> Could someone try standing with a sign saying "A reminder from me" in the google offices reception for 2 minutes and then walk out with whatever wasn't bolted down to see if they themselves consider that an adequate way to ask for consent?
That would be hilarious. But I think they know what they are doing (i.e. using dark patterns).
I've seen this banner, knew it was related to the RGPD but haven't figured out how to opt out and to not accept.
> haven't figured out how to opt out and to not accept
There doesn't seem to be an easy way. A lot of their proposed opt-outs rely on either disabling cookies browser-wide, installing an extension or creating/signing into an account and customizing your advertising preferences there (which means providing them even more info as part of the account creation and relying on their good faith to actually opt you out).
To the best of my knowledge none of these things are compliant with the GDPR:
* consent must be granular, so browser-wide cookie-blocking doesn't comply because disabling cookies entirely means you lose functionality (the GDPR mandates that you can opt-out of non-essential tracking but retain all other functionality)
* mandating that people register for an account might run afoul of the "data minimization" principle (among others), meaning that you must collect the minimum amount of data to fulfil the required purpose; asking people to register/sign into an account (thus providing even more information) just to opt-out of non-essential tracking seems non-compliant
* consent must be opt-in (seems like cookies were placed before the user explicitly agreed to it)
* it must be as easy to opt-out as it is to opt-in, yet in Google's case the opt-in is one-click away (though it doesn't matter since apparently they set cookies even before the user clicks that) but opt-out is way more involved (and relies on reconfiguring the browser)
"trackingEnabled: 0" does not require consent and lets you acknowledge
"consentId: abc134" then looking that up in or even "consentDenied: exact timestamp" could be used to identify a user so would require consent. I suspect lots of companies want to use the second so they can choose to bug you for [more] consent at a later date, or choose to interpret the first as not allowed in case bugging the user again enough times does get consent.
That would be hilarious. But I think they know what they are doing (i.e. using dark patterns).
I've seen this banner, knew it was related to the RGPD but haven't figured out how to opt out and to not accept.