It's important to note they aren't creating laws against infinite scrolling, but are ruling against addictive design and pointing to infinite scrolling as an example of it. The wording here is fascinating, mainly because they're effectively acting as arbiters of "vibes". They point to certain features they'd like them to change, but there is no specific ruling around what you can/can't do.
My initial reaction was that this was a terrible precedent, but after thinking on it more I asked myself, "well what specific laws would I write to combat addictive design?". Everything I thought of would have some way or workaround that could be found, and equally would have terrible consequences on situations where this is actually quite valuable. IE if you disallow infinite scrolling, what page sizes are allowed? Can I just have a page of 10,000 elements that lazy load?
Regardless of your take around whether this is EU overreach, I'm glad they're not implementing strict laws around what you can/can't do - there are valuable situations for these UI patterns, even if in combination they can create addictive experiences. Still, I do think that overregulation here will lead to services being fractured. I was writing about this earlier this morning (https://news.ycombinator.com/item?id=47005367), but the regulated friction of major platforms (ie discord w/ ID laws) is on a collision course with the ease of vibe coding up your own. When that happens, these comissions are going to need to think long and hard around having a few large companies to watch over is better than millions of small micro-niche ones.
Like most famous EU laws, this is not a law for people. Like the Banking regulations, the DMA, the GPDR, the AI act, this law cannot be used by individuals to achieve their rights against companies and certainly not against EU states, who have repeatedly shown willingness to use AI against individuals, including face recognition (which gets a lot of negative attention and strict rules in the AI act, and EU member states get to ignore both directly, and they get to allow companies to ignore the rules), violate GPDR against their own citizens (e.g. use medical data in divorce cases, or even tax debt collection, and they let private companies ignore the rules for government purposes (e.g. hospitals can be forced report if you paid for treatment rather than pay alimony, rather than pay your back taxes)). The first application of the GPDR was to remove links about Barrosso's personal history from Google.
These laws can only be used by the EU commission against specific companies. Here's how the process works: someone "files a complaint", which is an email to the EU commission (not a complaint in the legal sense, no involvement of prosecutors, or judges, or any part of the justice system of any member state at all). Then an EU commissioner starts a negotiation process and rules on the case, usually imposing billions of euros in fines or providing publicly-backed loans (in the case of banks). The vast, vast, vast majority of these complaints are ignored or "settled in love" (French legal term: the idea is that some commission bureaucrat contacts the company and "arranges things", never involving any kind of enforcement mechanism). Then they become chairman of Goldman Sachs (oops, that just happened once, giving Goldman Sachs it's first communist chairman, yes really. In case you're wondering: Barrosso), or join Uber's and Salesforce's executive teams, paid through Panama paper companies.
In other words: these laws are not at all about addictive design, and saving you from it, they're about going after specific companies for political means. Google, Facebook, Goldman Sachs, ...
Ironically the EU is doing exactly what Trump did with tariffs. It's just that Trump is using a sawed-off shotgun where the EU commission is using a scalpel.
Addictive designs and social media have changed a lot in the last 10 years, for one. But more importantly, there's no statute of limitation on making laws.
Of course the GDPR gives individuals rights, counter example:
> The first application of the GPDR was to remove links about Barrosso's personal history from Google.
In the UK at least, the GDPR was incorporated into UK law (where it remains, essentially unmodified, even after Brexit). So it is certainly not necessary to get the EU commission involved to enforce the law. In the UK, the ICO is the relevant regulator. There are other national regulators that enforce the GDPR, such as the French CNIL.
The EU realized they can extort the US big tech. The EU will now just focus on laws and taxing (the war in Ukraine isn't their problem). And frankly, we should just ignore EU laws in the US.
The amount of paid shills opposing this is a good indicator that it's the right move.
I'm not saying social media isn't cancerous and shouldn't be regulated, because it is and it should, I'm saying that in this specific case it's a symptom of a much bigger existing disease and not the root cause of it.
They use a two-round system to elect their President that works like this:
1. If a candidates gets more than 50% in the first round they are the winner, and there is no second round.
2. If there is no clear winner in the first round, the top two from the first round advance to the second round to determine the winner.
In that election there were 14 candidates. 6 from right-wing parties, 4 from left-wing parties, and 4 independents. The most anyone got in the first round was 22.94%, and the second most was 19.18%. Third was 19.15%. Fourth was 13.86%, then 8.79%.
With that many candidates, and with there being quite a lot of overlap in the positions of the candidates closer to the center, you can easily end up with the candidates that are more extreme finishing higher because they have fewer overlap on positions with the others, and so the voters that find those issues most important don't get split.
You can easily end up with two candidates in the runoff that a large majority disagree with on all major issues.
They really need to be using something like ranked choice.
Firstly, there's many forms of elections, each with their own pros and cons, but I don't think the voting method is the core problem here.
Let's assume Norway would have the exact same system and parties like Romania. Do you think Norwegians would have been swayed by a an online ad campaign to vote a Russian puppet off tiktok to the last round?
Maybe the education level, standard of living of the population and being a high trust society, is actually what filters malicious candidates, and not some magic election method.
Secondly, what if that faulty election system, is a actually a feature and not a bug, inserted since the formation of modern Romania after the 1989 revolution, when the people from the (former) commies and securitatea(intelligence services and secret police) now still running the country but under different org names and flags, had to patch up a new constitution virtually overnight, so they made sure to create a new one where they themselves and their parties have an easier time gaming the system in their favor to always end up on top in the new democratic system, but now that backdoor is being exploited by foreign actors.
Actually both can be true.
So blaming of tiktok is a convenient scapegoat for Romania's corrupt establishment to legitimize themselves and deflect their unpopularity as if it's caused by Russian interference and not their own actions. NO, Russian interference just weaponized the massive unpopularity they already had.
So here's a wild idea on how to protect your democracy: how about instead of banning social media, politicians actually get off their kiddie fiddling islands, stop stealing everything not nailed to the ground and do right by their people, so that the voters don't feel compelled to pour gasoline on their country and light it on fire out of spite just to watch the establishment burn with it.
Because when people are educated, healthy, financially well off and taken care of by their government who acts in their best interest, then no amount of foreign social media propaganda can convince people to throw that all away on a dime. But if your people are their wits end and want to see you guillotined, then that negative capital can and will be exploited by foreign adversaries. Like how come you don't see Swiss or Norwegians trying to vote Russian puppets off TikTok to power and it's not because they have more control on social media than Romania.
This isn't a Romanian problem BTW, many western countries see similar political disenfranchisement today, and why you see western leaders rushing to ban or seize control of social media and free speech, instead of actually fixing their countries according to the pains of the voters.
I wonder if we'll get speakeasies where people can get endogenous dopamine kicks from experiencing dark patterns?
Or you could just shut the phone off and/or not install the app. It's a simple solution, really, and one that is available at your disposal today at no cost.
We know plenty of things are quite bad for us, and yet we find them difficult to stop. Somewhat famously difficult to stop.
I think telling people, "just don't..." trivializes how difficult that is.
The amount of people in here right now clamoring for legislation to keep them away from electronics which they themselves purchased is mind-bogglingly insane.
The world is complicated. People's lives are complicated (and often meditated by their phones). People's emotional and social wellbeing is complicated, and simply ghosting all your social groups on a random Tuesday is likely to cause significant problems.
Dude, it's 2025.
A few years ago, I accidentally left my phone at home when I went to work, and when I arrived I found that because I no longer had my 2FA device, I couldn't do any work until I went home again and picked it up.
I'm fine without doomscrolling. I've gone from the minimum possible service with internet, to pure PAYG with no internet, and I'm fine with that. But society has moved on, and for a lot of people, phones are no longer an option.
And for a meaningful fraction of people, somehow, I don't get it either, TikTok is the news. Not metaphorically, it's actually where they get news from.
Actually, it's 2026 and has been for six weeks.
> A few years ago, I accidentally left my phone at home when I went to work, and when I arrived I found that because I no longer had my 2FA device, I couldn't do any work until I went home again and picked it up.
Sounds like a personal problem. There are many other 2FA authenticators available. Yubikey, TOTP tokens, smart cards, etc. Using a smartphone (which can lose power at any time) for critical authentication was a silly idea to begin with. I would refuse anything work-related on my personal phone.
D'oh. But fair.
> There are many other 2FA authenticators available.
Specified by job, so no choice in this matter.
> I would refuse anything work-related on my personal phone.
Quite reasonable as a general rule, though my then-employer only required the 2FA app and nothing else, and in this case it would've just meant "get an additional phone".
Laws are not created to be malleable about the population's trivial mental illnesses.
We don't need new laws on the books because some people are incapable of turning their phones off. They have addictive personalities and will fulfill this by other means, while everyone high-fives claiming success.
I'm proud of you that you are as disconnected as you are. I'm the same -- ditched my addictive social media accounts back in like 2011 -- but not everyone is like us.
Are you suggesting we should require prescriptions to purchase them?
We have been learning how to induce certain experiences, which correspond to certain substances, for a long time; we're getting more competent at it; this includes social media A/B testing itself to be so sticky that a lot of people find it hard to put down; this is bad, so something* is being done about it.
* The risk being "something should be done; this is something, therefore it should be done"
This learned (or lobbied) helplessness of never changing any laws and we are just stuck with this way of life is silly.
Though if it applies to the YouTube, seems annoying when trying to find a video to watch. I usually trigger a few infinite scrolling loads to look for videos.
And I assume they'd have to specify a maximum number of items per page, or else devs could just load a huge number of items up front which would technically not be infinite scrolling but enough content to keep someone occupied for a long time.
Whatever happened to freedom?
IMO it's a feature that's not valuable enough to justify the fact that it contributes to poor quality of life for people who can't put it down.
Because it is a dangerous addiction [1] with recognised adverse effects on human health. Like sugar, tobacco, or drugs.
You reduce sugar intake, not eliminate it.
You eliminate cocaine intake, not just reduce it.
Treating social media design as equal to something that can kill people in excess unnerves me.
As it should, because there's a really obvious "slippery slope" argument right there.
But… it can kill people.
There is a certain fraction of the population who, for whatever reason, can be manipulated, to the point of becoming killers or of causing injury to themselves. Social media… actually, worse than that, all A/B testing everywhere, can stumble upon this even when it isn't trying to (I would like to believe that OpenAI's experience with 4o-induced psychosis was unintentional).
When we know which tools can be used for manipulation, it's bad to keep allowing it to run unchecked. Unchecked, they are the tool of propagandists.
But… I see that slippery slope, I know that any government which successfully argues itself the power to regulate this, even for good, is one bad election away from a dictatorship that will abuse the same reasoning and powers to evil ends.
Why would you not be willing to include "scrolling" as another form of addiction? Just because it's labeled the same way you yourself are demonstrating that we handle that in different ways.
Social Media is being treated as "sugar" in this instance instead of as "cocaine".
(As I get older, unironically. I want my productive worker bees to be drug free, addiction free, enjoying simple pleasures that do not put me at risk. They pay Social Security. Everything is nice and safe. Freedom? Yeah no thanks, get to work and pay your taxes.)
You think that attacking these horrible companies is bad for our freedoms, we think our freedoms are fine with it.
Freedom from, or freedom to?
‘Freedom does not consist in doing what we want, but in overcoming what we have for an open future; the existence of others defines my situation and is the condition of my freedom. They oppress me if they take me to prison, but they are not oppressing me if they prevent me from taking my neighbour to prison.’ -- Simone de BeauvoirWhy would anyone publicly express any negative opinion about the effects of doomscrolling? I don't think I'm uncharitably paraphrasing, right?
Sarcasm now, but maybe what the near future will look like...
More to the point: this is indeed a massive overreach with the Commission being the police, judge, jury, and executioner... what could go wrong? Exactly what we are seeing is taking shape, precedent by precedent.
Turns out it was a big lie you've told yourself so you can let the rich and powerful get away with atrocities.
Hey, we all have free speech, it's just that I can buy a whole lot more of it than you can.
Disclaimer: I anal and this is not legal advice.
https://github.blog/news-insights/company-news/no-cookie-for...
Basically, the law created enough fear among the lawyers that software developers are being advised to include the cookie banner in cases where it isn't strictly needed.
You'd have much better retention rates if you don't cover up the content the viewer is trying to view.
How would you like it if I shoved a banner in your face the moment you walked into a store and forced you to punch a hole in it in order to view items on the shelves?
So uh, don't do that.
You don't need to notify if you use cookies for required functionality like login sessions or remembering a functional setting.
If you're tracking whether they're returning or not your activity is exactly the kind of behaviour the rule is covering because, in legal terms, it's skeezy as fuck.
Nobody wants to be the EU test case on precisely how "required functionality" is defined. Regardless of what the plaintext of the law says, it should be self-evident that companies will be more conservative than that, especially when the cost is as low as adding one cooke banner and tracking one preference.
I think in the past you still needed some info box in the corner with a link to the data policy. But I think that isn't needed anymore (to be clear not a consent dialog, a informational only thing). Also you can without additional consent store a same site/domain cookie remembering you dismissing or clicking on it and not showing it again (btw. same for opting out of being tracked).
But there are some old pre-GDPR laws in some countries (not EU wide AFIK) which do require actual cookie banners (in difference to GDPR consent dialogs or informational things). EU want them removed, but politic moves slow AF so not sure what the sate of this is.
So yes without checking if all the older misguided laws have been dismissed, you probably should have a small banner at the bottom telling people "we don't track you but for ... reasons .. [link] [ok]" even if you don't track people :(. But also if they haven't gotten dismissed they should be dismissed very soon.
Still such a banner is non obnoxious, little annoying (on PC, Tablet, a bit more annoying on Phone). And isn't that harass people to allow you to spy on them nonsense we have everywhere.
Having the EU decide on a technical implementation is more of a last ditch effort, like what happened with more than a decade of the EU telling the industry to get its shit together and unify under a common charging port.
1. GDPR consent dialogs are not cookie popups, most things you see are GDPR consent dialogs
2. GDPR consent dialogs are only required if you share data, i.e. spy on the user
3. GDPR had from the get to go a bunch of exceptions, e.g. you don't need permission to store a same site cookie indicating that you opted out of tracking _iff_ you don't use it for tracking. Same for a lot of other things where the data is needed for operation as long as the data is only used with that thing and not given away. (E.g. DDOS protection, bot detection, etc.)
4. You still had to inform the user but this doesn't need any user interacting, accepting anything nor does it need to be a popup blocking the view. A small information in the corner of the screen with a link to the data policy is good enough. But only if all what you do falls under 3. or non personal information. Furthermore I think they recently have updated it to not even require that, just having a privacy policy in a well know place is good enough but I have to double check. (And to be clear this is for data you don't need permission to collect, but like any data you collect it's strictly use case bound and you still have to list how its used, how long stored etc. even if you don't need permissions). Also to be clear if you accept the base premise of GDPR it's pretty intuitive to judge if it's an exception or not.
5. in some countries, there are highly misguided "cookie popup" laws predating GDPR (they are actually about cookies, not data collection in general). This are national laws and such the EU would prefer to have removed. Work on it is in process but takes way to long. I'm also not fully sure about the sate of that. So in that context, yes they should and want to kill "cookie popups". That just doesn't mean what most people think it does (as it has nothing to do with GDPR).
Sadly whenever this kind of discussion pops up it's usually a very unpopular take.
Genuinely curious about the actual data on this.
Does anyone have a link to a reputable, sizable study?
I'm curious how they plan to pretend to enforce this. Will you need a loisence to implement infinite scroll?
> We use cookies and other technologies to store and access personal data on your device
Evidently you don't value privacy.
Like, a significant fraction of the country level of usage. You don't need to worry about the EU coming and taking away your HN client APK. You do need to be worried about Google doing that, though.
Trackers have much more effective techniques than "cookies", kids trivially bypass verification, and designers will make a joke of tell me you have infinite scrolling without telling me you have infinite scrolling. When you are facing trillions of dollars of competition to your law, what do you think is going to happen?
Maybe if there was an independent commission that had the authority to rapidly investigate and punish (i.e. within weeks) big tech for attempting engagement engineering practices it might actually have some effect. But trying to mandate end user interfaces is wasting everyone's time putting lipstick on a pig.
All just to remove navigation clicks no one minded and reduce server loads, in exchange for users suffering laggy lazy loading (or, what a hate-inducing pattern!) inability to preload, print, search or link.
Feeds should be heavily regulated, effectively they are a (personalized!) broadcast, and maybe the same strictures should apply. Definitely they should be transparent (e.g. chronological from subscribed topics), and things like veering more extreme in order to drive engagement should be outlawed.
hopefully AI will wake them up and save us from all this nonsense
You can buy as much freedom as you want there.
This isn’t about addiction, it’s about censorship. If you limit the amount of time someone can spend getting information, and make it inconvenient with UI changes, it’s much harder to have embarrassing information spread to the masses.
Amazingly, the public will generally nod along anyway when they read governmental press releases and say “yes, yes, it’s for my safety.”
They talk about how great Europe is, how they like their 1-2 hour coffee/smoke breaks... These kind of moves give me that same vibe.
But why are so many Europeans trying to move to the US? Why isn't the opposite happening?
My hypothesis is that these kind of popular policies are short sighted. They are super popular, they use intuition and feeling. But maybe there is something missing. The unadulterated freedom has led people to enjoy these platforms. Obviously it affects the economy. So much so, even the US military has moved from Europe to Asia.
I don't typically like fiction, but it seems "I, Robot" was spot on about Europe. (Maybe mistaking new Africa for Asia)
Citation needed.
I took some minutes to try and find statistics, and also ChatGPT claims that the EU simply doesn't collect or publish that kind of data, so I'm wondering how you think you know.
All I see in my circle is people refusing to even go on vacation in the US, let alone move there.