3 ms·
Was that part of GDPR? I know they have to hold the minimum amount of information needed, and inform you clearly what they know. But weren't they always requi
by ramblerman 8y ago
Was that part of GDPR?
I know they have to hold the minimum amount of information needed, and inform you clearly what they know.
But weren't they always required to announce a breach?
- robin_reala 8y agoGDPR has a specific 72 hour time limit on breach announcements: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/ https://ico.org.uk/for-organisations/guide-to-the-general-da... In this case, they discovered the breach on September 8, 2018, and announced it on 30th November, 2018. That’s 1,464 hours, a little bit more than 72.
- PunchTornado 8y agohmm, they say they reported it to the regulatory authorities at the time of the incident. So i guess they are safe on that one.
- robin_reala 8y agoAh, true. I hadn’t internalised that you only have to announce it publically in cases with “a high risk of adversely affecting individuals’ rights and freedoms”.
- pbhjpbhj 8y agoAFAICT companies can still hold all your information /if you consent/ but can't withold service if you don't consent unless they can prove that information is required for provision of the service. So, can they show passport number is required in my jurisdiction, if not then I can have a room without providing it.
- ryacko 8y agoVarious laws against prostitution require valid identification.