an EU-wide regulation. They have the same plan for ePrivacy and already have published an ePrivacy Regulation for review and comment. The ePrivacy Regulation was supposed to be passed at the same time as the GDPR, but they’re behind so people are expecting it in 2019. There is a recognition that the cookie banners have been a failure, and it is expected the ePrivacy Regulation will get rid of them (but there will still be TBD consent requirements around use of cookies).

Reply on news.ycombinator.com