3 ms·
What do you think about Recital 26? For GDPR, our stance can be found here: https://usefathom.com/data/ https://usefathom.com/data/
by JackWritesCode 7y ago
What do you think about Recital 26? For GDPR, our stance can be found here: https://usefathom.com/data/ https://usefathom.com/data/
- munchbunny 7y agoI am neither a lawyer nor a DPO, I just worked on GDPR compliance in the past, so take what I say with a grain of salt. I went and reread parts of GDPR, and I think you are right, though not because of Article 26. I think it's pretty clear that after your ingestion the data has been in good faith anonymized to the degree that it is no longer personal, and therefore your analytics code should be exempt from consent rules. The interesting question to me is whether a controller deciding to put your pixel on a page for analytics purposes counts as you processing on the controller's behalf to an extent requiring consent. I don't see any clause specifically regarding third party access to personal data (as opposed to third parties processing personal data), so I agree with your stance that it's most likely fine.
- M2Ys4U 7y ago(obligatory IANAL) Recitals aren't legally binding in and of themselves, so I'd be wary of _relying_ on them _completely_. That said, the articles of a regulation should be read in light of the recitals (as the latter are the rationale behind the actual binding legislation).
- JackWritesCode 7y agoTrust me, we're not relying on Recital 26, that is just my thought experiment :) See here for our GDPR compliance: https://usefathom.com/data/ https://usefathom.com/data/