Does anyone know what the heck is going on with Tumblr's GDPR implementation? I get the "please accept being tracked or click here to change your settings" page. Then I opt-out of tracking (which is already against the GDPR, as you have to opt-in but whatever), save my options and get the same "accept being tracked" page with all my settings reset! I'm using stock chrome on stock android.
Tumblr’s parent (Oath, owned by Verizon) are basically using their power to attack the GDPR by putting up what is an unnecessary roadblock to people refusing to consent to their unnecessary tracking, in addition to dark patterns in actually disabling tracking.
A lot of sites seem to be doing this, and I don’t know if GDPR is really going to be well enforced. Has it just been too little time yet for us to know?
There's a lot of companies that are currently attempting to skirt the GDPR, and are more likely than not failing to meet its requirements. There is very little technical guidance from the regulators right now on what they require from a consent dialog (what UI patterns are allowable, what are not, etc), and businesses like Oath that make their living off collecting and processing user data without consent are not going to change their business model without a fight - which will be dragged through the courts over the next few years because of the power involved on both sides.