4 ms·
What happens if platform A wants to interoperate with platform B and requires information from person C's account about person D (because they are friends)? Per
by _Algernon_ 5y ago
What happens if platform A wants to interoperate with platform B and requires information from person C's account about person D (because they are friends)? Person D has likely not accepted any kind of privacy policy of platform A or consented to the exchange of data about them.
This would very quickly turn into a massive GDPR headache.
- barnabee 5y agoIf data is required to perform a service you've requested (lawful basis = 'contract') then further consent is not needed under GDPR. If by "requires information about" you mean "wishes to track/advertise to" then yes, that sounds like a headache. This is by design, and welcome.