'Do Not Track' Is Back, and This Time It Might Work:
What do you call a privacy law that only works if users individually opt out of every site or app they want to stop sharing their data? A piece of paper.
Or you could call it the California Consumer Privacy Act. In theory, the law gives California residents the right to opt out of any business selling their data. In practice, it hasn't seen much use. Most people don't go to the trouble of opting out of every website, one at a time. One analysis, by DataGrail, a privacy compliance company, found that there were only 82 "do not sell" requests for every million consumer records over the first six months of the year. A study published last week by Consumer Reports helps explain why: Opting out of everything is a complicated pain in the ass.
Change could be coming, however. The CCPA includes a mechanism for solving the one-by-one problem. The regulations interpreting the law specify that businesses must respect a "global privacy control" sent by a browser or device. The idea is that instead of having to change privacy settings every time you visit a new site or use a new app, you could set your preference once, on your phone or in a browser extension, and be done with it.
Announcing Global Privacy Control in Privacy Badger:
Today, we're announcing that the upcoming release of Privacy Badger will support the Global Privacy Control, or GPC, by default.
GPC is a new specification that allows users to tell companies they'd like to opt out of having their data shared or sold. By default, Privacy Badger will send the GPC signal to every company you interact with alongside the Do Not Track (DNT) signal. Like DNT, GPC is transmitted through an HTTP header and a new Javascript property, so every server your browser talks to and every script it runs will know that you intend to opt out of having your data shared or sold. Compared with ad industry-supported opt-out mechanisms, GPC is simple, easy to deploy, and works well with existing privacy tools.
[...] The CCPA and other laws are not perfect, and many of our users continue to live in places without strong legal protections. That's why Privacy Badger continues to use both approaches to privacy. It asks websites to respect your privacy, using GPC as an official request under applicable laws and DNT to express what our users actually want (to opt out of all tracking). It then blocks known trackers, who refuse to comply with DNT, from loading at all.
Starting this release, Privacy Badger will begin setting the GPC signal by default. Users can opt out of sending this signal, along with DNT, in their Privacy Badger settings. In addition, users can disable Privacy Badger on individual first-party sites in order to stop sending the GPC signal to those sites.
(Score: 1, Insightful) by Anonymous Coward on Thursday October 08 2020, @06:24PM (1 child)
As long as you have no control over what a website will do with your petty "DNT" flag, then your "DNT" flag means nothing.
Would a law to prevent spam email prevent spam email?
Would a law to prevent telemarketers prevent telemarketers?
There is no one globally enforceable rule for the internet, and there's no shortage of bad actors ready, willing and able to break any tracking laws.
The only way to not be tracked is to give no track-able information. A "good" tracking law would force browser makers to include an option to scramble and fake all track-able information so it's random and unusable to those who might take it.
(Score: 2) by fakefuck39 on Thursday October 08 2020, @06:44PM
it's not designed to prevent shit - nice strawman. just like having a speed limit does not prevent you from going faster. what this does is give you the power to sue and shut down anyone breaking the law.