The “Accept all” button is often the standard for cookie banners. An administrative court has ruled that the opposite offer is also necessary.

Lower Saxony’s data protection officer Denis Lehmkemper can report a legal victory in his long-standing battle against manipulatively designed cookie banners. The Hanover Administrative Court has confirmed his legal opinion in a judgment of March 19 that has only just been made public: Accordingly, website operators must offer a clearly visible “reject all” button on the first level of the corresponding banner for cookie consent requests if there is also the frequently found “accept all” option. Accordingly, cookie banners must not be specifically designed to encourage users to click on consent and must not prevent them from rejecting the controversial browser files.

  • splendoruranium@infosec.pub
    link
    fedilink
    English
    arrow-up
    2
    ·
    14 天前

    Next up: No more <Allow all button> allowed" followed by “No banners allowed, setting cookies is only even possible after user account creation”… please?

    • rmuk@feddit.uk
      link
      fedilink
      English
      arrow-up
      4
      ·
      13 天前

      As always, it’s not the technology that’s the problem, it’s the grifters running the show. Cookies are great for remembering what’s in a shopping basket, language settings, etc before you sign in and if those were the only kinds of things the sites were using they wouldn’t even need the Cookie banner. Remember the Cookie Banner is nothing to do with Cookies, and everything to do with commercialised mass monitoring.

      • splendoruranium@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        13 天前

        Remember the Cookie Banner is nothing to do with Cookies, and everything to do with commercialised mass monitoring.

        That is very much true, but there’s plenty of things that can happen before the final death rattle of commercialised mass monitoring in the wake of some hypothetical future Glorious Revolution. I have my doubts I’ll live to see it so I’ll take what I can get.

        As always, it’s not the technology that’s the problem, it’s the grifters running the show. Cookies are great for remembering what’s in a shopping basket, language settings, etc before you sign in and if those were the only kinds of things the sites were using they wouldn’t even need the Cookie banner.

        Well, all these useful things require some form of user action. There’s no need to remember a language setting until a language is set and there is no need to remember things in a shopping basket until they are put there. I’d draw the conclusion that there is no need to set any cookies for anyone before any of these actions happen.

        It’s probably a meaningless gripe though… I mean, let’s be honest here, tracking cookies are so 2010s anyway, even if they were to disappear completely, I doubt the grifters would meaningfully miss them for long, there’s much better stuff in the arsenal by now.