5 ms·

Only tracking cookies require consent. Cookies could be about the last time you saw the website's weather content, in which case it's purely functional and need

Only tracking cookies require consent. Cookies could be about the last time you saw the website's weather content, in which case it's purely functional and need no consent.

friendzis 3y ago
No. Unless you have other lawful grounds of processing, all functional cookies still have to be session scoped at worst
- mcpackieh 3y ago
  Strictly necessary cookies do not have to be session cookies. If you read https://gdpr.eu/cookies/ https://gdpr.eu/cookies/ it says they generally will be session cookies, not that they must be. If you think it is appropriate for your users to be already logged in the next time they run their web browser, using a persistent cookie for that is permitted.
  - friendzis 3y ago
    Yes, they can become persistent once you get consent or other grounds. You probably get that consent in registration form and "recall" it on login. Otherwise you process data from across sessions, which is a huge red flag.
    - mcpackieh 3y ago
      Wrong, you don't need consent for these kind of cookies.
krono 3y ago
Not all places in the world share the same set of laws or jurisprudence. What's allowed or required and what isn't is entirely dependent on the jurisdiction(s) the website operators are beholden to.
- z_ack 3y ago
  Are you sure of that ? I knew that the competent jurisprudence or "forum" is that of the user, or everyone could circumvent the law using "offshore" companies to track people in regulated countries (i.e. EU). I was reading here on HN that , for that reason ( avoid EU Regulation ) sites like New York Times, blocked the availability of their contents in whole EU. I was checking, see here, for example: https://reutersinstitute.politics.ox.ac.uk/news/many-eu-visitors-shut-out-us-sites-response-gdpr-never-came-back https://reutersinstitute.politics.ox.ac.uk/news/many-eu-visi...
  - krono 3y ago
    Insofar as what the jurisdictions the website operators are beholden to or perhaps care about have to say about it, but otherwise I (not a laywer) share your perspective.
BiteCode_dev 3y ago
Third party cookies are usually for tracking though.

Only tracking cookies require consent. Cookies could be about the last time you saw the website's weather content, in which case it's purely functional and need no consent.

friendzis 3y ago

No. Unless you have other lawful grounds of processing, all functional cookies still have to be session scoped at worst

mcpackieh 3y ago
Strictly necessary cookies do not have to be session cookies. If you read https://gdpr.eu/cookies/ https://gdpr.eu/cookies/ it says they generally will be session cookies, not that they must be. If you think it is appropriate for your users to be already logged in the next time they run their web browser, using a persistent cookie for that is permitted.
- friendzis 3y ago
  Yes, they can become persistent once you get consent or other grounds. You probably get that consent in registration form and "recall" it on login. Otherwise you process data from across sessions, which is a huge red flag.
  - mcpackieh 3y ago
    Wrong, you don't need consent for these kind of cookies.

krono 3y ago

Not all places in the world share the same set of laws or jurisprudence. What's allowed or required and what isn't is entirely dependent on the jurisdiction(s) the website operators are beholden to.

z_ack 3y ago
Are you sure of that ? I knew that the competent jurisprudence or "forum" is that of the user, or everyone could circumvent the law using "offshore" companies to track people in regulated countries (i.e. EU). I was reading here on HN that , for that reason ( avoid EU Regulation ) sites like New York Times, blocked the availability of their contents in whole EU. I was checking, see here, for example: https://reutersinstitute.politics.ox.ac.uk/news/many-eu-visitors-shut-out-us-sites-response-gdpr-never-came-back https://reutersinstitute.politics.ox.ac.uk/news/many-eu-visi...
- krono 3y ago
  Insofar as what the jurisdictions the website operators are beholden to or perhaps care about have to say about it, but otherwise I (not a laywer) share your perspective.

BiteCode_dev 3y ago

Third party cookies are usually for tracking though.