Post #2005110
2026-04-26 16:57 UTC
@jamesthomson My understanding of GDPR is that they’re legally required to have the reject all button be top level and the same size as the accept all button. Unfortunately that’s enforced approximately never :/
Replies (3)
-
@jamesthomson@mastodon.social 2026-04-26 16:59
@avakining That sucks even more then, I didn't know it was a requirement.
-
@avakining@hachyderm.io 2026-04-26 16:59
@jamesthomson Source: > Make it as easy for users to withdraw their consent as it was for them to give their consent in the first place. https://gdpr.eu/cookies/
-
@digitalstefan@fosstodon.org 2026-04-26 18:09
@avakining @jamesthomson The ICO are not the most well funded org. I have been part of the process where they put a site under investigation (my understanding is they tend to pick on the top 1,000 most popular UK sites). They did not bring up the mismatch in size of accept versus reject buttons, but they were absolutely on the ball with checking what cookies / platforms were collecting data without proper consent.