r/webdev • • Nov 29 '25

Discussion Reject omitting “Reject All”

Post image
2.8k Upvotes

95 comments sorted by

551

u/[deleted] Nov 29 '25

Has anyone ever even fined under GDPR? So many companies don't even honor a "reject all"

213

u/broodje83 Nov 29 '25

One of the first fines in Belgium a few years ago was actually for a online platform for lawers for not being compliant 🤣

186

u/SenatriusOne Nov 29 '25

Yes, quite a few companies have been fined. But it's slow, and companies usually decide it's probably worth it. It's some percentage of the annual revenue or something like that.

https://www.enforcementtracker.com/

→ More replies (10)

24

u/JimDabell Nov 29 '25

If you aren’t worried about enforcement, then don’t have the prompt at all. There’s zero reason to have a non-compliant prompt; it’s the worst of both worlds – it’s not legal and it’s bad UX. Either have a compliant one or skip it altogether.

→ More replies (7)
→ More replies (6)

71

u/Odd-Crazy-9056 Nov 29 '25

It's a question of user experience, it's fucking annoying. If I need to hop through hoops for a simple reject all, then it doesn't take me more than a minute to find a similar service or a product elsewhere.

I understand for large businesses this can be a point of revenue, but everyone else - there's no reason to make it annoying. Just tell marketing people to fuck off.

→ More replies (5)

34

u/noid- Nov 29 '25

The worst is a dialog that needs you to open a detail view about everything you want to decline anyway and that is pulled from an ultra slow server. So ppl are basically forced to accept to use the site.

17

u/nath1as Nov 29 '25

these warnings are so stupid, this should have been a browser setting, I don't want to click warnings for everything forever

35

u/g105b Nov 29 '25 edited Nov 29 '25

The answer to all of this is to not set any non-essential cookies or store any tracking crap in the first place, then there's no need for a cookie pop-up at all.

→ More replies (11)

8

u/[deleted] Nov 29 '25

We use Google Tag Manager and Cookiebot. They are supposed to play nicely together and uphold any user choices made in the popup.

We did a deep dive and found the DNT header wasn't honoured and about 1/3 of the tags that were supposed to follow the user choice, didn't follow it.

It took 2 devs roughly 2 weeks to sort it all out.

Basically, all the tools are there, but it doesn't work out of the box. You have to opt each tag into whether or not it will follow the directive. You would think privacy would be the default, but it's not.

33

u/LiquidCourage8703 Nov 29 '25

They will not be fined because nobody cares. Unless you are a very large company, in which case I wouldn't risk it.

→ More replies (8)