4 ms·
But right now they aren't targeting improper usage of identifying data, but instead that identifying data exists at all. This doesn't seem like a GDPR violation
by kllrnohj 6y ago
But right now they aren't targeting improper usage of identifying data, but instead that identifying data exists at all. This doesn't seem like a GDPR violation at all?
- anticristi 6y agoCollection of identifying data also needs consent. It would be perfectly legal to have an AAID and never disclose it to anyone, but that wouldn't be very useful. :)
- kllrnohj 6y agoRight, but they aren't complaining about collection of identifying data. Google/Android (or iOS) isn't collecting the AAID themselves in an unauthorized way. The complaint is purely that the AAID is generated, fully independent of whether or not it's ever used.
- anticristi 6y agoGenerating UUID and persisting them on a device is perfectly fine. However, once you send this UUID to a server (i.e., the owner of the server collects it) without consent, that becomes illegal.