Email or username:

Password:

Forgot your password?
Neil Brown

I struggle with the notion that tech companies do not understand consent.

IMHO, they do understand consent.

They understand that seeking consent - freely-given, specific, informed consent - won't get them where they want to be.

To my mind, that's not a misunderstanding of consent, but a determination to avoid consent.

That's typically why one sees language of "choice" and "control" and "transparency" to describe an opt-out regime.

They're not confused. It's by design.

58 comments
CaveDave

@neil they have the whole "I'll steal a bike and pray for forgiveness later because that's the only way God will give me a bike" mentality

cuan_knaggs

@neil very much so. like the agree or agree later buttons. if they didn't have to perform consent theater, they really wouldn't

rellik moo

last boost chiefly for the phrase "consent theater"

Ben Thompson

@neil it's like the tech industry has reinvented feudalism.

Ben Thompson

@thin_line @neil It's not your property, it's mine. You only get to use it under licence. Any value not explicitly granted to you, is mine to do with as I wish. Complaints about consent? Go find yourself another lord.

Danil Suits

@jbenjamint @thin_line @neil

In other words "No, you may not ask - we didn't explicitly grant that value to you."

Robin Adams

@syntaxseed @jbenjamint @neil See also pluralistic.net/2023/07/24/ren

"capitalism has died – but it wasn't replaced by socialism. Rather, capitalism has given way to feudalism"

"for hundreds of years, European civilization was dominated by rents, not markets. A "rent" is income that you get from owning something that other people need to produce value."

"Capitalist philosophers railed against rent. The "free market" of Adam Smith wasn't a market that was free from regulation – it was a market free from rents."

"Today, we live in a rentier's paradise."

"Shopping at Amazon is like visiting a bustling city center full of stores – but each of those stores' owners has to pay the majority of every sale to a feudal landlord, Emperor Jeff Bezos, who also decides which goods they can sell and where they must appear on the shelves. Amazon is full of capitalists, but it is not a capitalist enterprise. It's a feudal one."

@syntaxseed @jbenjamint @neil See also pluralistic.net/2023/07/24/ren

"capitalism has died – but it wasn't replaced by socialism. Rather, capitalism has given way to feudalism"

"for hundreds of years, European civilization was dominated by rents, not markets. A "rent" is income that you get from owning something that other people need to produce value."

Ben Curthoys

@neil But I have a legitimate interest in making money out of your data in ways you would never consent to!

Ben Curthoys

@neil "Legitimate" in this context being used as a synonym for "profitable", of course.

Fragarach

@bencurthoys
@neil
I really don't understand that "legitimate interest" malarkey either.
If I haven't signed up for a contract, and I choose to refuse all but essential cookies, then any interest a company has in me is most assuredly not in my interests.
I looked up "legitimate interest" on the ICO website, and they seem to think it's OK, blissfully unaware that anything that can be abused, will be abused.
And, as my Grandad pointed out, Sorry doesn't get the cows milked.

Ben Curthoys

@Fragarach @neil "Legitimate Interest" isn't an intrinsically bad idea.

Remember first that the legislation is around "processing", not "sending you fucking marketing email specifically".

Suppose I run a business and you buy something from it. Later that year, I run an analysis on my database showing where my sales come from broken down by postcode, so that I know where to buy street display adverts.

Ben Curthoys

@Fragarach @neil Is your postcode your data? Yes.
Am I processing it? Yes, to find out where my customers are.
Have you consented specifically to that? No.
Is it necessary for the performance of the contact? No.
Do I have a legal obligation to do this analysis, am saving someone's life, or performing a public task? No.

Ben Curthoys

@Fragarach @neil Is this kind of data processing and analysis what the "legitimate interest" reason is for, rather using it as an excuse to send you marketing emails you don't want or to display you adverts on the internet for things you already bought? Yes.

It would be very hard to argue that I don't have a right to work out where my customers are from and to use that information to make decisions; I have a legitimate interest in it.

Ben Curthoys

@Fragarach @neil What the ICO needs to do it put on its big boy trousers and start handing out the biggest fines it is allowed - which are big - £17.5 million or 4% of global turnover, whichever is larger - until people stop abusing "Legitimate Interest" reason by processing data in ways people would not reasonably expect and would object to if they knew about.

Fragarach

@bencurthoys @neil
It's not hard at all. You have no right, none whatsoever. You have a right to work out where your customers are based, but you don't get to STEAL information from me in the pursuit of that.
Legitimate interest, my hairy fat arse. Fuck off.

Fragarach

@bencurthoys
@neil
As an analogy:
A supermarket where I used to shop asked for people's postcode at the checkout. The majority of people refused to supply it. Because it was, quite simply, None Of Their Fucking Business.
The interests of a company are totally and unequivocally subservient to the right to privacy of their customers.

⠠⠵ avuko

@neil for for-profits, consent, like value, is just something that detracts from, if not actually inhibits, maximising wealth extraction.

Can we all at least stop pretending for-profits have any other goal than profit?

Lars Marowsky-Brée 😷

@neil If they even give you an option to opt out, rather than "see less", "later", "maybe tomorrow".

Any person responsible for one of those flows is probably unsafe to date too.

Fragarach

@larsmb
@neil
Yeah. Like this Samsung phone I'm using. Do I want to get updates from the "Galaxy Store"? The only options are 'Yes" or "" Later". I don't get to choose "" No".

Ásthar (Elle/They) ⛤

@larsmb @neil Or "pay a subscription". There's a lot of cookie-walls/paywalls now.

badambassador

@neil the amount of times I've heard "but people will say no and then we won't have any data"

Yes, that's generally how it works. Why don't you use another lawful basis. Oh, you can't meet any of them? Maybe take the hint that you shouldn't be doing what you're doing then.

Henryk Plötz

@badambassador @neil Basically "Uber, but for X". Where "Uber" means "A revolutionary business model that is profitable exactly as long as neither wages nor taxes are paid".

Sebastian

@neil
"We take consent very seriously" is just the same thing as "We take your data privacy very seriously".

You know, in '45, the Allies took Hitler very seriously, too..

Persephone

@neil@mastodon.neilzone.co.uk honestly managers, designers, and engineers need to be asked the question "if you used your ui to ask for sex, would it stand up to a rape trial?"

"Can you say no?"
"Can you withdraw consent at any time?"
"Are there other consequences for saying no?"

INPC

@neil I listen to a lot of tech men on podcasts, in all honesty they live in such a different reality to me, they’re genuinely gassed about their own sense of right and what’s cool.

I don’t think they’ve ever met the likes of me or others at the end of their products.

That said, they have employees who have close encounters with reality. Would be great if they said ‘oi boss, that idea you just had is actually quite shit y’no, when you think about it for a minute”.

FJ!!

@mxtthxw @neil From repeated experience I can tell you one will be looking for a new job in no time, and the shit gets released anyway.

Eventually you want to pay the rent.

Gonzalo Nemmi :runbsd:

@neil that's one of the main reasons why, personally, I think some activities should not be legislated at all.

Some legal frameworks legitimize abuse from activities that would otherwise be frowned upon ... in the best case scenario ..

It gives "them" the legal framework upon which they can calculate how much would "this" interpretation cost us?

Whereas it leaves us out of the game, with no chance (or the slimmest possible chance) to stand for our rights.

Gonzalo Nemmi :runbsd:

@neil and of course they do understand consent .. and understand it perfectly well. That's why they have internal "and" external lawyers. They just don't care how far they can stretch the concept as long as they can still profit from it.

Corporations are not human beings, they lack human moral standards. They are there to make money, being that their reason to enter into existence, they are forced to do whatever they can to accomplish their only given goal. Profit.

Dr Tim Nicholls

@neil That's exactly my experience with many of the organisations I've been asked to assess/advise.

It's not confusion. It's wilful ignorance. I know of at least one big name consultancy with an entire department dedicated to providing specific guidance on how to subvert the legislation by carefully and deliberately misinterpreting the wording.

I do enjoy seeing that defence torn to shreds in my other role, sitting on a couple of penalty/enforcement advisory panels :-)

Gonzalo Nemmi :runbsd:

@woodpunk this 👆

I just wouldn't call it "wilful ignorance" .. I would say that's "utter disregard for the law"

@neil

John Breen

@neil To me, one powerful way to describe the situation is by imagining symmetry in the consent relationship between service providers and individuals.

We've all seen and clicked thru the "I accept the terms..." nag, and IANAL but apparently courts have found this to be acceptable and binding on individual users of software and services.

What if I could publish a "Terms of Engagement" on my "homepage", that binds anyone who allows me to use their service - and that these terms could change at any time at my sole discretion. And it's their responsibility to read it, and not my job to reconcile it with their own legalese.

If this symmetry existed, the discussion around "what is consent" would change drastically, I expect.

Imagine going to wordpress dot com or facebook dot com and being greeted with :
"Sorry, your Terms of Engagement disallows the use of your data for training of Generative AI technology, and we are unable or unwilling to disable it for your session. Access Denied"

@neil To me, one powerful way to describe the situation is by imagining symmetry in the consent relationship between service providers and individuals.

We've all seen and clicked thru the "I accept the terms..." nag, and IANAL but apparently courts have found this to be acceptable and binding on individual users of software and services.

David

@neil Imagine if a person used Big Tech-like tactics when engaging in sexual activity. Would excuses such as, “before our date she consented to my dating T&C—50 pages spread across multiple documents—which include authorization for sex with me and 300 other people who pay me to participate on my dates. I obtained her consent by showing her my phone with links to the full T&C docs and a big ‘I CONSENT’ button,” go over well?

Adam John

@neil superb summary of a perspective I wholly agree with in general. ty for sharing!

Mark Chick

@neil

Tech company: if we told you what we would like to do with your information, subject to your agreement, you would never agree. But of course ‘we value your privacy’.

Average Joe: you’re right. I would not agree.

Tech company: that’s why we aren’t asking you to agree. We get no value (= we don’t make money) from your privacy that way.

still can't work out who i am

@neil absolutely you can they're blatant law breaking in Europe with cookie permissions which they are now starting to fix and we're now getting the same being done again over AI data selling.
Sadly the fines are just not enough to stop them and who knows what will happen if the US becomes a fascist state as seems likely

Fiachra

@neil A lion might understand the inner world of a gazelle to some degree, but it's only interested in that insofar as it's relevant to hunting.

The Janx Devil

@neil Totally. They understand consent as a tax, to be avoided if possible and evaded if necessary.

';DROP TABLE foxes;--

@neil Exactly.

ISTR Facebook/Meta complaining about Apple's changes to ad tracking consent where FB's complaint almost literally said "it's not fair that we can't just have it be opt out, if people are specifically asked about it then they'll all say no"!

Christopher Wood

@neil Once on a call at my remote job I pointed out that the efforts to lure us back to offices had the same creepiness as the guy at the bar who says "Want to come back to my place? I have an eight-track".

I think you've just clarified the reaction I got.

Craig Nicol

@neil they take consent as seriously as Hollywood.

Swader

@neil There’s a reason that terms like “fail fast” and “better to ask forgiveness than permission“ are so popular.

Molytov

@neil Louis Rossmann calls it a "rapist's mentality"
They feel entitled to you, don't care about asking for consent, actively violate you for their benefit and blame and gaslight you for demanding basic respect and safety.

micha

@neil @aral i totally agree with the exception of "companies" or "big tech" .

This "problem" is more widespread, eg politics. It's driven by evil (think of dark patterns, willingly misunderstanding) and by stupid. Which one is worse or which one is more important to tackle i let others decide.

PhDog 🇮🇪

@neil

Almost no one doesn't understand consent.

John Mierau

@neil
As in 'The system isn't broke, it's working exaclty as it was designed'?

I would agree.

𝐑𝐞𝐛𝐞𝐜𝐜𝐚 𝐅𝐢𝐧𝐧 🏳️‍⚧️ 🇺🇦

@neil ah, yes... I hate the "maybe they don't understand" apologists!
Mostly because there's no way anyone could think they don't understand! (This applies for a plethora of other issues too).

Haelwenn /элвэн/ :triskell:
@neil I guess yeah they somewhat understand the idea of consent but I'd say the vast majority do not grok it and strongly do not want to.
smaller creature

@neil crashlytics which used to be under twitter's fabric (now under google's firebase) used to have a page in their docs telling you how to set up a dialog asking the user whether they want metric collection or not. there was a warning saying most users would choose no, so it is advised to not show the dialog at all.

Go Up