4 ms·
most of the data relevant to gdpr legal cases are not supplied by the user, they are collected indirectly.
by cblconfederate 5y ago
most of the data relevant to gdpr legal cases are not supplied by the user, they are collected indirectly.
- jacquesm 5y agoThis is contrary to what I have seen in my day to day practice over the last couple of years. Now, of course it is possible that my sample size is too small (about 120 companies over that period) but I highly doubt that. Data collected indirectly to would for instance be data used to 'enrich' a profile, for instance by buying it from a third party. That data would still show up in a DSAR, but it would likely not be private data because no company is stupid enough in the current climate to sell that without a very good legal review. Data collected surreptitiously (for instance, GPS location information, device IDs and such) count as user supplied for the purpose of the GDPR, and collecting that without consent and disclosing that you are collecting it and supplying a legal basis for processing is illegal.
- breakfastduck 5y agoI mean this is just false.