4 ms·

If you haven't already, you might enjoy reading the EU's forthcoming GDPR regulations [1] they cover all of this and much, much more including things like: - d

If you haven't already, you might enjoy reading the EU's forthcoming GDPR regulations [1] they cover all of this and much, much more including things like: - data should be exportable in digital formats - you can request what information a company has about you regardless if you're a full "user/customer" (think of things like how FB tracks anyone who visits a webpage with a Like button). - you have the right to request a manual review of computer made decisions (ex: a credit approval) - right to have your data corrected/fixed if it's listed incorrectly - right to escalate to each country's "supervisory authority" (this is the agency within each country that handles things) - serious fines in case of non compliance (% of revenue, not a flat amount) 1 - https://blog.varonis.com/gdpr-requirements-list-in-plain-english https://blog.varonis.com/gdpr-requirements-list-in-plain-eng...

evrydayhustling 9y ago
Agree about the overlap, but want to call to attention OP's requirement that I don't believe is part of GDPR: > Targeted ads are required to include both a declaration that they are targeted to a user and what criteria were used to select the user. This makes a massive difference! GDPR currently revolves around informed users making a request. OP's requirement would force companies to educate users about their methods. I see an analogy to the health warnings on tobacco ads. Incidentally, as someone who thinks targeted ads can be beneficial, I think this would help me interpret and engage with "sincere" targeting.
- michaelbuckbee 9y ago
  This is a part of the GDPR - the language is so generic that I think much of this will come out in future court cases, but check out Article 21 and 22 of the GDPR which I think addresses this (but IANAL) https://blog.varonis.com/gdpr-requirements-list-in-plain-english/#article21 https://blog.varonis.com/gdpr-requirements-list-in-plain-eng... People can object to be profiled and can ask a person for help like: "Why am I seeing this? Please stop"
  - evrydayhustling 9y ago
    Belated thanks for the really useful link! I hadn't looked into these opt-out/review requirements before. But, FWIW, I still think there's an important difference between a user-driven opt-out (which I also don't read as a guarantee of explanation) and proactive publication of the personalization criteria. It's still possible for an uninformed individual to never even realize content is being personalized for them, much less pass the threshold of asking how.
sethammons 9y ago
I was unaware of the percent of revenue fine. What happens to a company with negative revenue? Seems like Hollywood Accounting could be pervasive here.
- tpxl 9y ago
  Revenue, not profit. Revenue cannot be negative.
  - SomeHacker44 9y ago
    Nitpick: Sure it can, but it's a corner case. You can recognize revenue one quarter, and have to issue a refund to a client another quarter. If that was your only revenue, you have negative revenue for the second quarter. :)
  - sethammons 9y ago
    Gross vs net

evrydayhustling 9y ago

Agree about the overlap, but want to call to attention OP's requirement that I don't believe is part of GDPR: > Targeted ads are required to include both a declaration that they are targeted to a user and what criteria were used to select the user. This makes a massive difference! GDPR currently revolves around informed users making a request. OP's requirement would force companies to educate users about their methods. I see an analogy to the health warnings on tobacco ads. Incidentally, as someone who thinks targeted ads can be beneficial, I think this would help me interpret and engage with "sincere" targeting.

michaelbuckbee 9y ago
This is a part of the GDPR - the language is so generic that I think much of this will come out in future court cases, but check out Article 21 and 22 of the GDPR which I think addresses this (but IANAL) https://blog.varonis.com/gdpr-requirements-list-in-plain-english/#article21 https://blog.varonis.com/gdpr-requirements-list-in-plain-eng... People can object to be profiled and can ask a person for help like: "Why am I seeing this? Please stop"
- evrydayhustling 9y ago
  Belated thanks for the really useful link! I hadn't looked into these opt-out/review requirements before. But, FWIW, I still think there's an important difference between a user-driven opt-out (which I also don't read as a guarantee of explanation) and proactive publication of the personalization criteria. It's still possible for an uninformed individual to never even realize content is being personalized for them, much less pass the threshold of asking how.

sethammons 9y ago

I was unaware of the percent of revenue fine. What happens to a company with negative revenue? Seems like Hollywood Accounting could be pervasive here.

tpxl 9y ago
Revenue, not profit. Revenue cannot be negative.
- SomeHacker44 9y ago
  Nitpick: Sure it can, but it's a corner case. You can recognize revenue one quarter, and have to issue a refund to a client another quarter. If that was your only revenue, you have negative revenue for the second quarter. :)
- sethammons 9y ago
  Gross vs net