3 ms·
>There are six lawful reasons to process data. User consent is only one of them. Yes indeed, there is a list of reasons. I pick the one based on consent, becau
by alfredallan1 8y ago
>There are six lawful reasons to process data. User consent is only one of them.
Yes indeed, there is a list of reasons. I pick the one based on consent, because it seems the most relevant for a company. Process the users’ data, but get their permission first.
>The one that's useful for most companies is "legitimate interest”.
I would have thought that one was a bit nebulous. No one has given a hard and fast definition of that term. And rather than risk a court’s interpretation or benefit of the doubt, I figured it might be safer to rely on the consent approach.
- Tomte 8y agoConsent is something you can easily get, but if a person declines to consent, you may not shut him out. But if you can argue with legitimate interest (which is more burdensome), the person cannot decline and still use the service. Choose: either easy basis and accepting that you might not get your way, or difficult basis and getting your way.
- alfredallan1 8y agoIf the service I offer is “communication tools with in built personal ads”, or “latest news reports with personal ads on the side” it is not possible to offer those services without access to personal info.
- Tomte 8y agoAnd if the service you offer is „communication tool with the ability to sell weapons online“, then the authorities are out of luck, because you have cleverly phrased your mission statement? That‘s not how it works.
- alfredallan1 8y agoOh no. The trouble with “chat app with weapons sales feature” is that it is illegal to buy or sell weapons (online or offline) without specific licenses. Now If I made a “communication tool” exclusively for registered gun dealers and people with valid (and verified) hunting licenses, it would in fact be perfectly legal. Similarly, if the tool were for use by government agencies and defense contractors or registered weapons manufacturers, it would also be legit. In the context of “chat tool with personalized ads on the side” - there is nothing specifically illegal about “personalized ads”. Is there? (As long as there is user consent of course). So what’s the specific legal hurdle? Which paragraph of the GDPR prevents this?