
Boosted by aral@mastodon.ar.al ("Aral Balkan"):
mkj@social.mkj.earth wrote:
@aral As for some of the points raised in the linked thread…
GDPR article 21 paragraph 5.
In any sane world, that would cover DNT and GPC. So *any* web site which explicitly asks for consent when the relevant request has either of those request headers set to indicate to not track is *already* in non-compliance.
Of course, like you point out, there would likely be nothing stopping a site from offering visitors the *option* to be tracked anyway.