Site Stuff • KVR cookie consent form not GDPR-compliant

The cookie consent form on KVR is not GDPR-compliant. The GDPR makes it clear that rejecting cookies must be as easy as accepting them. Article 7 of the GDPR states: "Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent." YouTube was recently forced changed its cookie consent form (which was missing the "Reject All" option too) after being reported to the watchdog and being fined for its practices. You probably don't want this to happen to KVR.

The initial popup currently only offers two options: "Manage options" and "Consent". You need to add a third option "Reject all". The same applies to the window displayed upon clicking "Manage Options". As you are not allowed to make rejecting cookies harder than accepting them, the current layout when you click on "Manage Options" fails to meet these requirements too. Accepting cookies is a single click. Rejecting all cookies requires multiple clicks and scrolling, with each individual category needing to be turned off individually. This makes accepting significantly easier than rejecting cookies. This is exactly the sort of behaviour that GDPR explicitly forbids and was introduced to prevent.

Here's the To-Do:

• Add a Reject All button to the initial popup
• Add a Reject All button to the windows displayed after clicking "Manage Options"

Statistics: Posted by sjm — Thu Mar 07, 2024 3:47 pm — Replies 1 — Views 57

---