Fair enough

Doesn’t Article 10 Clause 2 go over this “legitimate interest” exception? I can’t say I’m an expert in LGPD.

It’s entirely possible that notification is only required in the EU, such is what I believe I’ve read in this thread.

They need to crack down on what businesses are claiming is a legitimate interest. If the user could disable it and have their product/experience largely unchanged, it really isn’t a legitimate interest.

Boost apparently had this already for Reddit.

The verbiage is boilerplate language from Google though, not anything Boost came up with. It’s like getting angry at a business for collecting 5% for a new tax. Their only part in the manner is being forced to do so if they want to run their business. The real person to blame is who made and voted for that tax.

They need to be harsher on companies invoking legitimate interest. It should be impossible for a user to use a service/product if they deny the information that falls under a legitimate interest – because by definition, the service/product needs that information to work. Like if I’m scheduling a delivery to my place, my address is a legitimate interest because they can’t deliver it otherwise.

There just needs to be a crackdown on what’s being claimed. If a user can turn off “legitimate interest” cookies and tracking, and they can still use the website just fine, those cookies and tracking were not legitimate interests.

Not really, it just brings the legal definition of “legitimate interest” into question. If you’re going to give full blown CPR and use a defib on someone, you need to strip them to their bare chest so the proper placement locations can be found. If a haunted house tells me they won’t touch me unless there’s a legitimate interest, and CPR is that legitimate interest, I have absolutely no qualms about it.

Thankfully, the EU provides a definition: https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/legal-grounds-processing-data/grounds-processing/what-does-grounds-legitimate-interest-mean_en#:~:text=Your company%2Forganisation has a,security of your IT systems.

Basically, if the personal information required is necessary for the business to actually do the service you’re asking them to do for you, it’s considered a legitimate interest. In your example, if you ask a store to let you know when there’s a sale for bras in your size, the store has a legitimate reason to know your bust size and associated measurements.

The scummy part is that the pop-up doesn’t clearly describe legitimate interests, but that’s not Boost’s fault here. It’s straight from Google.

I got to vote against that bastard the very first time I voted.