_o_

Or credit card details ;)

I think that the basic issue here regarding privacy is that only the ones breaking it are writting. There are literally millions that wont give upvote but want it.

Google and Facebook already launched their lobbyists there and are trying to undermine it, I wonder what they will do to Japan.

Silhuette, I am sorry, I have tryed to help you, thank others, maybe you/others will believe a lawyers in following months, but they wont be free. (And special thanks to HN, preventing me to answer with its policy of "answering too fast", I had an explanation for you, but I was unable to answer)

To the morons (no, it is not insult, it is empirical fact) downvoting me, it is not me, it is GDPR, face the reality, it is not my fault that you are too reluctant to understand it and biting people trying to help you out wont help. Downvoting me wont change GDPR or change anything, you will just loose a valuable source of information as you did just now. Go to the first psychiatrist and it will tell you that a reality will be as it is even if you close your eyes (or shoot the messenger =/).

Don't forget to upvote me, when you figure out I was right and you get a warning/fine.

That is exactly I was afraid of, google will have hard time defending this.

Check my post below, I would be glad if you have some idea, but as far as I am concerned, anonymising IP to keep getting uniform result is tehnically impossible.

Yes, you are right, the opt-out is violating GDPR (unless it is about changing mind after giving opt-in - this is again required and must be as easy as giving consent), you have to be preticked to "not giving consent" and user must actively click to give consent. Also you are missing explanation what giving consent means for the user including what data are used for what purpose.

Watch out with GDPR, this is not cookie law, and on top of it, you can't force it for user as a condition for entering site (like Forbes is doing - they will get a complain, already beeing finalized by some privacy organisation)

May I ask how GA anonymizes ip address? What algorythm do they have in place as doing sha-x over 4 numbers (0-255 with skipping some) separates by dots is reversable in seconds on average pc and I wouldn't call it anonymization, rather obfuscation.

I am asking this as a friend of mine is having hard time accomplishing exactly that and is really a hard nut to crack, anonymization is by default irreversable and making such algorythm for 4 numbers (actually even less due to known ip address ranges for EU users + reserved ranges) is not simple. You can seed it but that key must remain unknown to google, while this is again getting very hard with javascript. The only way I see is sending all the data to local proxy script, anonymizing the data on your side and then sending it to GA.

I thing that if GA is doing just some hashing, this opens all the sites, using it, to a GDPR responsibility as data controllers including HN. And this can't be hidden under capet (imho) as a "I can't offer service without it" (legitimate interest).

In victorian era, asbestos was used as a gods gift. Like plastic today, blooming bussiness. When they figured out that it hurts people, they forbid it. And? What's your point? Business will transform and something else will bring money. This was happening trough whole human history, nothing special.

And anyway, the marketing business was already going down, ads became so invasive and annoying that everyone is using ads filters today.

But I don't know why are we talking only about ads. What about people getting some bad credit rates as bank bought the data from ads network? Or things like Cambridge Analytica. Like the marketing and ads world is everything we know of and GDPR isn't bringing any positive effects as it hurts tracking. Tracking market goes down, human freedom and rights + democracy goes up. Who cares for targeted marketing in respect to that.

That is actually an excelent question!

The high quality news will be gladly paid for, while there will be far less clickbait sites as the ads revenues will drop. We will have less garbage on the internet and this is actually great, on the other side, the real journalism (not news like how to enlarge your penis) will hopefully come back into spotlite.

But there is not going to be a pulic outcry, I was asking people around, also those that were using the "I have nothing to hide" phrase in past and they are all satisfied with the GDPR. People want this, also in US, but there it will take some time to adopt some law like GDPR as US goverment is working in interest of industry, not people.