3 ms·

Developers aren’t allowed to do anything with data that Facebook collects while you are not logged in. They never have. The information in those private posts

Developers aren’t allowed to do anything with data that Facebook collects while you are not logged in. They never have. The information in those private posts intended for a private audience is only relevant to people that have Facebook profiles and are either developers or have a Facebook account. Further, even if they did allow developers to use this data, it’s still a private discussion behind an authentication wall. I have seen it argued that taking such posts and publicly posting them is a violation of GDPR, and it may well be because of how broadly this law is written. Live by the sword, die by the sword. It isn’t OK to ask people to violate the GDPR just because it suits you in a given situation.

remram 9y ago
Maybe I'm confused, but how this announcement from Facebook contain personal data?
- downandout 9y ago
  It is a post that was directed to a private group - that group in this case is Facebook account holders. So by taking that information and posting it here, it may run afoul of the GDPR. I have seen arguments that even forwarding a group email to someone not on the original recipient list is a violation, so this wouldn’t be any different. It’s a communication that is behind an authentication wall for a reason.
  - M2Ys4U 9y ago
    Those arguments are wrong. The GDPR deals with processing[0] of personal data[1], not data about anything else any entity wants to remain somehow restricted. Other legal regimes may deal with disclosures of that kind, but not the GDPR. [0] ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; [1] ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

remram 9y ago

Maybe I'm confused, but how this announcement from Facebook contain personal data?

downandout 9y ago
It is a post that was directed to a private group - that group in this case is Facebook account holders. So by taking that information and posting it here, it may run afoul of the GDPR. I have seen arguments that even forwarding a group email to someone not on the original recipient list is a violation, so this wouldn’t be any different. It’s a communication that is behind an authentication wall for a reason.
- M2Ys4U 9y ago
  Those arguments are wrong. The GDPR deals with processing[0] of personal data[1], not data about anything else any entity wants to remain somehow restricted. Other legal regimes may deal with disclosures of that kind, but not the GDPR. [0] ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; [1] ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;