Ask HN: How can Twitter be GDRP compliant with this:

2 points·jonplackett··5 comments

"By using Twitter’s services you agree to our Cookies Use. We and our partners operate globally and use cookies, including for analytics, personalisation, and ads." [Close Button]

How is that consent?

From the UK GDPR website: “Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.”

View on HN

They don't need your consent if they have another legal basis for using cookies, such as "contractual necessity" or "legitimate interest". You can find the table of the data processing they do and their legal basis for it here: https://help.twitter.com/en/rules-and-policies/data-processi...

Analytics and ads do not fall under that though.

I would consider the following to be analytics and ads:

Inferences about your account - such as interests, age, and gender - which we use to provide features including:

Account suggestions

Advertising

Recommendations

Timeline ranking

Their legal basis for these is "legitimate interests".

When you're at Twitter scale, you don't really need to adhere to the GDPR, you just need to make a big show of adhering to the GDPR, so that if the EU brings you to court you can lead them through a twisty legal labyrinth that will go on for years.

Surely more like making a show of not being compliant.

Reply on news.ycombinator.com