3 ms·
No, I don't agree. Here's what I want: Entity visits a website. The website logs whatever they want, subject to GDPR-style rules. They never send the full logs
by dsr_ 7y ago
No, I don't agree. Here's what I want:
Entity visits a website. The website logs whatever they want, subject to GDPR-style rules. They never send the full logs to a third party, and never send individual information, anonymized or not, without a specific business reason that benefits the entity.
Entity creates an account on the website. Now the website gets to display a privacy policy that conforms to GDPR-style rules, and creates the account only with explicit informed consent from the entity. The website specifically notes the jurisdiction in which they operate and the contact method for complaints, inquiries, deletions, and so forth.
No central processing systems, no unified trackers, no cross-site data analysis.
- jordanmitchell 7y agoSeems like you're suggesting that, to establish YOUR trust, either the website does not use any third-party vendors or services (in the delivery of the experience to you), or they use third-party vendors/services but do not send them any data ...? If so, in this age of open web services and distributed systems/infrastructure, are either of these scenarios reasonable to expect?
- Arcsech 7y agoThis comment seems rather disingenuous to me, and puts words in the mouth of the grandparent post. It’s not that my data should not be sent to any third parties ever, it’s that (as the GP said) my should not be sent to any third parties without a specific business reason that benefits me. I do not consider any form of ad targeting to be of benefit to me. Therefore, my data should not be sent to any third parties for that purpose.