2, If I do not put a cookie consent form on my websites.
In your case, it's possible that, "eventually", Adsense bans you. I don't want to be worrisome, but when the cookie law came in the EU, some years ago, Adsense menaced to close the account of publishers who were not complying with it. I don't think it really happened. But there is still this possibility. If Adsense considers that a publisher's non compliance can cause them legal problems, they will not bother getting ride of him/her. (Which can also be an excuse to purge small publishers too).
Why don't the EU countries just block the display of the websites in their countries that do not comply with GDPR?
Because:
- it's hard or nearly impossible to automate the identification of a site which wouldn't comply with GDPR, and the EU will not check every single site in the World (which would mean checking every single page too),
- this would be huge censorship, and lead to all kind of polemics and problems.
- however, with the upcoming e-privacy regulation, (coming next after GDPR, and already more or less integrated to it), cookie things should be handled at the level of the browser, and no more at the level of the site's owner.
What do you guys suggest me as I have explained my situation? What should I do for now?
- Get a proper privacy policy page, if it's not yet the case,
- Disable personalized base ads for EU visitors, (the option should be available from your Adsense dashboard, starting tomorrow)
- Display a message on your page, which informs EU visitors that "non tracking cookie" are being used by Adsense. (Ideally, this message should also let them op-out from receiving this cookie, and in that case, you need to stop displaying Adsense ads to these visitors, but this might be "technical" to set up).
- An if possible move all your site over TLS, it's indirectly related to the GDPR in you case, but this is something which is becoming mandatory progressively, for all kind of other reasons.
