33 ms·

For EU-citizens, any legal data collection would have to be opt-in, right? If I've had no business with any of these companies, there should be no reason for me

by occz 6y ago

For EU-citizens, any legal data collection would have to be opt-in, right? If I've had no business with any of these companies, there should be no reason for me to have to opt-out.

jonplackett 6y ago
Despite this, loads of companies still do opt-out with impunity.
- sleavey 6y ago
  I think the EU are still being very lenient with companies right now to give them time to adjust their practices. I'm looking forward to when they (hopefully) start to hand out fines.
  - nelaboras 6y ago
    It's an EU law but enforcement is up to the individual countries. Which is why Ireland keeps its own regulator on a tight leash - to keep the big US players there.
  - mehrdadn 6y ago
    > I'm looking forward to when they (hopefully) start to hand out fines. Given the pandemic, plausible economic collapse, Brexit, and so many other things going on in the world right now, I wouldn't hold my breath.
cb504 6y ago
Does anyone have info on GDPR's success in getting data removed or fining companies? I am not following closely, but last I saw was GDPR is a law whose enforcement is untested.
- terramex 6y ago
  List of all GDPR-based fines: https://www.enforcementtracker.com https://www.enforcementtracker.com
bjoli 6y ago
GDPR story time: Sixt car rentals had this braindead policy of having to send a letter to be able to opt out of marketing. For a short period of time I even had a website dedicated to calling them out on their bullshit practices, and went in to their Facebook page and posted the link everytime there were any questions about it. I even got a threatening takedown email, to which I kindly restated what I had written on the page: that I would not pay postage to Germany to unsubscribe and that the page would go down either when I got an official notice that I was unsubscribed from everything or when I hadn't received any marketing email for 6 months. In the end I spent much more time than needed to GDPR-request all information they had on me and detailed information how it was used. Only to ask them to remove all of it in the end.
cnorthwood 6y ago
No, consent is just one of the legal bases you can use to justify handling someone's personal data, legitimate interests is another. Their privacy policy should explain if they're using another basis. The ICO have a list of the valid bases https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ https://ico.org.uk/for-organisations/guide-to-data-protectio...

by occz 6y ago

For EU-citizens, any legal data collection would have to be opt-in, right? If I've had no business with any of these companies, there should be no reason for me to have to opt-out.

jonplackett 6y ago

Despite this, loads of companies still do opt-out with impunity.

sleavey 6y ago
I think the EU are still being very lenient with companies right now to give them time to adjust their practices. I'm looking forward to when they (hopefully) start to hand out fines.
- nelaboras 6y ago
  It's an EU law but enforcement is up to the individual countries. Which is why Ireland keeps its own regulator on a tight leash - to keep the big US players there.
- mehrdadn 6y ago
  > I'm looking forward to when they (hopefully) start to hand out fines. Given the pandemic, plausible economic collapse, Brexit, and so many other things going on in the world right now, I wouldn't hold my breath.

cb504 6y ago

Does anyone have info on GDPR's success in getting data removed or fining companies? I am not following closely, but last I saw was GDPR is a law whose enforcement is untested.

terramex 6y ago
List of all GDPR-based fines: https://www.enforcementtracker.com https://www.enforcementtracker.com

bjoli 6y ago

GDPR story time: Sixt car rentals had this braindead policy of having to send a letter to be able to opt out of marketing. For a short period of time I even had a website dedicated to calling them out on their bullshit practices, and went in to their Facebook page and posted the link everytime there were any questions about it. I even got a threatening takedown email, to which I kindly restated what I had written on the page: that I would not pay postage to Germany to unsubscribe and that the page would go down either when I got an official notice that I was unsubscribed from everything or when I hadn't received any marketing email for 6 months. In the end I spent much more time than needed to GDPR-request all information they had on me and detailed information how it was used. Only to ask them to remove all of it in the end.

cnorthwood 6y ago

No, consent is just one of the legal bases you can use to justify handling someone's personal data, legitimate interests is another. Their privacy policy should explain if they're using another basis. The ICO have a list of the valid bases https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ https://ico.org.uk/for-organisations/guide-to-data-protectio...