Mike O'Neill

What would it take to re-invigorate CSP Cookie Controls? Given the current visibility of online privacy this might be a good time to revisit it.

If there are normalised request IDs then there would have to be standardsed text, especially if automatic acceptances can be sent. I suppose the `vital` category could just refer to...

Much user tracking is done with top level origins, and most will be in future as browsers restrict embedded cross-origin cookies. There are many techniques used for this e.g. link...

It is a very old data protection principal that if a service provider (as a controller) does not require user dentifying data, it should not require it to be collected....

Would this be covered by an option to include the names and purposes for storage items e.g. cookies, locaStorage items, indexedDB databases etc. , and whether these storage items are...

@coolharsh55 I was refering to the exemptions under the ePrivacy Directive, which in the online context take precidence over the rules about the processing of personal data. The only legal...

I meant that all cookies (and any other client-side storage) , whether containing personal data or not, is covered by ePrivacy. Of course GDPR also further describes what constitutes valid...

They would not have to place cookies even if the ADPC is not present (because ePrivacy)

Sorry, I was too terse. I meant the web server (or the browser context of the web server). Only cookies that are solely required for the underlying communications, or those...

I think the ID is a no-no because tracking, but the changed flag is a good idea. It could help limit the number of requests from servers and therefore reduce...