Are websites required to make their cookie/privacy notice a full screen pop-up overlay?

[SS4]

The tiny amount of websites that it is, you usually have to give express permission anyway (thinking PayPal being able to read data from ebay)

It's also worth remembering that we only see these because the EU thought it would be a good idea.
I don't think I visit a website where I don't see these, thus making them quite useless and annoying.

Don't forget that paypal is owned by ebay so the likelihood is that they don't need to ask if my understanding is correct.

Remember that the EU only stated what the law should be - not how companies and owners were to implement it.

If I understand correctly you could, for example, turn off all tracking on your site and be compliant without having to show a warning. I'm firmly of the opinion that the hosts are trying to make it as awkward as possible in order for users to direct their anger to the EU instead of themselves for gifting and selling your data.

 

[najaB]

I'm firmly of the opinion that the hosts are trying to make it as awkward as possible in order for users to direct their anger to the EU instead of themselves for gifting and selling your data.

I also think they're making things as difficult as possible, but ire towards the EU is a secondary benefit. The main thing they are hoping for is that people click the big "OK" button because it's too hard to opt out. That way it's business as usual where data sharing is concerned.

 

[Peter Mugridge]

Don't forget that paypal is owned by ebay so the likelihood is that they don't need to ask if my understanding is correct.

I thought PayPal has not been part of, or owned by, e-Bay for about 3 or 4 years now?

 

[Crossover]

Given that most websites ask similar questions, can there not be a preferences section for one's browser where you set up default choices?

No, that wouldn't work - each site needs to ask you individually. Plus, if your default position was to opt out of tracking cookies/data sharing/etc. how would you then say that it's okay for the sites that you do want to allow?

Am I right in thinking some of this 'nonsense' came about from the GDPR legislation?

 

[najaB]

Am I right in thinking some of this 'nonsense' came about from the GDPR legislation?

Yes and no. GDPR meant that websites could no longer work on a presumed consent model and as a result have to give visitors a way to opt in/out of data sharing. However, GDPR doesn't specify *how* it has to be done.

Some implementations are better than others.

As an aside, existing data protection guidance meant that they should have been doing it already, but somehow a potential fine of €20M has a way of focusing the mind in a way that a £50K one doesn't.