If they didn't have ads that track me, then they would have no need to ask my permission to use cookies that track me.
There is no requirement so seek permission for other cookies needed to run the website. Quite why some readers of a technical news site (!) are still confused about this is bizzare.
In short, blame the scummy adtech industry. Not the legislation that gives us our privacy.
Cookies not requiring consent :
- "technical" cookies: for session, saving some user preferences (consenting to cookies or not, language etc.)
- cookies used for load balancing or to protect against fraud
- cookies used to save a cart or used to invoice some service
- usage statistics cookies IF the data is anonymous
Also, the law is about trackers, not specifically cookies: so data in local and session storage are concerned as does browser fingerprinting.My take: if a law and it's enforcement almost universally lead to a worse outcome, the burden is on the lawmakers and enforcers to do better. You can yell about the websites all you want but being mad at most of the internet at once is a losing game.
Is my understanding of that situation wrong?
Edit Reference:
> If not sold within a year, the law would make it illegal for web-hosting services to support TikTok, and it would force Google and Apple to remove TikTok from app stores — rendering the app unusable with time.
https://www.npr.org/2024/04/24/1246663779/biden-ban-tiktok-u...
GDPR, however, also covers other things like your storing user's data, but that is separate from cookies. Cookies are stored on user's device.