Thread by @johnnyryan

The UK Government now points to @IABEurope's (the tracking industry body) “consent” spam pop-ups as an example why it needs to abandon the GDPR. We remind @OliverDowden @DCMS that those pop-ups are illegal under the GDPR. bbc.co.uk/news/technolog…

Back in 2017, a year before starting to spam Europe with consent popups, @IABEurope admitted that its tracking and adtech would be “incompatible with consent under GDPR” in a private note to the European Commission. I obtained that note under FOI.

https://twitter.com/johnnyryan/status/1164835435257847808?s=20

IAB "TCF" consent spam is compliance theatre.
(@mmatthiesen its primary designer says “the most seen — but least read — text on the Internet”)
The UK enforcer could have stepped in to stop this when the UK was in the EU.
It still can. I hope it will under @JCE_PC

Here is what the UK's own enforcer reported about this consent spam. Note the date. But has yet to take action. We remind @OliverDowden that this is a problem the UK can and could have addressed. Before or after Brexit. It has not done so.

https://twitter.com/johnnyryan/status/1163895721625608196?s=20

This is why we at @ICCLTweet, together with @Jausl00s @PiDewitte @bitsoffreedom @panoptykon @liguedh_be are pressing the Belgian enforcer @APD_GBA to apply the GDPR and end this consent spam.

https://twitter.com/johnnyryan/status/1317090823490723844?s=20

We also remind @VeraJourova and @Vestager of our concern about the granting of an adequacy decision to the UK. We are dismayed that the UK now points to consent spam, itself an infringement of the GDPR, as a device to discredit EU data protection law.

https://twitter.com/johnnyryan/status/1315551079317278720?s=20

We note from its own documents (that we obtained under FOI) that the UK’s enforcer (ICO) has devoted only 1% of its staff to tech investigation. We urge @OliverDowden to recognise the need to modernise the UK's enforcement agency.

https://twitter.com/johnnyryan/status/1315556269986635776?s=20

And to be clear, the UK's enforcer failed to protect vulnerable UK citizens by using the GDPR action against IAB consent spam even and data leaking on UK Council websites.

https://twitter.com/johnnyryan/status/1224644533545136129?s=19

For example

https://twitter.com/johnnyryan/status/1224681452761206784?s=19

My DMs are open to reporters.
Also talk to @PrivacyMatters @1Br0wn @RaviNa1k @jimkillock @mikarv

New UK position risks the UK-EU data deal. That deal is worth £85B per year to the UK economy, according to UK HMG papers.
This is 13% of the UK's global trade.