The “Accept all” button is often the standard for cookie banners. An administrative court has ruled that the opposite offer is also necessary.

Lower Saxony’s data protection officer Denis Lehmkemper can report a legal victory in his long-standing battle against manipulatively designed cookie banners. The Hanover Administrative Court has confirmed his legal opinion in a judgment of March 19 that has only just been made public: Accordingly, website operators must offer a clearly visible “reject all” button on the first level of the corresponding banner for cookie consent requests if there is also the frequently found “accept all” option. Accordingly, cookie banners must not be specifically designed to encourage users to click on consent and must not prevent them from rejecting the controversial browser files.

  • @[email protected]
    link
    fedilink
    English
    1722 months ago

    We and our 908 partners store and access personal data, like browsing data or unique identifiers, on your device.

    Absolutely, we need a Reject All button!

    • @[email protected]
      link
      fedilink
      English
      60
      edit-2
      2 months ago

      And it should include this mysterious ‘legitimate interest’, or whatever it is called - always on by default in ‘my choices’, even though no one seems to be able to explain what this means. How can I make an informed consent on something that vague?

      On the other hand, not ‘Reject All’, but ‘Reject All except functionally necessary’ (which should be precisely regulated by the law), otherwise there will be no cookie to remember our ‘reject all’ choice, which I am sure the corpos would happily use do discourage us from clicking that.

      • @[email protected]
        link
        fedilink
        English
        222 months ago

        That shit makes me so mad. What the fuck is legitimate interest if not the cookies which are set anyway to make the site function It’s just purposefully misleading.

        • @[email protected]
          link
          fedilink
          English
          12 months ago

          It’s basicallly just a label they beed to slap to suddenly be avle to circumvent some forms of non-consent. There’s also overriding legitimate interest (just as vague btw so it covers everything).

          In other words, legitimate interest is a form of rape (what with the circumcenting consent and all)

      • @[email protected]
        link
        fedilink
        English
        192 months ago

        I’m sure “functionally necessary” already means we share your data with everyone because we setup a system where the local page state is managed by third parties that we are selling your data to.

      • lime!
        link
        fedilink
        English
        92 months ago

        the “functionally necessary” cookies, which are served by the site itself (e.g. not a third party), do not require a banner at all. if you have no third party cookies, you can do entirely without it.

      • @[email protected]
        link
        fedilink
        English
        182 months ago

        Rejecting cookies without asking every time requires a cookie and that is clearly legitimate interest. The problem with legitimate interest is that it’s not well defined enough and then you have companies claiming that Adsense personalization is an absolute necessity for their website.

        • @[email protected]
          link
          fedilink
          English
          12 months ago

          But that would be cookie for the website I am visiting, not for a dozen of ‘partners’. And these are the ‘legitimate interest’ on-by-default switches I am talking about.

      • @[email protected]
        link
        fedilink
        English
        22 months ago

        Okay, so I’m going to copy-paste an answer I got from someone I know who works in a legal department:

        Basically, Legitimate Interest lets them track you as if you clicked Accept All, then subsequently they can decide if they think you would benefit from the tracking by their own metrics, which includes things like targeted advertisting which, of course, they do. So “Legitimite Interest” really means “Reject, But Actually Accept”.

    • @[email protected]
      link
      fedilink
      English
      122 months ago

      I have also seen on some websites that you have to pay them through subscription if you want to reject all cookies

    • Leon
      link
      fedilink
      English
      32 months ago

      Have to individually reject each and every fucking “partner.”