4 ms·
I find it hard to believe they'd say so in that tone. That said, where does the GDPR stand when there is an API already in place that allows for data extractio
by tehbeard 5y ago
I find it hard to believe they'd say so in that tone.
That said, where does the GDPR stand when there is an API already in place that allows for data extraction?
- that_guy_iain 5y agoIt was more of less that tone, they accidentally send an internal memo to me. GDPR doesn't require me to become a user to get my data.
- secondcoming 5y agoWhat data does github have about people who aren't users?
- foepys 5y agoSomebody could make a GDPR request to find out.
- mytailorisrich 5y agoWhere it gets tricky: 1. There would be entitled to ask for a form of ID in order to verify your identity. 2. Even if they are confident that you are really John Doe, how do they know that a mention of "John Doe" in all the data they have really means you, and not someone else? At some point it becomes too difficult and time-consuming so the easiest is to decline the request on the grounds of an exemption.
- sigzero 5y agoI think he is referencing that sites collect data even if you aren't a user. In that case, you could use the GDPR to get that data. That scenario makes no sense with github though.
- that_guy_iain 5y agoGithub still collects data for marketing purposes. And other people can push your commits which are your personal data without your knowledge.
- afiori 5y agoThis should be covered by most FOSS/OSS licenses.
- that_guy_iain 5y agoWhat do OSS licenses have to do with the data GitHub collects when you visit sites belong to it?
- afiori 5y agoThis is not about what github collect about its own usage, it was about other people mirroring your commits on github and the fact that those commits contains PIIs. It is reasonable to assume that FOSS licenses also cover the commit. IMHO at this point the transaction is more comparable to you selling your personal diary on ebay, you have no right to force the buyer to destroy it under the GDPR
- vineyardmike 5y ago>other people can push your commits which are your personal data without your knowledge If i write a biography about you, can you GDPR your way to a copy of the book from amazon?
- that_guy_iain 5y agogit commits, names, emails, photos. I could push a git repo that has your information in it via commits and not know they're processing that informaion at all.
- secondcoming 5y ago> I could push a git repo that has your information in it via commits Hmm, wouldn't that you in trouble rather than github?
- jesboat 5y agoMind sharing the memo?
- runiq 5y agoThat would be a privacy violation under GDPR :)