noyb

> they provide bags at the grocery store Not anymore. I mean, you can pay for them now, but you don't get them by default. > You must either subscribe to our newsletter or approve cookies That's not legal... or at least some versions it are not. You can report them or try contacting https://noyb.eu/ in case they're interested. But now you know how you actually pay for that website. > If the EU could make itself useful, that would be now. They literally created laws which make this behaviour illegal. (Again, some versions anyway) Now it's up to enforcement, but that's country-local not something EU as an organisation can do.

I contribute monthly to https://noyb.eu/ and am following their initiatives in that regard [1]. [1] https://noyb.eu/en/project/advertising-ids

Support https://noyb.eu ? https://noyb.eu/en/our-detailed-concept >noyb uses best practices from consumer rights groups, privacy activists, hackers, and legal tech initiatives and merges them into a stable European enforcement platform. Together with the many enforcement possibilities under the European data protection regulation (GDPR), noyb is able to submit privacy cases in a much more effective way than before. Additionally, noyb follows the idea of targeted and strategic litigation in order to strengthen your right to privacy. We will also make use of PR and media initiatives to emphasize and ensure your right to privacy without having to go before court. Ultimately, noyb is designed to join forces with existing organizations, resources and structures to maximize the impact of GDPR, while avoiding parallel structures.

By the way, the Max Schrems mentioned in the article has started an EU Privacy watchdog project: https://noyb.eu/ Please suport them with an annual donation, they seem very dedicated and the work they're doing is very worthwhile (and have already gotten significant results).

Lawyer activist Max Schrems created NOYB for this purpose: https://noyb.eu/ Supporting / joining them is probably the best way to make a concerted impact.

Currently the adtech companies trying to rely on the legal basis of Consent - they get the user to explicitly agree to the processing required for targeted advertising with a popup advert. There is a great NGO of lawyers called NOYB (None of Your Business) in Austria who has filed complaints with Facebook, WhatsApp, Instagram and Android about the consent dialogs not being valid under GDPR. The complaint PDFs are worth glancing through to see how disingenuous the adtech companies are in their attempts to appear to comply with consent, when I think anyone reasonable would agree they are not. https://noyb.eu/ I'm curious as to the detail of Brave's complaint, which seems to add even more to this.

Great example. No, they didn't, though you wouldn't guess that from the news coverage. They filed complaints with four regulators. The details are all here. https://noyb.eu/

The only problem with this Polish news portal is that they will get warning and then got punished if they dont comply so this is not "fantastic idea". What they are doing is direct violation of GDPR and a really bad idea. There was a complaint filled this morning agains Google, Facebook, Whatsapp and Instagram doing something similar but to lesser extent. https://noyb.eu I just cant understand why is everyone trying to push all its intelectual power into trying to workaround GDPR instead of trying to comply, for most website it is trivial as they are in breach of GDPR just becoase they collect the data they dont need.

> Multi-billion dollar companies have GDPR-violating cookie banners, and nobody cares. Not true. In fact, those banners are in general way more compliant than before due to the work of organisations like https://noyb.eu/. They have also successfully led numerous initiatives to fine those companies and fix non-compliance. Usually at this point is when someone comes along to move the goalpost to “but those aren’t very affective”, or “but they still do it”. Sure, argue against malicious compliance and results all you want, I’m simply pointing out that it’s not true at all that “nobody cares”. Enough people care enough that entire organisations exist with that mission. > In the case of blogs like this, they don't really care about compliance, it's just LARPing. Maybe. If they don’t care, they can simply ignore my advice. If they do care, they can follow it. Either way, there is no situation in which my sharing of the law is negative.

I'd recommend supporting https://noyb.eu/ though.

Because that's how laws work, they apply to everyone. Then again what you say is a misrepresentation and biased idea, what proof do you have that GDPR will disproportionately impact small organizations ? Have you read the actual annoucement posted here ? asking because it does not say that it is shutting down but that it is moving its community discussion from a self hosted discourse forum to a third party hosted subreddit because discourse lacks the ability to properly address GDPR request and lack of time to do so. Of course GDPR also applies to FB, Google, etc. Have you followed the discussions 5 years ago when GDPR was in the making and witnessed the intense lobbying from silicon valley against strong protection ? Probably not. Are you aware of the noyb.eu[1] initiative, Max Schrems again, currently targeting google, facebook, whatsapp and instagram for their "forced consent" (more to come) ? La Quadrature du Net a french internet rights organization is currently working on 12 class actions targeting google, facebook, amazon, apple and microsoft, etc. [1]: https://noyb.eu/ [2]: https://gafam.laquadrature.net/

It's also worth noting that it's not the first time Swedish DPA has been criticized regarding GDPR complaint handling: https://noyb.eu/en/gdpr-rights-sweden "GDPR Rights in Sweden: Court confirms that authority must investigate complaints. So far, the Swedish IMY has taken the view that users don’t have party rights in GDPR procedures." https://noyb.eu/en/noyb-takes-swedish-dpa-court-refusing-properly-deal… "IMY frequently just forwards a complaint to the company that illegally processes personal data - and then immediately closes the case without investigating." (no decision on this as far as I know. A bit surprising since it has been almost 2 years)

At least there is the very dedicated and persistent https://noyb.eu :)

> We need a financial way to reward the resistance Here you go: https://eff.org, https://edri.org, https://noyb.eu

https://gdpr-info.eu/recitals/no-43/ > Consent is presumed not to be freely given [..] if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance. https://noyb.eu/en/pay-or-okay-explained-why-more-and-more-websites-ma… > the European Data Protection Board (EDPB) is working on a binding opinion on 'Pay or Consent', which will determine whether Europeans continue to have a realistic option to protect their privacy online. If the approach is legitimised for Meta, companies across all industries could follow suit - which would mark the end of genuine consent to the use of European's data.

They can just ignore it and get away with it: https://noyb.eu/en/microsofts-xandr-grants-gdpr-rights-rate-0 The "success" of GDPR is greatly overstated here. In practice, breaching it is the winning strategy.

Then I propose you should support https://noyb.eu/ Their track record is pretty good.

No, those companies do not follow GDPR. They are testing how far they can go without triggering mass complaints etc. See https://noyb.eu/en/where-did-all-reject-buttons-come

There’s noyb [1] and the various EDRi-affiliated organizations [2]. In the US, there’s the EFF [3]. [1] https://noyb.eu/ [2] https://edri.org/ https://edri.org/about-us/our-network/ [3] https://www.eff.org/

I find it very hard to assume good faith behind the question. GDPR certainly made things better but it's by no means a cure all because enforcement is slow and relatively weak. You can take https://noyb.eu as a very good resource for this. Some excerpts: > Microsoft's Xandr grants GDPR rights at a rate of 0% > Norwegian court confirms € 5.7 million fine for Grindr > Meta ignores the users’ right to easily withdraw consent > Streaming service DAZN took almost five years to answer a simple access request > First major fine (€ 1 million) for using Google Analytics > Spotify fined € 5 Million for GDPR violation > € 1.2 billion fine against Meta over EU-US data transfers

For what is worth, I think Meta is lying about it, or at least playing the victim card too strongly. > They’re demanding that Meta provide free full services without personalized ads or a monthly fee for users. Meta is being sued because their paid plan is not honest - they are currently asking for 10€/month which is disproportionate - for comparison, a Business Standard Google Workspace account with 2Tb and Gemini costs 11€. From [1], "EU law requires that consent is the genuine free will of the user. Contrary to this law, Meta charges a 'privacy fee' of up to €250 per year if anyone dares to exercise their fundamental right to data protection". [1] https://noyb.eu/en/noyb-files-gdpr-complaint-against-meta-over-pay-or-…

If you (or anyone reading it) include yourself in that "we", you can help with taking that step by writing and/or donating to the nonprofits that are driving these cases. Like the ICCL that posted this article, or e.g. NYOB (https://noyb.eu/).

Seems like a true consent based "Reject all" button is a critical danger to Facebook's business model since they are currently in violation of privacy rights in the EU after their last attempt at a legal basis was struck down. They are basing this subscribe or ad based model on a non-binding comment in a judgement last spring. Should hopefully only be a matter of time until it is ruled illegal. https://noyb.eu/en/meta-facebook-instagram-move-pay-your-rights-approa…

Also, shoot an email to noyb, they have several complaint cases pending with the Bulgarian Data Protection Authority already and they are good at what they do https://noyb.eu/

NOYB [https://noyb.eu/en] do their best to hold big tech's feet to the fire (and they exist on donations so we can all help out).

> Then, some random guy says he doesn't think Facebook's interpretation is right Since the rest of the comment has been ripped apart already I gonna grab this remaining bit. This is not "some random guy". It's noyb and they're doing an important job. They not just "saying this and that" but do try to get the actual laws enforced which is what they did here. You can learn more about them here: https://noyb.eu/en/our-detailed-concept The "random guy" you've probably actually meant is Max Schrems and his history is also quite noteworthy: https://en.wikipedia.org/wiki/Max_Schrems

Original source: https://noyb.eu/en/noyb-win-personalized-ads-facebook-instagram-and-wh… The source = noyb is the organization (founded Max Schrems) that actually filed the complaint, hired lawyers, fought the Irish DPA tooth and nail for 4.5 years. Essentially doing all the leg work – great job!

GDPRHub[1] seems pretty comprehensive. It’s run by the privacy activists from noyb[2], including Schrems of the Schrems decisions fame. [1] https://gdprhub.eu/ [2] https://noyb.eu/

> the law is only making it more expensive to be in the data harvesting business Great. "Data harvesting" without explicit consent should not be a thing. > If people start caring enough to actually cancel services that harvest their data, then the harvesting would stop. I think that's quite naive. Much harvesting comes from websites that share data with each other about individual user behavior. There is no service to cancel unless you mean "browsing the web". NOYB has more information, it seems: https://noyb.eu/en/projects

Last night I finally pulled the trigger on becoming a Supporting Member of NOYB¹ (My Privacy is None of Your Business). Seeing this story on Hacker News tonight reaffirms that decision and I’d recommend that other Hacker News users who care about data privacy do the same. Technological solutions that we use (Firefox containers, uBlock, etc.) are band-aids that work for a technically adept minority of citizens. The real struggle is political – and legal when there’s data protection legislation isn’t being enforced. ¹ https://noyb.eu/en/support-us