Is DCUM compliant with European GDPR data privacy?

[Anonymous]

Hi Jeff, can you please advise whether the site is compliant with the EU’s strict GDPR data privacy rules? Just curious since I travel there frequently and enjoy using DCUM while abroad. Thank you.

[jsteele]

No. Because we don’t ask for consent.

[Anonymous]

jsteele wrote:No. Because we don’t ask for consent.

Thanks Jeff, but GDPR is broader than that. For example, if you store certain data for users accessing the site from the EU (for example, certain tracking/blocking activities) it must be disclosed, etc.

[jsteele]

https://www.dcurbanmom.com/privacy

Also, I don’t give a shit about European users. We are a local Metropolitan DC site. If Europeans want to use this site, they can comply with us, not the other way around.

[Anonymous]

jsteele wrote:https://www.dcurbanmom.com/privacy

Also, I don’t give a shit about European users. We are a local Metropolitan DC site. If Europeans want to use this site, they can comply with us, not the other way around.

Well, if that’s your “final answer,” then … OK, I guess …

But it’s really not that simple.

I won’t lecture you on these issues, but I will say that it is an important issue, not only in the EU, but in many other countries too.

[jsteele]

Anonymous wrote:

jsteele wrote:https://www.dcurbanmom.com/privacy

Also, I don’t give a shit about European users. We are a local Metropolitan DC site. If Europeans want to use this site, they can comply with us, not the other way around.

Well, if that’s your “final answer,” then … OK, I guess …

But it’s really not that simple.

I won’t lecture you on these issues, but I will say that it is an important issue, not only in the EU, but in many other countries too.

Nobody enjoys clicking those stupid "Accept All Cookies" alerts every time they go to a website. I am not going to subject my users to a law that was created in other countries. But, if you feel we are not protecting your privacy, feel free to avoid the site.

[Anonymous]

jsteele wrote:

Anonymous wrote:

jsteele wrote:https://www.dcurbanmom.com/privacy

Also, I don’t give a shit about European users. We are a local Metropolitan DC site. If Europeans want to use this site, they can comply with us, not the other way around.

Well, if that’s your “final answer,” then … OK, I guess …

But it’s really not that simple.

I won’t lecture you on these issues, but I will say that it is an important issue, not only in the EU, but in many other countries too.

Nobody enjoys clicking those stupid "Accept All Cookies" alerts every time they go to a website. I am not going to subject my users to a law that was created in other countries. But, if you feel we are not protecting your privacy, feel free to avoid the site.

Wow, good to know. But again, that’s not how it works.

[Anonymous]

PS, for those who don’t know what GDPR is, here’s some background:

https://www.google.com/amp/s/www.forbes.com/sites/forbestechcouncil/2018/03/27/u-s-businesses-cant-hide-from-gdpr/amp/

[jsteele]

Because this appears to be a particular bug in your bonnet, I'll give you a perspective that you have probably not considered since you don't actually own and operate a website. When you visit most websites these days, you will be asked to accept some or all cookies. Most of you will simply view this as a rather minor annoyance. While some sites allow you to decline all cookies, most require you to either accept all or at least some cookies. If you agree to accept some or all cookies, a "consent" cookie will be created for you. That cookie will be passed to the advertising networks that are configured on the site. That consent cookie, in turn, will allow identity cookies to be provided to the advertisers. This allows them to better track and create customized ads for you. In many cases, this actually results in a better advertising experience, but it sacrifices some privacy.

Because we do not ask for consent, we cannot pass a consent cookie. Hence, all users are treated as if they declined all cookies. This means that advertisers have more difficulty tracking you.

Because advertisers will pay more to provide ads to users they can track, we receive less ad revenue due to our choice not to ask for consent.

So, in sum, we avoid forcing you to click a "accept or decline cookies" request, arguably protect your privacy more, and sacrifice revenue as a result.

[Anonymous]

jsteele wrote:Because this appears to be a particular bug in your bonnet, I'll give you a perspective that you have probably not considered since you don't actually own and operate a website. When you visit most websites these days, you will be asked to accept some or all cookies. Most of you will simply view this as a rather minor annoyance. While some sites allow you to decline all cookies, most require you to either accept all or at least some cookies. If you agree to accept some or all cookies, a "consent" cookie will be created for you. That cookie will be passed to the advertising networks that are configured on the site. That consent cookie, in turn, will allow identity cookies to be provided to the advertisers. This allows them to better track and create customized ads for you. In many cases, this actually results in a better advertising experience, but it sacrifices some privacy.

Because we do not ask for consent, we cannot pass a consent cookie. Hence, all users are treated as if they declined all cookies. This means that advertisers have more difficulty tracking you.

Because advertisers will pay more to provide ads to users they can track, we receive less ad revenue due to our choice not to ask for consent.

So, in sum, we avoid forcing you to click a "accept or decline cookies" request, arguably protect your privacy more, and sacrifice revenue as a result.

Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

[Anonymous]

Seeing as this forum is specifically intended for a US-based city and conducts no business in the EU, it seems a stretch to imagine that it would be targeted for GDPR enforcement.

[jsteele]

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

[Anonymous]

Anonymous wrote:

jsteele wrote:Because this appears to be a particular bug in your bonnet, I'll give you a perspective that you have probably not considered since you don't actually own and operate a website. When you visit most websites these days, you will be asked to accept some or all cookies. Most of you will simply view this as a rather minor annoyance. While some sites allow you to decline all cookies, most require you to either accept all or at least some cookies. If you agree to accept some or all cookies, a "consent" cookie will be created for you. That cookie will be passed to the advertising networks that are configured on the site. That consent cookie, in turn, will allow identity cookies to be provided to the advertisers. This allows them to better track and create customized ads for you. In many cases, this actually results in a better advertising experience, but it sacrifices some privacy.

Because we do not ask for consent, we cannot pass a consent cookie. Hence, all users are treated as if they declined all cookies. This means that advertisers have more difficulty tracking you.

Because advertisers will pay more to provide ads to users they can track, we receive less ad revenue due to our choice not to ask for consent.

So, in sum, we avoid forcing you to click a "accept or decline cookies" request, arguably protect your privacy more, and sacrifice revenue as a result.

Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

So what would eu authoritiesndo about it? Try to shut Jeff down? Seems absurd.

[Anonymous]

Does this mean that If I am in Europe, I am unable to access DCUM?

[Anonymous]

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.