GDPR Cookie Banners

Discussions correct misconceptions that EU GDPR requires cookie consent banners for all cookies, clarifying they are only needed for non-essential tracking and analytics, with sites blamed for unnecessary or malicious implementations.

📉 Falling 0.5x Legal
5,668
Comments
19
Years Active
5
Top Authors
#2608
Topic ID

Activity Over Time

2008
2
2009
16
2010
5
2011
85
2012
117
2013
84
2014
24
2015
102
2016
73
2017
124
2018
350
2019
298
2020
681
2021
622
2022
929
2023
675
2024
757
2025
674
2026
50

Keywords

e.g europa.eu OP AboveTheLaw CCPA MISSING PII EU GDPR gdpr.eu cookies cookie consent gdpr banner law tracking eu user necessary

Sample Comments

p_l Feb 10, 2022 View on HN

You know those "cookie banners" are illegal under GDPR too, and done specifically to annoy people into agreeing?

pjerem Jan 6, 2022 View on HN

No, these cookie laws are in fact really well implemented, they are just oversimplified in the press (such a coincidence). Cookies are not forbidden neither they require you to ask anything, as long as they are useful to the service you provide.That's why a lot of websites don't show those banners while however using cookies to store session tokens, user preferences...But, yes, when you are browsing content without being logged in or without having the need to store someth

Etheryte Sep 19, 2024 View on HN

Just so you know, despite what might've been best intentions, your cookie banner is not compliant with what the law in the EU says. Consent for tracking has to be free, in other words, even if a user doesn't consent, they still have to be able to use the site. You don't need consent for functional cookies and never have.

wsy Mar 13, 2019 View on HN

Cookies are allowed, tracking users without consent is now illegal in EU (regardless which technology is used).

littlecranky67 Mar 16, 2021 View on HN

They dont need consent for cookies. They need consent for tracking

dgroshev Jul 9, 2024 View on HN

Laws don't force the cookie banners, laws force requiring consent for personalised tracking. Banners as we know them are malicious compliance. There's a difference.

chmod775 Oct 23, 2021 View on HN

That cookie banner is mostly corporations trying to be sneaky and trying to trick people into giving consent, or just flat-out misunderstanding the regulation.You need no cookie banner if you only use cookies as required by the service you provide to the user.For instance if a user is trying to log in, you don't need to ask for permission to set a cookie for that. The consent is implicit.If you want to set tracking cookies on the other hand...

xdennis Mar 5, 2023 View on HN

It's not the EU's fault that you have to click cookie banners. Those banners are only required if a website plans to do malicious things with the cookies. If they're used to track who's logged in, they are not required.They are more akin to the "Do not eat" warnings on silica packs... except on the internet everyone swallows.

e2le Aug 3, 2022 View on HN

Only consent is needed for cookies that aren't strictly necessary.https://gdpr.eu/cookies/If a site is asking for consent, they're either idiots who don't understand what the law requires of them or they intend on tracking their users.

e2le Jul 21, 2022 View on HN

Only consent is needed for cookies that aren't strictly necessary.https://gdpr.eu/cookies/If a site is asking for consent, they're either idiots who don't understand what the law requires of them or they intend on tracking their users.