I have seen many ways of requiring user acceptance of their data usage on the internet. Which are conforming? Keep in mind I am talking just about the consent acquiring mechanism.

In order from the least options offered to the user to the most options offered:

  • not allowing to use the site until the user clicks Accept. No options, just an "Accept" button.

  • A banner stating that "By browsing the site you accept the conditions". Just an "x" to close the banner. Using the site is allowed while the banner is displayed.

  • A banner with an "Accept" (and possibly "Reject") button. No other options. Site navigation is allowed while the banner is displaying.

  • A banner with an "Accept", "Reject" and also a "Settings" options where the user can fine tune the way his data is being used by the site.

I have heard from developers which studied GDPR that the law requires options for fine tuning settings (something like data required for basic functionality, data required for site analytics, data required for personalized ads, etc.). Which if true would make only the last variant above compiling. However I have personally observed only a handful of sites implementing this. Are all others non-conforming?

  • I agree with you, but we probably have to wait until the first fines are issued for non-conforming websites. – wimh Aug 3 '18 at 23:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.