6 ms·
This is nothing story. There are categories of data per the California privacy law. This is a whole category called "Consumer Records" and because they collec
by bhouston 6y ago
This is nothing story.
There are categories of data per the California privacy law. This is a whole category called "Consumer Records" and because they collection some of it in this category they have to declare the whole category.
Tons of companies do the same - 4M for example:
https://www.google.com/search?q=paper+and+electronic+customer+records+containing+personal+information%2C+such+as+name%2C+signature%2C+physical+characteristics+or+description%2C+address%2C+telephone+number%2C+education%2C+current+employment%2C+employment+history%2C+social+security+number%2C+passport+number%2C+driver%E2%80%99s+license+or+state+identification+card+number%2C+insurance+policy+number%2C+bank+account+number%2C+credit+card+number%2C+debit+card+number%2C+or+any+other+financial+or+payment+information%2C+medical+information%2C+or+health+insurance+information&oq=paper+and+electronic+customer+records+containing+personal+information%2C+such+as+name%2C+signature%2C+physical+characteristics+or+description%2C+address%2C+telephone+number%2C+education%2C+current+employment%2C+employment+history%2C+social+security+number%2C+passport+number%2C+driver%E2%80%99s+license+or+state+identification+card+number%2C+insurance+policy+number%2C+bank+account+number%2C+credit+card+number%2C+debit+card+number%2C+or+any+other+financial+or+payment+information%2C+medical+information%2C+or+health+insurance+information https://www.google.com/search?q=paper+and+electronic+custome...
- rosywoozlechan 6y agoThis is like the prop 65 warning, companies are covering their asses, which results in the law becoming effectively meaningless. Because there could potentially be some medical records that you disclosed, say in a chat message, they have to say that they collect it. By making these strict laws California has basically opted everyone into everything being collected, because to say otherwise would put companies into into unnecessary legal jeopardy.
- sixothree 6y agoWould this data have been disclosed without the law?
- ajmurmann 6y agoI think the point is that the data isn't being disclosed under normal circumstances. With our without the law.
- rosywoozlechan 6y agoThey're not collecting medical information. They don't need it. There's zero chance that Doom Eternal wants to collect your medical information to sell to anyone. They just put this here likely because, like prop 65 warnings, to not put this here could put them in unnecessary legal trouble in the case of unforeseen situation where somehow someone's medical data got into their service somehow. The statement is essentially meaningless. Which is bad, because if there is a bad actor out there collecting your medical information, they've got the cover of this law to disclose it to you and not look bad because everyone else is disclosing it just to cover their asses. It just seems like a badly written law when a video game feels like it has to add this stupid disclaimer.
- sixothree 6y agoIgnoring that medical data is included in this category. Would we have known about this particular data collection without the law?
- deleted 6y ago[deleted]
- A4ET8a8uTh0 6y agoI do not accept "But everyone is doing it" defense. In fact, if anything, this is a good indication that it should not be happening. Yes, you are right. This is how things are. This is not how things should be.
- tqi 6y agoI don't think the implication is "everyone is doing it" as much as "these data categories (and category descriptions) are standardized across every company." I am not a lawyer, but I think it is reasonable to assume that this when drafting the law, law makers had to: - Choose a set of categories that were not to broad and not too narrow, and optimized for reader interpretability/clarity - Mandate companies to use standard descriptions of these categories in order to prevent them from obfuscating what it was that was being collected. It's sad to me how many people here immediately assume either malicious intent by iD or incompetence by their lawyers as the only possible explanations. Making something that is widely applicable, easy to interpret, and is meaningful isn't an easy task. Thats not to say that these categories are perfect, just saying there's not an objectively "right" answer.
- gentleman11 6y agoThey could minimize the data they collect, or they could assert that they are disclosing the information. They choose the latter.
- dahfizz 6y agoI don't think you've understood the problem. The "Consumer Records" category of data includes things like name and credit card number. So if doom eternal wants to be able to sell DLCs (a perfectly legitimate and not privacy invasive business model) then they also have to disclose that they may collector medical records. I doubt Id software actually collects medical records, and I have no idea how they might go about that or what a game studio would do with that information. It's just something they have to say by law since they handle credit card info.
- monadic2 6y agoSo what are they collecting that qualifies as a medical record? I don’t know how you could dismiss this in such a blasé manner.
- icegreentea2 6y agoLikely nothing qualifies as a medical record. The point is that CCPA creates categories of personal information that companies must inform customers of if they collect and/or disclose of. The CCPA requires disclosure at the "category" level (https://oag.ca.gov/privacy/ccpa#collapse1d https://oag.ca.gov/privacy/ccpa#collapse1d). The categories appear to be (https://reciprocitylabs.com/resources/what-are-the-ccpa-categories-of-personal-information/ https://reciprocitylabs.com/resources/what-are-the-ccpa-cate...). You can see that in that table, medical records are lumped under customer records category.
- monadic2 6y agoRight, so why are they disclosing medical information collecting if they aren’t collecting data classified as medical information?