Havenât seen any posts about this and itâs a pretty big thing. From DMA website:
Examples of the âdoâsâ: gatekeepers will for example have to:
- allow third parties to inter-operate with the gatekeeperâs own services in certain specific situations;
- provide companies advertising on their platform with the tools and information necessary for advertisers and publishers to carry out their own independent verification of their advertisements hosted by the gatekeeper;
- allow their business users to promote their offer and conclude contracts with their customers outside the gatekeeperâs platform.
Example of the âdonâtsâ: gatekeepers will for example no longer:
- treat services and products offered by the gatekeeper itself more favourably in ranking than similar services or products offered by third parties on the gatekeeperâs platform;
- prevent users from un-installing any pre-installed software or app if they wish so;
- track end users outside of the gatekeepersâ core platform service for the purpose of targeted advertising, without effective consent having been granted.
Weâll see how this plays out but this is first move in a very long time that could open up platform like WhatsApp to 3rd party clients and force Google and Apple to open their mobile OSes to other apps. Maybe weâll see stock Android without play services? One can dreamâŚ
P.S. https://digital-markets-act-cases.ec.europa.eu - page about the legislation
Hopefully it works out better then the GDPR, which was good in theory, but created a whole set of new issues in practice.
GDPR is fantastic and a big win for the consumer. It was so successful in fact, that it started to spread and other countries created similar laws.
Itâs good, but that cookie banner is just bad⌠Though itâs not clear to me if itâs bad and not following the regulation or bad and following the regulation. Itâs definitely not following the spirit as so many of those cookie banners are deep messes of hierarchical settings which any sane person would not waste time onâŚ
Legal cookie banners need to make consent as easy as nonconsent.
So, if âAccept Allâ is a button, âDeny Allâ also needs to be a button.
Also, you cannot refuse service to someone who refuses Cookies, unless theyâre necessary to the functioning of the service.
Without these principles, it wouldnât be consent. You canât force someone to give consent.
You also do not need a Cookie banner, if:
- you donât track personal data. (GDPR literally does not apply.)
- you only track personal data obviously required for the provided service, like a login cookie or a shopping cart cookie. (Implied Consent)