whatwg / meta

Discussions and issues without a logical home
Creative Commons Zero v1.0 Universal
93 stars 159 forks source link

Show GDPR popup #126

Closed bertyhell closed 4 years ago

bertyhell commented 5 years ago

Proposal for a similar API as the location API to show a popup to be compliant with the GDPR legislation in europe.

Problem

Currently every website implements their own popup to be GDPR compliant. This results in a poor user experience where the user has to dismiss multiple popups to be able to read the actual content of the webpage.

Examples: https://www.google.com/search?q=gdpr+popup&tbm=isch

Example library that generates these popups for you. (useful to see what options we could include in this API) https://cookie-script.com/

Solution

To improve this we could create an API in the browser that allows website developers to request a popup to be shown to the user. Similar to the location API popup.

image

In pseudo code this API would look something like this:

navigator.privacy.getCookieConcent({cookie: true, tracking: true}, allowHandler, denyHandler);

This would then show a dialog to the user: image

This would might make it possible to circumvent the GDPR popups for users that check the "use these settings for all sites" (not sure if this is legal though lawyer assistance needed )

This would also allow the browser to give more info about the website privacy settings: image

Discussion points:

annevk commented 5 years ago

This might be a good topic for https://discourse.wicg.io/.

bertyhell commented 5 years ago

This might be a good topic for https://discourse.wicg.io/.

I recreated the post: https://discourse.wicg.io/t/proposal-show-gdpr-popup/3433