{"action":"created","issue":{"url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/issues/1","repository_url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide","labels_url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/issues/1/comments","events_url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/issues/1/events","html_url":"https://github.com/madebymutual/GDPR-ePR-Guide/issues/1","id":292140669,"number":1,"title":"Cookies with and without ePR","user":{"login":"andrewfairlie","id":1772888,"avatar_url":"https://avatars1.githubusercontent.com/u/1772888?v=4","gravatar_id":"","url":"https://api.github.com/users/andrewfairlie","html_url":"https://github.com/andrewfairlie","followers_url":"https://api.github.com/users/andrewfairlie/followers","following_url":"https://api.github.com/users/andrewfairlie/following{/other_user}","gists_url":"https://api.github.com/users/andrewfairlie/gists{/gist_id}","starred_url":"https://api.github.com/users/andrewfairlie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrewfairlie/subscriptions","organizations_url":"https://api.github.com/users/andrewfairlie/orgs","repos_url":"https://api.github.com/users/andrewfairlie/repos","events_url":"https://api.github.com/users/andrewfairlie/events{/privacy}","received_events_url":"https://api.github.com/users/andrewfairlie/received_events","type":"User","site_admin":false},"labels":[{"id":818366979,"url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/labels/help%20wanted","name":"help wanted","color":"008672","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-01-27T18:13:48Z","updated_at":"2018-02-19T17:42:33Z","closed_at":null,"author_association":"OWNER","body":"Cookie polices are really up in the air at the moment.\r\n\r\nGDPR wants opt-in for any data collection, and I think that they really want opt-in for different usage types. EG: Site cookies separate from analytics cookies.\r\n\r\nAnd then ePR is suggesting that the responsibility of cookie notices moves from site devs to the browser manufacturers.\r\n\r\nAnyone any clearer about a safe and legal way to comply with GDPR cookies if ePR isn't ready in time - or if they remove that section from ePR in the final version?"},"comment":{"url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/issues/comments/366761996","html_url":"https://github.com/madebymutual/GDPR-ePR-Guide/issues/1#issuecomment-366761996","issue_url":"https://api.github.com/repos/madebymutual/GDPR-ePR-Guide/issues/1","id":366761996,"user":{"login":"croxton","id":279127,"avatar_url":"https://avatars3.githubusercontent.com/u/279127?v=4","gravatar_id":"","url":"https://api.github.com/users/croxton","html_url":"https://github.com/croxton","followers_url":"https://api.github.com/users/croxton/followers","following_url":"https://api.github.com/users/croxton/following{/other_user}","gists_url":"https://api.github.com/users/croxton/gists{/gist_id}","starred_url":"https://api.github.com/users/croxton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/croxton/subscriptions","organizations_url":"https://api.github.com/users/croxton/orgs","repos_url":"https://api.github.com/users/croxton/repos","events_url":"https://api.github.com/users/croxton/events{/privacy}","received_events_url":"https://api.github.com/users/croxton/received_events","type":"User","site_admin":false},"created_at":"2018-02-19T17:42:33Z","updated_at":"2018-02-19T17:42:33Z","author_association":"NONE","body":"I don't think you'll get an 'official' answer since it's a matter of legal opinion and there is no practical guidance or case law to refer to. We work for a few well-known law firms who all use GA, and so far only one has decided that they _must_ use a cookie consent widget (Cookiebot, which was deemed to be GDPR compliant because it keeps a record of consents and allows consent to be withdrawn). If the lawyers aren't sure then I'm not sure how we devs can say definitively one way or another. Best to let your client make the decision I think."}}
{"actor":{"display_login":"croxton"}}