Does the GDPR define what the default behavior should be when the user refuses to specify? Does it vary by site? Is it like clicking either “Accept all” or “Reject all”?
Does the GDPR define what the default behavior should be when the user refuses to specify? Does it vary by site? Is it like clicking either “Accept all” or “Reject all”?
There is no reject all in GDPR, because functional cookies are still allowed. So the default behaviour is only functional cookies are allowed.
Edit: Companies have been fined for making cookie options too complicated, under GDPR all other cookies are opt-in. This is what a banner should look like:
So if I open the cookies settings and deselect all that can be deselected, is it the same as necessary cookies only?
Correct, if you want to live cookieless on the internet you have to disable them in browser. But as others have said, this will break the majority of websites.
Functional cookies can never be used for identifiable information, only to ensure the functionality of the website.
What functionality do they ensure? I understand web games and webapps, but like any website now has cookies
Any way i can report a website for violating this rule because I see it constantly everywhere and it seems to have no consequences.
GDPR infringements are categorized by severity and impact to its users, but also by the yearly turnover by said company. Meaning cookie banners by smaller companies are low priority.
You could try contacting the relevant Data Protection Authority from your country or the providers country.
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Good to know that’s the default. I do definitely see prompts that have “Reject all”, plus some banners that only have “Accept all” and “Cookie settings”, with “Reject all” or “Necessary cookies only” only visible in the cookie settings. Thanks.