2 ms·

> I commit to not querying the data with the purpose of sending it to others. Nobody's arguing with that. The problem is that there was no commitment to avoid

• vidarh 9y ago
  The issue here, I think, is that you assume they have a blanket right to access the data. But EU regulations restrict not just transfers between companies, but set down principles for how personal data should be handled. And those include among others that data should be collected for specified purposes, and should only be used for the purposes the person consented to, unless you obtain additional consent. If I consent to sharing my data for use on site A, and site B buys site A, the fact that they are now owned by the same company is not necessarily relevant unless the permissions collected very explicitly allowed the data collected by site A to be used for purposes related to site B too. That the sites suddenly have the same corporate owner is no guarantee that the consent collected made it expressly clear to users of site A that they could expect that their data might be shared with site B in the future. Some sites do collect very broad consent and make very clear to their users that data may be transferred elsewhere, but even if they do this, they also do need to ensure the data is still treated in accordance with EU Data Protection regulations.