At this time, it is highly unlikely that this theme component will be enough to comply with GDPR regulations. This is particularly the case if you are using services that introduce 3rd-party cookies. It is highly recommended that you talk to your lawyer and figure out your individual needs
Apparently, it’s mandatory in the EU now that websites have an advanced cookie consent banner, i.e. with the options for the user to choose exactly which cookies are set. Shouldn’t this be part of Discourse core and support all the Discourse supported tools like Google Analytics etc. in order to make a standard installation in the EU legal from scratch?
There is now a ruling by the highest German court that users must give active consent to cookies, and I see more and more pages within the EU that have this functionality. Any chance that this component supports this as well any time soon? Or do you know of any third party services that work well with Discourse? Thanks!
The question is for more specific management. it seems that not only you need to allow to “select” which ones to use but also you need to ask first and then deploy. For example this topic that is also linked in the first post:
The main worry comes from the fact that third-party “cookie managers” can not only “fail” to do the trick for Discourse but also hinger it in some fashion. Hence my question. The Amazon fine stands as proof that this ain’t something to brush off lightly.