4 ms·

This 'Download Your Data' tool is highlighted every few years when ire toward facebook is renewed, but while appealing it's never seemed more than table scraps

This 'Download Your Data' tool is highlighted every few years when ire toward facebook is renewed, but while appealing it's never seemed more than table scraps to me looking at the data. Even without looking, the idea that a data broker would just willingly give us all the information it has is unbelievable. The scale is so large, how would you even know?

cromulen 8y ago
They don't have a choice under GDPR.
- 01001010 8y ago
  To what extent will GDPR require them to include the information they have to serve and target you ads? Does anyone even know yet?
  - r3bl 8y ago
    Not only will it require them to include the info they're using to target you with ads, but also their source for that info (if it wasn't submitted by the user itself), the existence of automated-decision making, and "meaningful information about the logic involved". https://gdpr-info.eu/art-15-gdpr/ https://gdpr-info.eu/art-15-gdpr/
- dvfjsdhgfv 8y ago
  That's yet to be seen. Can you imagine the ire when Europeans are able to download a rich set of information on how they're being tracked and so on, whereas Americans and the rest of the world has no access to that information? I can't. What is more probable is tha FB will try a legal trick claiming they are an American company and they follow the laws of California, not EU, even if they gladly accept European advertisers's money via Ireland.
  - JumpCrisscross 8y ago
    > What is more probable is tha FB will try a legal trick claiming they are an American company and they follow the laws of California, not EU This would be an enormously stupid move. It guarantees not only failure but an acidic backlash.
  - matlock 8y ago
    "What is more probable is tha FB will try a legal trick claiming they are an American company and they follow the laws of California, not EU, even if they gladly accept European advertisers's money via Ireland" That is specifically not possible under GDPR. It doesn't matter where your company sits, if you store data from europeans (or people living in europe) you have to follow the GDPR with potential for severe punishment. There really is no loophole afaik.
    - lamename 8y ago
      > ... if you store data from europeans (or people living in europe) you have to follow the GDPR ... Does that mean the company has to follow it even for non-European users?
      - hvidgaard 8y ago
        No. For all users within EU it must follow the GDPR. If you are a US citizen and access FB from EU, they must follow the GDPR, as far as I understand it. And being FB, they really do not have a choice, since the EU do have leverage over them because they're doing business here.
      - r3bl 8y ago
        I live in the EU. If I'm your "customer" (as in, you store my personally identifiable data), you have to comply with GDPR, regardless of where your company is. Hope that simplifies things.
        deleted 8y ago
        [deleted]
- Silhouette 8y ago
  They don't have a choice under existing data protection legislation in much of the EU either, but that doesn't appear to have stopped them.
- rrix2 8y ago
  GDPR's right to portability only extends to things you provide directly, or are collected on the basis of explicit consent, or wmthings which are required to fulfill a service or contract, like status and photos. There are explicit exclusions for a lot of things like things collected in service of antifraud & security efforts, and for things collected offline (IIRC), leaving a big set of holes that they can hide quite a bit. They're also not allowed to infringe on the data rights of other users which is why the friends list export is so anemic, for example.

cromulen 8y ago

They don't have a choice under GDPR.

01001010 8y ago
To what extent will GDPR require them to include the information they have to serve and target you ads? Does anyone even know yet?
- r3bl 8y ago
  Not only will it require them to include the info they're using to target you with ads, but also their source for that info (if it wasn't submitted by the user itself), the existence of automated-decision making, and "meaningful information about the logic involved". https://gdpr-info.eu/art-15-gdpr/ https://gdpr-info.eu/art-15-gdpr/
dvfjsdhgfv 8y ago
That's yet to be seen. Can you imagine the ire when Europeans are able to download a rich set of information on how they're being tracked and so on, whereas Americans and the rest of the world has no access to that information? I can't. What is more probable is tha FB will try a legal trick claiming they are an American company and they follow the laws of California, not EU, even if they gladly accept European advertisers's money via Ireland.
- JumpCrisscross 8y ago
  > What is more probable is tha FB will try a legal trick claiming they are an American company and they follow the laws of California, not EU This would be an enormously stupid move. It guarantees not only failure but an acidic backlash.
- matlock 8y ago
  "What is more probable is tha FB will try a legal trick claiming they are an American company and they follow the laws of California, not EU, even if they gladly accept European advertisers's money via Ireland" That is specifically not possible under GDPR. It doesn't matter where your company sits, if you store data from europeans (or people living in europe) you have to follow the GDPR with potential for severe punishment. There really is no loophole afaik.
  - lamename 8y ago
    > ... if you store data from europeans (or people living in europe) you have to follow the GDPR ... Does that mean the company has to follow it even for non-European users?
    - hvidgaard 8y ago
      No. For all users within EU it must follow the GDPR. If you are a US citizen and access FB from EU, they must follow the GDPR, as far as I understand it. And being FB, they really do not have a choice, since the EU do have leverage over them because they're doing business here.
    - r3bl 8y ago
      I live in the EU. If I'm your "customer" (as in, you store my personally identifiable data), you have to comply with GDPR, regardless of where your company is. Hope that simplifies things.
      - deleted 8y ago
        [deleted]
Silhouette 8y ago
They don't have a choice under existing data protection legislation in much of the EU either, but that doesn't appear to have stopped them.
rrix2 8y ago
GDPR's right to portability only extends to things you provide directly, or are collected on the basis of explicit consent, or wmthings which are required to fulfill a service or contract, like status and photos. There are explicit exclusions for a lot of things like things collected in service of antifraud & security efforts, and for things collected offline (IIRC), leaving a big set of holes that they can hide quite a bit. They're also not allowed to infringe on the data rights of other users which is why the friends list export is so anemic, for example.