Honest question: Can somebody explain to me why this is a bad thing? Ads can be served without cookies, right? Sure, (behavioural) targeting would break, but is that really a problem?
Now, even if you want to allow cookies (and have signaled as much in your browser), a site will have to disrupt your browsing experience to accept a cookie from the website.
Completely redundant and adds yet another layer of bureaucracy on top of website design. Very EU.
And there are plenty of good uses for cookies without having to register: session tracking for shopping carts (so that you can add items without logging in), session tracking for sites that show you a navigation breadcrumb...
An exception exists where the cookie is "strictly necessary" for the provision of a service "explicitly requested" by the user
Strange how all those lawyers aiding the writing of the law would miss such a thing ...!?!
Strange how all those lawyers aiding the writing of the law would miss such a thing ...!?!
Strange how all those lawyers aiding the writing of the law would miss such a thing ...!?!
A steering wheel in a car is not strictly necessary to drive it. Drivers could physically turn the tires.
And so on.
That is very very risky. Let's say that [popular-site-with-logins] is hosted in EU and switches to ?sessionid=... style. Now people start sharing links to their content in the "normal" way (select url, copy, paste) and suddenly you have problems with random users being logged in as someone else. (or you have to limit session to ip, which annoys mobile users)
Sure, other (non-sign-up) functionality might also need cookies (changing font size, switching themes, the small things) and you might not want to annoy the user with stupid checkboxes for those kinds of stuff, but other than that?
I still don’t see the big scandal.
Now comes the hacks: serve javascript with a unique id in it. Set the cache policy to never re-download, or recheck the file. Use you lawful (semi) permanent cookie.
The user obviously asked for the data to be stored, since it's part of caching.
Or am I going to have to ask the user before being allowed to cache anything locally?
Stil think it's a nonsense law though ..
You can use cookies to act as a "bread crumbs" trail, so people can see what other pages/products they have looked at.
If you make a multi-lingual site, you can use a cookie to remember what was the last language the user chose, and show all future pages in that language, without them having to change it on every page.
The process for doing this relies on being able to set a cookie when the ad is served and read the cookie back on the landing page for the conversion. Taking away the ability to track conversions will set the online advertising industry back significantly, which is why the major opposition to legislation like this comes from advertising companies.