[bjarneh]

> (GDPR) is the best-known European standard. After all, it’s hard to miss the opportunity to reject cookies on European websites. But there’s far more to data security.

We should not be bragging about that "security", those cookie pop-ups are just a pointless annoyance. At least I guess we can all agree that there is far more to data security :-)

[palata]

GDPR goes further than the cookies, though.

[chgs]

Nor does it mandate those stupid cookie-cutter cookie boxes.

[bjarneh]

Yes, it has tons of regulation which at least from my experience is very difficult to implement. I used to work for a company that basically barely knew what info they stored about anyone; and they also had long relationships with tons of clients. It was virtually impossible to follow GDPR in that company, but for some reason they wanted to show everyone that they were "best in class", since they handled a lot of financial info etc. It basically just ended up with some fancy web-pages proclaiming that we were serious about GDPR, but nothing else materialized.

The cookie-banner just seems like a very strange "security" measure; but GDPR seems very strange as far as I can tell. It was sparked by the "forget me" campaign a few years ago I guess, and most people probably agree with the intent, but it has led to very strange set of rules.