Re: [proposals] Notice and consent debate (#5)

The consent requirement (as in ePrivacy for storage access, or in the GDPR as a legal basis for processing personal data), does not require a user prompt, it just means the user has to agree before the access happens. That could be as simple as a setting in the browser, such as DNT or GPC.
Also, saying "..if and when ePD is an issue" is not a good way to encourage policy makers to create an exemption. The ePD has been around in one way or another since 2002, and the opt-in requirement (for storage-access - which is necessary for tracking) in force since since 2011.

Better to assume an opt-in for now, and try and get an exemption later when this has proved itself in practice.


-- 
GitHub Notification of comment by michael-oneill
Please view or discuss this issue at https://github.com/patcg/proposals/issues/5#issuecomment-1035402757 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 10 February 2022 19:37:46 UTC