4 ms·

That's a lot of questions. To sum up, the GDPR is forcing: - granular consent (like you might opt into a newsletter, but not retargeting ads) - right to reque

That's a lot of questions. To sum up, the GDPR is forcing: - granular consent (like you might opt into a newsletter, but not retargeting ads) - right to request what a company knows about you - right to get that data in digital format (json, xml) - right to know when your data is exposed in a data breach - right to request that your data be deleted - right to request that an organization stop processing data about you fwiw - I wrote a bunch more about it (link) and am happy to answer questions. https://blog.varonis.com/gdpr-requirements-list-in-plain-english/ https://blog.varonis.com/gdpr-requirements-list-in-plain-eng...

jon_richards 9y ago
So as long as there are 1000s of companies like AdUX that purchase my data without telling me or acquiring my consent, I don't really have any hope of actually having my information deleted. I suppose someone could make a service that lets you request every known company delete your info.
- PeterStuer 9y ago
  If they want to comply all those 1000's of companies will have to get you to reaffirm your consent under the new GDPR rules. Didn't you notice already a lot of the services/sits you use asking you to re-agree ('We've updated our privacy policy etc.')
  - jon_richards 9y ago
    Are you sure that all applies to companies that purchase personal information and not just companies that collect it?
    - dvfjsdhgfv 9y ago
      It applies to all companies that process personal information, where processing also means access.
    - AstralStorm 9y ago
      They also process the data which is explicitly mentioned in GDPR.
    - fasteddie 9y ago
      Yep. If a company purchases PII and then uses it for any reason, say marketing, they have to store how they got consent from the users to use that information.
- Someone 9y ago
  Under the GDPR, who would they buy it from? A company that sells the data would have to have the user’s consent to sell on their personal data.

jon_richards 9y ago

So as long as there are 1000s of companies like AdUX that purchase my data without telling me or acquiring my consent, I don't really have any hope of actually having my information deleted. I suppose someone could make a service that lets you request every known company delete your info.

PeterStuer 9y ago
If they want to comply all those 1000's of companies will have to get you to reaffirm your consent under the new GDPR rules. Didn't you notice already a lot of the services/sits you use asking you to re-agree ('We've updated our privacy policy etc.')
- jon_richards 9y ago
  Are you sure that all applies to companies that purchase personal information and not just companies that collect it?
  - dvfjsdhgfv 9y ago
    It applies to all companies that process personal information, where processing also means access.
  - AstralStorm 9y ago
    They also process the data which is explicitly mentioned in GDPR.
  - fasteddie 9y ago
    Yep. If a company purchases PII and then uses it for any reason, say marketing, they have to store how they got consent from the users to use that information.
Someone 9y ago
Under the GDPR, who would they buy it from? A company that sells the data would have to have the user’s consent to sell on their personal data.