3 ms·

This sounds like it would be a breach of the UK Data Protection Act http://www.legislation.gov.uk/ukpga/1998/29/contents http://www.legislation.gov.uk/ukpga/19

This sounds like it would be a breach of the UK Data Protection Act http://www.legislation.gov.uk/ukpga/1998/29/contents http://www.legislation.gov.uk/ukpga/1998/29/contents Information shared with third party without consent Providing personal details to a family member without consent Any organisation that stores and uses personal data relating to identifiable living individuals, either on a computer or in a paper filing system, is a "data controller" for the purposes of the DPA. Data controllers are obliged to handle personal data in accordance with the eight data-protection principles set out in schedule 1 to the DPA unless a specific exemption applies. The first principle is that data must be processed fairly and lawfully, which requires any processing (including disclosure) to be done either with the consent of the individual or in order to fulfil legal obligations such as contractual obligations. This disclosure would be a serious breach of privacy.

JdeBP 9y ago
Now see the Information Commissioner guidance for privacy policies that I hyperlinked at https://news.ycombinator.com/item?id=14370384 https://news.ycombinator.com/item?id=14370384 . Whilst most privacy policies do not say whom the data are shared with when it comes to enforcing terms and conditions and protecting the site/its users, the BBC's privacy policy here is. The UKICO guidelines point out that part of fairness is telling people whom data are going to be disclosed to; which the BBC is doing. If one has a gripe against that, then one has a gripe against everyone, from Reddit to Amazon. Because all of their privacy policies have clauses that say, in one form or another, that personal information is disclosed in order to enforce terms and conditions, and to protect the site/its users. Reddit's and several others' are elsewhere on this page. Here is Amazon's: > We release account and other personal information when we believe release is appropriate to comply with the law; enforce or apply our Conditions of Use and other agreements; or protect the rights, property or safety of Amazon.co.uk, our users or others. Ironically, the BBC is actually attempting to be the best of the bunch. Other people actually do not comply with the UKICO guidelines and make no mention of whom the data are disclosed to in such cases. They just make vague "we disclose data" statements.

JdeBP 9y ago

Now see the Information Commissioner guidance for privacy policies that I hyperlinked at https://news.ycombinator.com/item?id=14370384 https://news.ycombinator.com/item?id=14370384 . Whilst most privacy policies do not say whom the data are shared with when it comes to enforcing terms and conditions and protecting the site/its users, the BBC's privacy policy here is. The UKICO guidelines point out that part of fairness is telling people whom data are going to be disclosed to; which the BBC is doing. If one has a gripe against that, then one has a gripe against everyone, from Reddit to Amazon. Because all of their privacy policies have clauses that say, in one form or another, that personal information is disclosed in order to enforce terms and conditions, and to protect the site/its users. Reddit's and several others' are elsewhere on this page. Here is Amazon's: > We release account and other personal information when we believe release is appropriate to comply with the law; enforce or apply our Conditions of Use and other agreements; or protect the rights, property or safety of Amazon.co.uk, our users or others. Ironically, the BBC is actually attempting to be the best of the bunch. Other people actually do not comply with the UKICO guidelines and make no mention of whom the data are disclosed to in such cases. They just make vague "we disclose data" statements.