The default in this module should be opt_in as this is what the modules is made for.

CommentFileSizeAuthor
#14 eu_cookie_compliance-change-default-consent-method-to-opt-in-2974224-13-8.x.patch1.03 KBsvenryen
#3 Issue-2974224-by-hass-Change-default-of-Consent-meth.patch1.46 KBhass
#2 Issue-2974224-by-hass-Change-default-of-Consent-meth.patch966 byteshass

Comments

hass created an issue. See original summary.

hass’s picture

hass commented
Status: Active » Needs review
StatusFileSize
new Issue-2974224-by-hass-Change-default-of-Consent-meth.patch966 bytes

D7 patch.

hass’s picture

hass commented
StatusFileSize
new Issue-2974224-by-hass-Change-default-of-Consent-meth.patch1.46 KB
jonnyeom’s picture

jonnyeom commented

Question guys,

Why should this default value be opt_in?
When would this default value be used?

Thanks,
Jonathan

svenryen’s picture

svenryen commented

Thanks, hass. This needs to be ported to D8.

@jonathan, this value is used to determine whether the module does "consent by default" (as is the recommended value pre-GDPR) or "consent only on affirmative action" (what it needs to be in order to comply with GDPR). It makes sense that the default is "opt_in".

jonnyeom’s picture

jonnyeom commented

Hmm,
So if GDPR requires "Consent only on affirmative action", wouldn't it makes sense to make the default be "opt_out" ?

svenryen’s picture

svenryen commented

@jonnyeom - "opt out" means that visitors will be tracked, presumably against their will, until they "opt out of tracking". The GDPR that comes into effect on May 25 demands that you should rather let the user "opt in" (that is NOT track them until they click a button to confirm they actually want to be tracked). Let me know if that was unclear :)

hass’s picture

hass commented

We should also change Consent Storage Method. As you know you need to safe the consent and prove someone has confirmed. Everything else is no longer allowed if I understood it correctly. Why should someone configure it than? :-)

svenryen’s picture

svenryen commented

@hass, I hesitate enabling consent storage by default. The storage method provided by the module is more a "proof of concept", and for busy sites it will be a bottle neck. Can we also handle that discussion in a separate issue?

hass’s picture

hass commented

Sure, let's move to another issue. I'm also concerned about possible database growth...

svenryen’s picture

svenryen commented

Definitely a full-fledged consent storage mechanism could have journaling and archival of past consents in text files, but it would be nice if those who need such a feature would gather some sponsorship from a client, and contribute their work back to the community as a patch or standalone module. This is why I made the consent storage a pluggable system.

The basic storage is good for a small blog (it's questionable though, why a blog would want - or need - to track users and handle private information), but definitely not a good choice for a busy newspaper or e-commerce site.

svenryen’s picture

svenryen commented
Version: 7.x-2.x-dev » 7.x-1.x-dev

Note that for now, we're not using 2.x. I'm changing the version to 1.x-dev. Feel free to revert if you object to this :)

  • svenryen committed f048077 on 7.x-1.x authored by hass 
    Issue #2974224 by hass: Change default of "Consent method" to "opt_in"
svenryen’s picture

svenryen commented
StatusFileSize
new eu_cookie_compliance-change-default-consent-method-to-opt-in-2974224-13-8.x.patch1.03 KB

Here's the similar patch for 8.x.

  • svenryen committed f2c90d9 on 8.x-1.x 
    Issue #2974224 by svenryen: Change default of "Consent method" to "...
svenryen’s picture

svenryen commented
Status: Needs review » Fixed

  • svenryen committed 884a355 on 7.x-2.x 
    Merge branch '7.x-1.x' into 7.x-2.x

* 7.x-1.x:
Issue #2975382 by...
  • svenryen committed f048077 on 7.x-2.x authored by hass
    Issue #2974224 by hass: Change default of "Consent method" to "opt_in"

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.