3 ms·

What does it mean for data to be no longer needed when one of your income streams is to sell user data?

• SCHiM 5y ago
  It means that democratic societies have decided that that type of business practice is undesirable, and should go away.
• jacquesm 5y ago
  If you keep it around to sell then you are likely violating the 'legal basis for processing' part of the GDPR. Data can only be used for the purpose for which it was originally collected, selling the data to others to use without that exact same goal can not be such a purpose, and even then you will have to be quite careful that you maintain control. Various EU data brokers (Schober, for instance) have found ways to do this in a controlled manner usually by anonymizing the data or by selling it only in aggregate form. But selling it raw with the personal identifying information of the data subject is almost always a complete no-go.
  • adrianN 5y ago
    GDPR only requires informed consent to allow selling of data as far as I know. Am I wrong about that?
    • yulaow 5y ago
      GDPR requires informed consent for ANY type of storing or managing any kind of personal data or data which can be linked to personal data (eg email which can contain name and surname of the person behind an account), and you must be explicit on what you do and you cannot give the data to another entity without re-requiring consent for that specific purpose and declaring who will be exactly the new controller of that data.
      • ifjimelse 5y ago
        I’m not sure where you got that idea from. Consent is just one of the six available lawful bases under the GDPR. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ https://ico.org.uk/for-organisations/guide-to-data-protectio...
    • jacquesm 5y ago
      Yes, you are wrong about that.
• numpad0 5y ago
  I guess the implication is you should market like you would for electricity, that is, metered subscriptions only.